Privacy Policy

Website visitors and prospects. For the RecipeRM websites, contact forms, and newsletter, Creative Athletes is the party responsible for your personal information.

Platform data (Customer Content). For content and personal information that our customers submit to the platform (for example, recipes, chef profiles, and user accounts a customer creates for its team), the customer controls that data. We process it on the customer's behalf to provide the Service, under our agreement with that customer. If you have questions about data a RecipeRM customer holds about you, contact that customer directly.

You provide it: name, work email, company, brand, market information, and message content when you use our contact form; email address when you subscribe to updates; account information (name, email, role) when a workspace is provisioned for you on the platform.

Collected automatically: standard technical data such as IP address, browser type, pages visited, and approximate region, used for security, performance, and understanding how our websites are used; and service logs generated by use of the platform (for example, sign-in events and content change history), used for security, auditability, and support.

We do not collect payment card details through our websites. Billing for the Service is handled under customer agreements.

We use information to: provide, secure, and support the Service; respond to inquiries and route them correctly (sales or support); send updates you have requested (you can unsubscribe at any time); monitor for abuse, fraud, and unauthorized access; meet legal obligations; and improve our websites and Service. We do not use automated decision-making that produces legal or similarly significant effects about individuals.

• We never sell personal information. We have not sold personal information and have no plans to.
• We never share one customer's data with another customer or tenant. Tenant isolation is an architectural commitment of the platform.
• We never use customer platform content to train AI models for other customers or third parties.
• We do not run third-party advertising networks on our websites or platform, and we do not share personal information with data brokers.

We share personal information only with: (a) service providers (sub-processors) who help us operate the Service, listed below, under contracts that restrict their use of the data to providing services to us; (b) professional advisers under confidentiality obligations; (c) authorities where required by law, in which case we will notify the affected customer where lawful; and (d) a successor entity in a merger, acquisition, or asset sale, under this same policy.

We will update this list as providers change. Enterprise customers may request notice of sub-processor changes in their agreements.

We protect information with measures appropriate to a multi-tenant enterprise platform, including encryption in transit, tenant-scoped data isolation, role-based access controls, audit logging of content changes, and least-privilege access for personnel. No system is perfectly secure; we will notify affected customers without undue delay of any personal data breach affecting their data, consistent with applicable law.

Website inquiries and newsletter data are kept for as long as needed for the purpose and then deleted. Platform data is retained for the duration of the customer's subscription and deleted after termination in accordance with our customer agreements, subject to routine backup cycles and legal requirements.

You may request access to, correction of, or deletion of personal information we hold about you, and you may unsubscribe from marketing email at any time via the link in each message or by contacting us. If you are a California resident, you have rights under the CCPA/CPRA, including to know, delete, and correct; we do not sell or share personal information as those terms are defined in California law, and we do not use sensitive personal information for purposes requiring a right to limit. We will not discriminate against you for exercising your rights. To exercise any right, contact hello@reciperm.io; we will verify your request and respond within the time required by applicable law.

A note on Europe. RecipeRM currently serves customers in the Americas. Full technical GDPR compliance for European operations is on our near-term roadmap and is not yet complete; we do not currently market the Service to customers in the European Economic Area or the United Kingdom. If you contact us from those regions, we will handle your inquiry data consistent with this policy.

The Service and our websites are intended for business use by adults and are not directed to children under 16. We do not knowingly collect personal information from children.

We will post any changes to this policy on this page with a new effective date. Material changes will be highlighted, and where required, notified to customers.

Creative Athletes LLC
7308 E Independence Blvd, Suite C #1061, Charlotte, NC 28277, USA
hello@reciperm.io