← merciapp.net

Privacy Policy

This is the plain-language version, and it is also the real version.

What we collect

Account details (name, email), the order emails you forward or paste, your recipe book, staffing schedules you upload, and standard technical logs (IP, timestamps) for security.

How it is protected

Recipe books and guest information (customer names, order summaries) are encrypted at rest with AES-256 using a key unique to your company. Our own staff see operational counts, never your recipes or your guests. Transport is TLS-only.

Processors we use

Anthropic (AI parsing of the documents you submit; not used for model training), Postmark (email delivery), Cloudflare (network security). Each receives only what is necessary for its function.

Retention and deletion

Data is kept while your account is active. On request we delete your company and destroy its encryption key. Encrypted backups age out within 14 days.

Your rights

Access, correction, export, and deletion: email [email protected] and we will handle it. EU and UK users: we honor GDPR data subject requests on the same address.