Privacy Policy

What we collect

Four kinds of information, and nothing else.

• Your account — email address, name and profile picture, handled by Auth0 when you sign in with Google or with an email and password. If you use a password, Auth0 holds it and we never see it.
• Your restaurant profile — the name, address, phone number, contact email and GST/HST number you enter in Settings. You give us these so they can print on the purchase orders you send your suppliers.
• Your kitchen data — recipes, ingredients, suppliers, inventory counts, waste logs, prep lists, day sheets and cost figures. This is the work the app exists to hold.
• Your subscription status — which plan you are on and whether it is active. Payment itself is handled by Stripe.

What we never see

• Your card number. Stripe collects and stores it; we receive only a customer reference and whether the payment succeeded.
• Your password, if you sign in with one.
• Your location, contacts, calendar, camera or photos. The app never asks for them.
• Anything about your diners. The Sharp Chef is a back-of-house tool — it has no point of sale and no customer records.

We do not sell your data

We do not sell, rent or trade your information, and we do not run advertising. There are no advertising or tracking cookies on the app. The only companies that touch your data are the service providers listed below, each doing one specific job for us.

Your recipes and cost figures are your commercial property. We do not use them to build features for other customers, and we do not share them with anyone.

The AI features

When you ask for a recipe suggestion or menu help, the text of that request — ingredients, recipe details — is sent over an encrypted connection to Anthropic, which operates Claude, and the answer comes back to you.

Anthropic does not use data submitted through its commercial API to train its models. We do not keep a separate copy of the request; what is stored is whatever you choose to save into your own recipe library.

Where your data is stored

Your kitchen data is held in MongoDB Atlas. The application server runs on Railway and this website is served by Vercel. Our services are configured in the United States — our database in Oregon and our application server in California.

Where data is stored outside Canada it is subject to the laws of that country, and may be accessible to courts and authorities there. We tell you this so you can make an informed decision, not because we expect it to happen.

Service providers

Each of these does one job. We share only what that job needs.

Sentry is configured with personal data reporting switched off, so error reports do not carry your IP address or request headers.

How long we keep it

While your subscription is active, we keep your data so the app works.

If you cancel, we keep everything for 90 days and then delete it permanently. Ninety days covers a seasonal closure or a card that lapsed over a slow month, so coming back does not mean starting over. After that it is gone and cannot be recovered.

You can ask us to delete your data sooner, or to send you a copy of it, at any time. Email us and we will do it.

Billing records are kept longer where Canadian tax law requires it. These are invoices and payment records, not your recipes.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to luis@lezamakitchenlabs.com and we will respond within 30 days.

If you are not satisfied with how we have handled a privacy question, you can contact the Office of the Privacy Commissioner of Canada.

Security

Connections to the app are encrypted. Access to the database is restricted and credentials are rotated when staff or services change. Payment card data never reaches our servers.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data, we will tell you and the relevant authorities as the law requires.

Children

The Sharp Chef is a business tool sold to restaurants. It is not directed at children and we do not knowingly collect information from them.

Changes to this policy

If we change how we handle your data we will update this page and change the effective date at the top. If a change is significant, we will email account holders rather than rely on you noticing.