Privacy Policy

Account and business data. Name, email, phone, restaurant/business name, and billing details when you sign up, request a demo, or submit our setup form.

Uploaded documents. Invoices, menus, recipe lists, and similar business records you upload for processing. These may contain vendor names, item descriptions, and pricing.

Usage data. Pages visited, features used, and similar interaction data, collected through privacy-focused, cookieless analytics (see Section 4).

Support communications. Anything you send us via email or in-app messaging.

• To provide the Service: extracting data from uploaded invoices, computing food cost analytics, and generating recommendations;
• To process payments and manage subscriptions via Stripe;
• To communicate with you about your account, support requests, and (with consent where required) product updates;
• To maintain security, prevent fraud, and debug/operate the Service;
• To comply with legal obligations.

Uploaded invoices and documents are processed using Amazon Textract (optical character recognition) and AWS Bedrock (Anthropic Claude models) to extract line items, vendor and pricing data, and to generate cost analysis. This processing happens within our AWS infrastructure; document contents are not used by Anthropic or Amazon to train their general-purpose models. Automated output is reviewed against your source documents and is never the sole basis for account-level billing decisions.

Our marketing website uses Plausible Analytics, a privacy-focused analytics tool that does not use cookies and does not collect personally identifying information. It reports aggregate traffic patterns (e.g., page views, referral sources).

Referral tracking. If you arrive at our site via a partner's referral link, our referral partner (Rewardful) may set a first-party tracking cookie to attribute the referral to that partner, so we can credit them appropriately. This cookie does not track you across unrelated websites. See Rewardful's privacy policy for details.

Our application backend uses server-side application performance monitoring (SigNoz) to record request timing and error data for operating and debugging the Service. This does not track your browsing behavior outside the Service.

We do not sell your personal information. We share data only with:

• Service providers who process data on our behalf under contract: Amazon Web Services (hosting, us-east-1), AWS Bedrock and Amazon Textract (AI/OCR processing), Stripe (payment processing — PlateCost never stores your card number), Rewardful (referral attribution), and email delivery providers;
• Affiliates/distributors you were referred by, if you were referred through our partner program — limited to category-level cost health summaries, never raw invoices, vendor names, or line-item prices, and only until you opt out in your account settings;
• Legal or safety purposes, if required to comply with law or protect rights and safety;
• A successor entity, in the event of a merger, acquisition, or asset sale, subject to the same protections described here.

We retain account and Customer Data for as long as your account is active, and for a reasonable period after closure to allow for reactivation, comply with legal obligations, resolve disputes, and enforce our agreements. You may request earlier deletion as described in Section 7.

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to opt out of certain processing (including, for California residents, rights under the CCPA, and for EU/UK residents, rights under the GDPR where applicable). To exercise these rights, contact us at privacy@platecost.io. We currently process these requests manually and will respond within a reasonable time, and in any case within the timeframe required by applicable law.

If you were referred to PlateCost by a distributor or other partner, you can view and change how much of your cost data they can see — or opt out entirely — from your account settings.

We use industry-standard safeguards, including encryption in transit, database-level row-level security enforcing per-account data isolation, and access controls, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by a new "Last updated" date and version identifier on this page.

Lucasi Restaurants, LLC
5511 Parkcrest Dr., Suite 103
Austin, TX 78731
privacy@platecost.io