Privacy Policy

1. Who we are

CanvasCook ("we", "us") is a personal cooking website operated by Chef Munishwar. It offers chef-created recipes and videos, an AI recipe generator, and optional user accounts. This policy explains what information we collect, why, and the choices you have.

2. Information we collect

• Account details: name, email address, password (stored as a one-way hash), profile photo and bio if you provide them, and your role (user or chef).
• Google Sign-In: if you sign in with Google, we receive your name, email and profile picture from Google. We never receive your Google password.
• Content you create: recipes, videos, chat messages (chefs only), reports you file, saved recipes and ratings.
• AI inputs: the ingredients, dish names, preferences and photos you submit to the AI recipe generator. Photos are sent to the AI provider for ingredient detection and are not stored on our servers.
• Usage data: search queries, pages viewed, approximate device type, IP address and timestamps, used for security and to understand what people look for.
• Security data: for chef and admin accounts, two-factor codes, passkey public keys and sign-in history.

3. How we use it

• To run the site, keep you signed in and show you your saved recipes.
• To generate recipes and images with our AI partners (OpenAI, Google Gemini, Anthropic) on your request.
• To improve the recipe library — e.g. our Search Analytics tell us which dishes people want that we do not yet have.
• To keep the site safe: detecting abuse, moderating reported content, and protecting chef/admin accounts.
• To contact you about your account or respond to a message you sent us.

4. Sharing

We do not sell your personal data. We share data only with service providers who help us run CanvasCook — AI model providers (for recipe generation), our hosting and database provider, image storage (Cloudinary), email delivery (Resend) and Google (for sign-in) — and only to the extent needed for that service. We may disclose information where required by law.

5. Retention

Account data is kept while your account is active. AI-generated recipes you create are kept so the link you were given keeps working. Search logs are kept for up to 90 days in identifiable form and then aggregated. You can ask us to delete your account and associated data at any time.

6. Your rights

Depending on where you live you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights email us at info@canvascook.com. We will respond within 30 days.

7. Children

CanvasCook is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will remove it.

8. Security

Passwords are hashed with bcrypt, sessions use signed tokens, and chef/admin accounts support two-factor authentication and passkeys. No system is perfectly secure; if you discover a vulnerability please report it to info@canvascook.com.

9. Changes

We may update this policy from time to time. The date at the top shows the latest revision. Material changes will be highlighted on the site.

10. Contact

Questions about privacy: info@canvascook.com.