This policy explains what information RecipeWeave ("we", "us") collects when you use recipeweave.com or connect RecipeWeave to an AI assistant such as Claude or ChatGPT, how we use it, who we share it with, and how long we keep it. Questions? Email [email protected].
Information we collect
Account information
- Your email address, display name, and password (stored only as a secure hash).
- Whether your email address is verified, and your subscription tier and monthly usage counts.
- Sign-in sessions, including the IP address and browser user agent recorded when you sign in.
Content you create
- Recipes, cook plans, ingredient lists, timers, and edits you make to them.
- Images you upload or that are imported with a recipe.
- Web addresses of recipes you import, and whether you make an item public or private.
- For public items: view, save, and share counts.
Payments
Paid subscriptions are processed by Stripe. We store your Stripe customer and subscription identifiers. Card details go directly to Stripe and never reach our servers.
Technical information
Our servers keep request logs (IP address, browser user agent, requested URL, response status, and timing) to operate, secure, and troubleshoot the service. Logs do not include passwords or access tokens. We do not use advertising or third-party analytics trackers.
Using RecipeWeave through AI assistants (MCP connectors)
RecipeWeave offers a connector for AI assistants that support the Model Context Protocol (MCP), such as Claude and ChatGPT. When you connect it:
- You sign in to RecipeWeave and approve the permissions the assistant requests. We store the approval, the assistant's client identifier, and access and refresh tokens so the connection keeps working. You can revoke access at any time by disconnecting RecipeWeave in your assistant's settings, or by contacting us.
- We receive only what the assistant sends to a RecipeWeave tool, such as a search term, a recipe you ask it to save, or a recipe ID. We do not receive your conversation, chat history, or the assistant's memory, and we do not use tool requests to build profiles.
- Results from RecipeWeave tools (for example a recipe or your grocery list) are returned to the assistant, which processes them under its own privacy policy, such as Anthropic's or OpenAI's.
- Actions that delete content, publish content, change your email, or send email are held as pending requests until you approve them on recipeweave.com while signed in. Pending requests expire after five minutes.
- Public recipe search and public recipe details work without signing in. Those requests are not linked to an account.
How we use information
- To provide the service: store your recipes and cook plans, import recipes, and generate cooking timelines.
- To send account email (verification, password reset) and emails you request, such as ingredient lists.
- To process subscriptions and enforce plan limits.
- To secure the service, prevent abuse, and fix problems.
We do not sell your personal information or use it for advertising.
Who we share information with
We share information only with service providers that help us run RecipeWeave:
| Provider | Purpose | Data involved |
|---|---|---|
| OpenRouter and the AI model providers it routes to | Turning recipes into structured steps, timers, and combined cook plans | Recipe text (title, ingredients, instructions, times). Not your name or email. |
| Cloudflare | Network delivery and security; image storage (R2); database backups | Request data; images; encrypted-in-transit database backups |
| Resend | Sending email | Your email address and the email's contents |
| Stripe | Payments | Billing details you give Stripe; your subscription status |
| Our hosting provider | Running our servers and database | All data described in this policy |
When you import a recipe from a web address, our servers fetch that page. For imports made on recipeweave.com, the address may also be sent to a third-party recipe-extraction service if our own importer cannot read the page. Imports made through AI assistants do not use that service.
Content you make public (recipes or cook plans) is visible to anyone, along with your display name. We may also disclose information if required by law.
How long we keep information
- Account information and content: until you delete it or ask us to delete your account.
- Deleted recipes and cook plans are removed from our database immediately. Uploaded images are kept in storage until your account is deleted; email us to have them removed sooner.
- Database backups roll over and are kept for about nine days.
- Sign-in sessions expire after seven days of inactivity; AI assistant access tokens expire automatically and are refreshed only while the connection is active.
- Request logs are kept only as long as needed for security and troubleshooting.
Your choices and rights
- View, edit, or delete your recipes and cook plans at any time.
- Change your display name and email address from your account page.
- Disconnect AI assistants from their settings pages.
- To get a copy of your data or delete your account, email [email protected] from your account's email address. We respond within 30 days.
Cookies
We use only cookies needed to run the site: a sign-in session cookie and a security token that protects form submissions. We do not use advertising or tracking cookies.
Security
Connections use HTTPS, passwords are hashed, and access tokens for AI assistants are limited to the permissions you approve. No system is perfectly secure; contact us if you believe your account has been compromised.
Children
RecipeWeave is not directed to children under 13, and we do not knowingly collect their information.
Changes
We will post changes on this page and update the effective date. For significant changes we will notify account holders by email.
Contact
Email [email protected] or visit our support page.