Privacy Policy
Your privacy and culinary recipe confidentiality are our top priorities. This policy explains how we collect, protect, and process your information in compliance with statutory privacy laws.
We treat your recipes and culinary formulations as proprietary trade secrets. calcurasa will NEVER sell, rent, monetize, or publicly disclose your recipe data, ingredient costs, or proprietary formulas to third parties or competitors. Recipes flagged as 'Secret' are protected with operational masking within your kitchen team.
1. Scope & Commitment
This Privacy Policy describes how calcurasa ('we', 'us', 'our') collects, stores, and protects personal and business information when you visit calcurasa.com or use our web applications. We are committed to complying with the General Data Protection Regulation (GDPR), the Indonesian Personal Data Protection Act (UU PDP No. 27/2022), and global privacy frameworks.
2. Information We Collect
We collect: (a) Account Information: name, email address, business name, and encrypted password credentials; (b) Culinary & Business Data: ingredients, purchase units, supplier costs, yield percentages, recipe instructions, packaging items, and team member roles; (c) Technical Information: IP address, device type, browser metadata, and essential session identifiers.
3. How We Use Your Data
We use collected information solely to: provide, maintain, and calculate COGS for your workspace; authenticate your identity and enforce role-based permissions; process subscriptions and transactions; send critical operational emails (e.g., email verification and password resets); and safeguard the platform against abuse.
4. Culinary Confidentiality & Secret Recipe Protection
We treat your recipes and culinary formulations as proprietary trade secrets. calcurasa will NEVER sell, rent, monetize, or publicly disclose your recipe data, ingredient costs, or proprietary formulas to third parties or competitors. Recipes flagged as 'Secret' are protected with operational masking within your kitchen team.
6. Your Data Rights (GDPR & Global Privacy Standards)
Under GDPR and applicable statutory privacy frameworks, you have the right to: (a) access and inspect your personal data; (b) rectify inaccurate information; (c) data portability (export in standard CSV/PDF formats); (d) erasure (the 'right to be forgotten' via permanent deletion of your account and associated workspace data); (e) restrict or object to processing; and (f) withdraw consent at any time without penalty.
7. Third-Party Service Providers
We work with trusted third-party service providers (such as encrypted cloud hosting facilities, transactional email delivery services, and PCI-DSS compliant payment gateways) solely to operate our platform. All service providers are bound by strict data processing and confidentiality agreements in accordance with GDPR.
8. Data Retention & Permanent Deletion
Your workspace data is retained for as long as your account remains active. If you request account deletion or cancel your account, your data will be permanently purged from active databases within 30 days.
9. Security Architecture
We implement defense-in-depth security measures: scrypt password hashing, HMAC-SHA256 signed session tokens, multi-tenant database organization scoping with composite unique constraints, sliding-window rate limiting on auth endpoints, and strict TLS encryption for all data in transit.
10. Data Protection Inquiries
If you have questions about your personal data, wish to exercise your statutory privacy rights, or need to contact our Data Protection Officer, please email privacy@calcurasa.com.