Privacy Policy

Who we are

Mise Labs, Inc. (trading as Book of Recipes) operates bookofrecipes.co. Our registered office is 1412 SE Morrison Street, Suite 300, Portland, OR 97214, United States. For anything in this policy, write to privacy@bookofrecipes.co.

What we collect

• Your email address, when you join the waitlist. That is the only field the form has.
• A one-way hash of your IP address, used to rate-limit sign-ups. We cannot reverse it back to your IP.
• Your browser user-agent string, truncated, so we can tell a real browser from a script.
• Recipes you import once you have an account: the source URL, the extracted recipe, and any notes you add.
• Aggregate page counts. No cross-site tracking, no advertising identifiers, no data brokers.

What we do not collect

We do not buy data about you, we do not sell or rent what we hold, and we do not run third-party advertising or analytics that follow you off this site. There is no Facebook pixel, no Google Ads remarketing tag, and no session-recording script on these pages.

Legal basis

If you are in the UK, EU or EEA: we process your waitlist email on the basis of your consent (Article 6(1)(a) GDPR), and your account data to perform our contract with you (Article 6(1)(b)). Rate-limit hashes rest on our legitimate interest in keeping the service available (Article 6(1)(f)).

How long we keep it

Waitlist emails are held until you unsubscribe or until twenty-four months after your invitation is sent, whichever is sooner. Rate-limit hashes expire after one hour. Account data is deleted within thirty days of you closing your account, apart from records we are required to keep for tax purposes.

Your rights

You can ask us for a copy of what we hold, ask us to correct or delete it, ask us to stop processing it, or ask for it in a portable format. Email privacy@bookofrecipes.co and we will respond within thirty days. If you are unhappy with our answer you may complain to your local supervisory authority.

Where your data lives

Our servers are in the United States. Where we transfer personal data out of the UK or EEA we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

Sub-processors

• Hosting and infrastructure — DigitalOcean, LLC (United States)
• Transactional email — Postmark, a Wildbit product (United States)
• Payments, once billing opens — Stripe, Inc. (United States)
• Speech-to-text and text extraction for imports — processed in our own infrastructure

Changes

If we change this policy in a way that materially affects you, we will email everyone on the list before the change takes effect. The date at the top always reflects the current version.