Privacy Policy
1. Our Commitment to Privacy
The Black Spatula is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our document processing service.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
2. Information We Collect
Personal Information
- Email Address: Required for account creation and login
- Password: Stored in hashed format using industry-standard encryption
- Google Account ID: If you choose to sign in with Google
Technical Information
- Access Timestamps: To monitor account activity and security
User Content
- Uploaded Documents: Files you upload for processing
- Processing Results: Output from document processing operations
3. How We Use Your Information
We use the collected information for:
- Account Management: Creating and maintaining your user account
- Service Delivery: Processing your documents as requested
- Security: Protecting against unauthorized access and abuse
- Communication: Sending verification codes and important service updates
4. Data Storage and Security
Security Measures
We implement multiple layers of security to protect your data:
- Encryption: Passwords are hashed
- HTTPS: All data transmission is encrypted using SSL/TLS
- Access Controls: Admin access is restricted to authorized personnel
- Rate Limiting: Protection against brute force attacks
- reCAPTCHA: Prevention of automated bot registrations
Data Location
Your data is stored on secure servers hosted by Amazon Web Services (AWS) in the United States.
Backup Policy
We perform daily automated backups of user data. Backups are retained for 7 days and are encrypted at rest.
5. Data Retention
- Active Accounts: Data is retained as long as your account is active
- Deleted Accounts: Personal data is removed within 30 days of account deletion
- Unverified Accounts: May be automatically deleted after 30 days
- Documents: Processed documents may be automatically deleted after 90 days
6. Your Rights and Choices
You have the right to:
- Access Your Data: Request a copy of your personal information
- Update Information: Correct inaccurate or incomplete data
- Delete Your Account: Request removal of your personal data
- Export Your Data: Receive your data in a portable format
- Opt-Out: Unsubscribe from non-essential communications
7. Cookies and Tracking
We use essential cookies for:
- Session Management: Keeping you logged in
- Security: CSRF protection tokens
- Preferences: Remembering your settings
We do not use tracking cookies or analytics services that profile users.
8. Children's Privacy
The Black Spatula is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.
9. International Users
If you access our Service from outside the United States, please be aware that your data is transferred to and processed in the United States. By using our Service, you consent to this transfer.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates the most recent revision.