Privacy Policy

Short version: we collect the minimum needed to produce your label and email it to you, we never see your card details, and we publish a decision ledger that you should understand before you order — section 3.

1. What we collect

• Your email address — to deliver the label and contact you about the order.
• Order details — business name, city, state, product description, ingredient list, venue type and net weight. These are the inputs to the verdict and the label.
• Payment records — a Stripe session identifier and payment identifier, the amount, and whether it succeeded.
• Operational logs — ordinary server logs recording that requests happened.

2. What we never see

Card numbers, CVCs and expiry dates never reach our servers. Payment is handled entirely by Stripe on Stripe's own checkout pages. We receive only an identifier and a success-or-failure result. Stripe's handling of your payment data is governed by Stripe's privacy policy.

3. What we publish — read this before you order

OvenClear publishes a signed, tamper-evident decision ledger at /ledger.jsonl and a provenance page for each issued label. This is deliberate: it is what lets anyone verify that a label came from the law snapshot it claims, and that we have not quietly rewritten a decision.

The ledger does not contain your email address, business name or city. Published rows contain an order identifier, the state, the venue type, the canonical product, the verdict status, content hashes, and rulepack and snapshot versions.

One exception you should know about. Ledger rows include productInput — the product description exactly as you typed it. If you type "sourdough" that is all that is published. If you type your business name or your own name into the product field, that text becomes public. Put only the product in the product field. If something identifying has already been published, email us and we will tell you precisely what a correction can and cannot do — see section 6.

4. Why we are allowed to hold it

We process order details to perform the contract you entered when you paid. We process your email on the same basis. We publish the ledger on the basis of our legitimate interest in a verifiable, auditable compliance record, which is a core function of the product and is disclosed here before purchase.

5. Who it is shared with

Stripe, for payment processing. Google, when a model call is made to resolve an unrecognized product description or classify a law change — the text sent is the product description and rule text, never your email address or payment data. Our hosting provider, Google Cloud, as a processor. We do not sell your data, and we do not use it for advertising.

6. Retention and deletion

Order records are retained while your label may still need re-issuing, and thereafter as required for tax and accounting purposes. You may ask us to delete your email address and order details at any time by writing to support@ovenclear.com.

An honest limit: the ledger is a hash-chained append-only structure. Deleting a row would break the chain and destroy the verifiability that every other customer's label depends on. We therefore cannot delete ledger rows. We can delete your email address and order record, which are stored separately and are not published. This is why section 3 asks you to keep identifying text out of the product field.

7. Your rights

Depending on where you live you may have rights to access, correct, export, restrict or object to our processing of your personal data, and to complain to a data protection authority. Exercise any of them by emailing support@ovenclear.com. We will respond within 30 days.

8. Cookies

OvenClear sets no advertising or analytics cookies and embeds no third-party trackers. Stripe may set cookies necessary for fraud prevention on its own checkout pages.

9. Children

The service is not directed to anyone under 18 and we do not knowingly collect their data.

10. Contact

Controller: Edy Cu, an individual based in Indonesia, operating as OvenClear. There is no incorporated company and no registered office address to publish; reach the controller by email at support@ovenclear.com.