Draft — pending legal review. This document
is a template and is not yet a published policy. Bracketed fields (for example
[DATE]) are placeholders to be completed by counsel before
adoption.
Effective: [DATE] · Version: [X]
This Privacy Policy explains how [EDIBLEIQ LEGAL ENTITY NAME] (“EdibleIQ,” “we,” “us”) collects, uses, and shares information when you visit this site, create an account, or use the EdibleIQ platform (the “Service”). It is part of, and subject to, our Terms of Use & Software License. For most business data you submit to the Service, EdibleIQ acts as a processor on your behalf and you are the controller; for account, billing, and website-visitor data, EdibleIQ acts as a controller.
We do not intentionally collect special-category personal data; please do not submit sensitive personal data except as strictly necessary and lawful.
We use information to provide, maintain, secure, and improve the Service and its AI features; authenticate users and administer accounts and billing; provide support; monitor usage for fair-use and abuse prevention; send service and (where permitted) product communications, which you can opt out of; and comply with legal obligations and enforce our agreements. Where GDPR/UK GDPR applies, our legal bases are contract performance, our legitimate interests in operating and securing the Service, consent (for optional cookies/marketing), and legal compliance.
Some features process content with machine-learning models, including document scanning, the assistant, formula drafting, and the automated compliance checks. To provide these, your content or prompts may be sent to third-party model providers acting as our sub-processors. We contract with these providers on terms intended to restrict use of your content to providing the service to us and to prohibit using your content to train their general-purpose models. AI output is probabilistic and may be inaccurate; its nature and limits are described in our Terms.
We share information only with sub-processors and service providers (hosting, AI model providers, email delivery, error monitoring, payment processing) under contract and as needed to provide the Service; for legal reasons; in a business transfer subject to this Policy; or with your direction or consent. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
We retain account and customer data while your account is active and as needed to provide the Service, then delete or de-identify it within [RETENTION PERIOD] after termination, except where longer retention is required by law, for backups on a rolling deletion cycle, or to resolve disputes and enforce agreements.
We use strictly necessary cookies to operate the Service (such as authentication/session) and, where permitted, [analytics/preference] cookies. Where required, we request consent for non-essential cookies and honor your choices; you can also control cookies through your browser settings.
We use administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit, access controls, audit logging, and encrypted backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials.
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. To exercise them, contact [PRIVACY CONTACT]. Where EdibleIQ processes your data as a processor, we will refer your request to the relevant customer (controller) or assist them in responding. If you are in the EEA/UK you may complain to your supervisory authority; if you are in California you may have rights under the CCPA/CPRA. We verify requests before acting and respond within the timeframes the law requires.
EdibleIQ may process information in [COUNTRY/REGION]. Where data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses or an equivalent mechanism. On-premise deployments are hosted on your own infrastructure and processed where you operate them.
The Service is a business tool and is not directed to children under [16/13], and we do not knowingly collect their personal information.
We may update this Policy from time to time; material changes will be posted with a new effective date and, where appropriate, additional notice. Questions or requests: [PRIVACY EMAIL / ADDRESS]. General inquiries: info@edibleiq.ai.
See also: Terms of Use & Software License · What our compliance checks cover.