Privacy Policy

1. Introduction

Welcome to Food Blog Studio, operated by Food Blog Coaching (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered food blogging platform (“Service”).

By using Food Blog Studio, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, first name, and last name when you create an account
• Billing Information: When you subscribe, payments are processed by Stripe. We do not store your full card details; we retain a billing customer reference and your subscription status
• Content You Create: Recipes, blog posts, social media captions, email newsletters, and other content you generate using our AI tools
• Personalization Data: Your Ideal Reader Profile and Voice Tone Profile, including writing samples and audience information you provide to personalize AI responses
• Uploaded Content: CSV files for analysis, writing samples, and sitemap URLs you submit to our tools
• Conversation History: Messages and interactions with our AI writing tools

2.2 Information Collected Automatically

• Usage Data: Token usage, feature usage, and interaction patterns
• Device Information: Browser type and operating system, collected in aggregated, anonymous form through cookieless analytics
• Log Data: IP address, access times, and pages viewed (standard server logs kept by our hosting provider)
• Cookies: See our Cookie Policy for details

3. Google User Data (Analytics Dashboard)

Food Blog Studio includes an optional Analytics Dashboard. If you choose to connect your Google account to use it, this section describes exactly what Google user data we receive and how we handle it.

3.1 What We Access

If you choose to connect Google, we request read-only access to your Google Analytics 4 data (scope: analytics.readonly) and your Google Search Console data (scope: webmasters.readonly), plus your Google account email address. We never receive write access and cannot change anything in your Google account.

3.2 How We Use It

We use this data solely to show you your own blog's traffic and search performance and to generate insights about your own content. We do not use Google user data for advertising, we do not sell it, and we do not share it with third parties except the service providers that host our infrastructure.

3.3 Storage and Retention

We sync daily traffic, page, and search-query metrics into our database (hosted by Supabase in the United States) so your dashboard loads without contacting Google on every visit. OAuth tokens are stored encrypted at rest. Detailed query-level data is retained for 6 months and daily summary data for 16 months, after which it is automatically deleted.

3.4 AI Exclusion

Google user data is never sent to Anthropic or any other AI model provider, and is never used to develop, improve, or train AI or machine learning models.

3.5 Human Access

Our staff do not read your Google user data except for security or abuse investigations, to comply with applicable law, or with your explicit consent when you ask us for support.

3.6 Disconnecting and Deletion

You can disconnect Google at any time from the dashboard, which revokes our access token with Google. You can also choose “Disconnect and delete synced data,” which permanently deletes all Google Analytics and Search Console data we have stored for your blog. You can additionally revoke access at https://myaccount.google.com/permissions. If you delete your account, stored Google user data is deleted as well.

3.7 Limited Use

Food Blog Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our AI-powered content generation services
• Process your content through our AI systems (Anthropic Claude) to generate responses
• Personalize your experience based on your Ideal Reader Profile
• Track and manage your usage limits (weekly token allocation)
• Process subscription payments and manage your billing
• Send you service-related communications
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve our Service
• Detect, prevent, and address technical issues or abuse

5. AI Processing and Third-Party Services

Important:

When you use our AI writing tools, your content is processed by Anthropic's Claude AI. This means:

• Your prompts and content are sent to Anthropic's servers for processing
• Anthropic may use this data in accordance with their own privacy policy
• Your use of our Service is also subject to Anthropic's Usage Policy
• We recommend reviewing Anthropic's Privacy Policy and Anthropic's Usage Policy

We also use the following third-party services:

• Firebase (Google): Authentication and database storage
• Stripe: Subscription billing and payment processing
• Vercel: Hosting and analytics
• Resend: Transactional email delivery (welcome and password-reset emails)
• PromoteKit: Affiliate program management. If you subscribe using an affiliate's promo code, PromoteKit records it so the affiliate can be credited. It is connected to our Stripe account and can access customer and transaction records there to attribute and calculate commissions

6. Community Backlinks (Optional Sharing With Other Members)

Community Backlinks is an optional feature available only to Food Blog Coaching members. If you turn on sitemap sharing, the following information is visible to other participating members:

• Your first and last name
• Your blog's name and domain
• The titles and URLs of published posts from your sitemap (information that is already public on your blog)

We never share your email address, billing information, conversations, profiles, or usage data through this feature. Sharing is off by default; you can turn it on or off at any time from the Community Backlinks page, and your posts stop being shared as soon as you turn it off or your account is deactivated. Only members who also share their own sitemap can browse shared posts.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained until you delete your account
• Conversation History: Retained to provide context for ongoing conversations
• Usage Data: Token usage is tracked weekly and cumulatively
• Billing Records: Subscription and payment records are retained by us and Stripe as required for accounting and tax purposes
• Uploaded Files: Content you paste or upload for one-off analyses (such as CSV files) is processed to produce your results and is not retained afterward; however, writing samples and profiles you save in Personalization are stored in your account until you change or delete them

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS), secure authentication through Firebase, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

9.1 All Users

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your account and associated data
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at the email address below and we will respond within a reasonable timeframe.

9.2 European Economic Area (EEA) and UK Residents

Under GDPR and UK GDPR, you have additional rights including:

• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: consent, contract performance, and legitimate interests in providing and improving our services.

9.3 California Residents (CCPA)

California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Say no to the sale of personal information (we do not sell your data)
• Access your personal information
• Request deletion of your personal information
• Not be discriminated against for exercising your rights

9.4 Canadian Residents (PIPEDA)

Canadian residents have rights under PIPEDA including access to your personal information, the ability to challenge its accuracy, and to withdraw consent (subject to legal restrictions).

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our service providers are located. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required by law.

11. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: hello@foodblog.studio