PRIVACY POLICY

01 — CONTROLLER

The Juice™ is operated by Karol Roman (sole proprietorship registered in Poland). Contact for any privacy matter: hello@thejuice.art. We respond within 30 days.

02 — WHAT WE COLLECT

Account data: email, username, display name, password (hashed with bcrypt, we never see the plaintext), optional country and city.
Work product: formulas you create, shelf inventory batches (ingredient + quantity + cost), notes, comments, stars, marketplace listings, messages you send to other users about orders.
Technical: IP address at sign-in (for session integrity), user-agent, device fingerprint hash, timestamps of actions.
We do not collect: browsing behavior on other sites, third-party advertising IDs, or data brokers. No tracking pixels.

03 — WHY WE USE IT

To run the service: authenticate you, save your formulas and shelf, display the marketplace, send transactional emails (invite code confirmations, order updates, password resets).
Legal basis: performance of the contract between us (GDPR Art. 6(1)(b)) for core features; legitimate interest (Art. 6(1)(f)) for security logging and platform abuse prevention; consent (Art. 6(1)(a)) for optional features you opt into.

04 — AI FEATURES

When you invoke an AI feature (Copilot, substitute suggestions, diff analysis, shelf match, scent profile), the relevant parts of your formula or shelf are sent to Anthropic (Claude) for inference. Anthropic processes the request and does not use it to train models per our commercial agreement. We do not send your email or account credentials to Anthropic. You can avoid AI processing entirely by not clicking AI actions.

05 — THIRD-PARTY PROCESSORS

Resend (EU) — transactional email delivery. Stores your email + message bodies for up to 30 days then deletes.
Anthropic (US) — AI inference, SCCs + API-no-train agreement as above.
Cloudflare R2 (EU region) — object storage for uploaded images.
Stripe (Ireland/US) — payment processing and seller onboarding, used only when you initiate a checkout or Connect flow; subject to Stripe's own privacy terms.
Forgejo (self-hosted on our infrastructure, EU) — git backend for formula versioning. No third party.
We do not sell your data, ever.

06 — COOKIES & LOCAL STORAGE

Session cookie (HTTP-only, signed) to keep you logged in.
Local storage keys: juice:theme (dark/light preference), juice:currency (EUR/USD/GBP/PLN preference), juice:draft:* (in-progress formula drafts so you don't lose work on refresh). No analytics, no advertising, no cross-site tracking.

07 — RETENTION

Account + work product: kept until you delete your account, then removed within 30 days. Backups retained up to 90 days for disaster recovery. Security logs: 12 months. Marketplace orders and invoices: 5 years (Polish tax law). Cancelled draft listings: 90 days.

08 — SHARING

Formulas you mark public are visible to every logged-in user. They can be forked, starred, and commented on. Formulas marked private are visible only to you (and admins for moderation if a report is filed). Your shelf is never public. Messages are visible only to the order parties. Your email is never visible to other users.

09 — YOUR RIGHTS

Under GDPR you have the right to: access your data, rectifyinaccuracies, erase (“right to be forgotten”), restrict processing, port to another service, and object to processing. Email hello@thejuice.art to exercise any of these. We aim for a 7-day turnaround, 30 days maximum.
You can also lodge a complaint with the Polish supervisory authority (UODO) or your local data protection authority.

10 — DATA BREACHES

If we detect a breach that may risk your rights, we notify you without undue delay (within 72 hours of discovery where feasible) and report to the supervisory authority, per GDPR Art. 33–34.

11 — AGE

The Juice is for users 16 and older. We do not knowingly collect data from younger users.

12 — CHANGES

We will update this page as the platform evolves. Material changes (new processors, broader data collection) are emailed to registered users at least 14 days before they take effect.