Privacy Policy — Palatte

1. Who we are

Palatte (“we”, “us”) is a dish-first food discovery platform. Questions about this policy: privacy@palatte.co.

2. Data we collect

Account information — your name, email address, and profile photo, provided when you sign in via Google or email (managed by Clerk).

Reviews and ratings — dish ratings, reorder intent, reaction tags, and optional review text you submit.

Bookmarks — dishes you save to your profile.

Location preference — the city you select to browse local dishes. Stored only in your browser (localStorage); never sent to our servers.

Menu images — photos or PDFs you upload to scan a menu are sent to Anthropic for extraction and are not stored by us after processing.

Usage data — standard server logs (IP address, browser, pages visited) retained for up to 30 days by our hosting provider, Vercel.

3. How we use your data

To display your reviews and taste profile
To personalise dish recommendations based on your review history
To operate the platform (authentication, serving pages)
To extract dish information from menu images you submit

We do not sell your data. We do not use your data for advertising.

4. Third-party processors

Processor	Purpose	Data shared
Clerk	Authentication	Name, email, profile photo
MongoDB Atlas	Database (EU region)	Reviews, bookmarks, dish data
Anthropic	Menu scanning, dish AI	Menu images (not stored)
Vercel	Hosting & CDN	IP address, server logs

5. Cookies

We use essential cookies only — set by Clerk to keep you signed in. No analytics or advertising cookies are used. Your location preference is stored in browser localStorage, not a cookie.

6. Data retention

Your account data (reviews, bookmarks) is kept for as long as your account is active. You can delete your account at any time from your profile page, which permanently erases all your reviews, bookmarks, and personal data from our database and from Clerk within 30 days.

7. Your rights (GDPR)

If you are in the EEA or UK, you have the right to:

Access — request a copy of the data we hold about you
Rectification — correct inaccurate data
Erasure — delete your account and all associated data
Portability — receive your data in a machine-readable format
Object — object to certain processing

To exercise any right, email privacy@palatte.co. We will respond within 30 days.

8. Changes

We may update this policy. Material changes will be communicated by updating the effective date above. Continued use of Palatte after changes constitutes acceptance.