Recipe Nutrition Labels

Privacy policy

Last updated: November 14, 2026

Havelaar US, LLC, a Delaware limited liability company (“we”, “us”, “our”), runs Recipe Nutrition Labels at nutrition-labels.osidius.ai. This policy says what personal data we collect there, why, how long we keep it, and who processes it for us.

We never sell your personal data. We collect only what the product needs to work and to be paid for.

What we collect, why, and for how long

When you pay
You enter your email address, your name, your billing address and your card on Stripe’s checkout page. Stripe gives us your name, email address, billing address, the brand and last four digits of your card, and what you bought; we never see your full card number. We use them to take your payment, work out the sales tax, check that you are in a country we sell to, send your receipt, give you access, and refund you. We keep the record of each payment (the amount, date, sales tax and what was bought, with the name, email address and billing address on the receipt) until seven years after the end of the tax year of the payment, so that we can support our tax returns and accounts if a tax authority asks about them. Stripe keeps its own copy as its privacy policy says.
Your access key
A random access key, of which we keep only a one-way fingerprint (a hash), with the reference of your subscription and whether it was active when we last checked, to open the downloads for you while your subscription runs, and to stop them when it ends or is refunded. We keep it while your subscription runs and until 30 days after it ends, when it is deleted automatically (this can take a few days more).
When you ask for your link again
The email address you enter, to look up your subscription at Stripe and email you a new link. We keep it only while we answer: we do not store it.
When you write to us
Your message and your email address, to answer you and to help with your purchase. We keep them for 12 months after our last message to each other, unless it is about a dispute that is still open.
When you visit
Cloudflare, which serves our pages, receives your IP address and the details your browser sends with each request, because it needs them to deliver the page. When a page sends a request to our servers, for example to start a purchase, Cloudflare passes it on to Amazon Web Services, which runs those servers, with the country the request came from. Our servers do not record your IP address. We keep no logs of visits. Cloudflare may keep its own records to protect its network, as its privacy policy says.

Cookies and your device

If you subscribed: the access key from the link we emailed you: kept in this browser's local storage, on this site only, so that downloads open without the link on your next visit; it is sent only to this site, to check that your subscription is active, and stops working when your subscription ends or you ask for a new link.

Your recipes, with the ingredients, amounts and any nutrient values you enter yourself: kept in this browser's local storage, on this site only, so that you can come back to them; they are never sent to us, and you can export them to a file and delete them at any time.

Stripe’s checkout page is Stripe’s own, not ours. Stripe sets cookies there to process the payment and to prevent fraud, as its privacy policy describes.

AI agents

Messages you send us are read and answered by an AI agent of Havelaar US, LLC, and its replies say so. To write a reply, the agent sends the text of your message, and what we know about your purchase, to the AI models of Anthropic and OpenAI. They handle it under their own terms; their privacy policies are linked below. We have turned off the setting that would let them use our conversations to train their models.

Who processes your data for us

We also disclose personal data when the law requires it, for example in answer to a court order.

Your rights

You can ask us for a copy of the personal data we hold about you, and ask us to correct it or to delete it. Write to us at agent@osidius.com. We answer within 30 days. If you ask us to delete your data, we delete it, except the payment records described above: those we keep for the period stated there, for our taxes and accounts. We treat you the same whether or not you use these rights.

Children

The product is not meant for children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, write to us and we will delete it.

Security

We protect personal data with reasonable technical and organisational measures, such as encrypted connections (HTTPS). No transmission or storage over the internet is completely secure, so we cannot guarantee it.

Changes to this policy

We may change this policy when the product or our use of data changes. We post the new version on this page and update the date above.

Contact

Havelaar US, LLC (Delaware). Email: agent@osidius.com