Legal

Privacy Policy

Last updated: July 2026

1. Information we collect

We collect information you provide directly: your name and email address when you create an account (via Clerk authentication). We also collect recipe data, ingredient lists, production logs, and other content you enter into the platform.

2. How we use your information

We use your information solely to provide and improve the NutriBoard service, authenticate your account, save your recipes, and communicate with you about your account. We do not use your data to train AI models, build datasets, or for any purpose beyond providing the service to you.

3. Recipe confidentiality

Your recipes are confidential. We do not access, view, analyze, or share your recipe data, ingredient lists, formulations, or production records except as technically required to render the service (e.g. computing nutrition values, generating labels). No NutriBoard employee will access your recipe data unless you explicitly request support that requires it. Your proprietary and NDA-protected formulations are safe on NutriBoard.

4. Data storage and encryption

Your data is stored in an encrypted PostgreSQL database hosted on Neon (SOC 2 compliant infrastructure) in the United States. All data is encrypted in transit via TLS. Authentication is handled by Clerk, a SOC 2 Type II certified provider. Your data is logically isolated; no other user can view your recipes, production logs, or account information.

5. Third-party services

We use Clerk for authentication, Stripe for payment processing, and Neon for database hosting. We query the USDA FoodData Central API and Health Canada's Canadian Nutrient File for ingredient data; these queries do not include your personal information or recipe data. We use PostHog for anonymous pageview analytics; no recipe data or personal information is sent to PostHog.

6. Data sharing

We do not sell, rent, or share your personal data or recipe data with third parties for marketing, analytics, or any other commercial purpose. We may disclose data only as required by Canadian law or a valid court order.

7. Cookies

We use session cookies for authentication purposes only. We use PostHog for anonymous pageview analytics with no advertising or cross-site tracking cookies.

8. Your rights

Under PIPEDA, you have the right to access, correct, or delete your personal information. You can delete your account and all associated data (recipes, production logs, labels) permanently from your account settings at any time. Deletion is immediate and irreversible. To exercise any other privacy rights, contact us at privacy@nutriboard.ca.

9. Data retention

We retain your data only for as long as your account is active. When you delete your account, all associated data including recipes, ingredients, production logs, labels, and personal information is permanently deleted from our systems.

10. Contact

Questions about this policy? Email us at privacy@nutriboard.ca.