Privacy Policy

Account Information

When you create an account via Clerk (our authentication provider), we collect your email address, display name, and profile photo. Passwords are managed entirely by Clerk and are never stored or accessible to us in plain text.

Usage Data

We collect data about how you interact with Crispy, including pages visited, restaurants viewed, map interactions, search queries, bookmarks saved, reviews submitted, and votes cast. This data helps us improve the platform and personalize your experience.

Device & Browser Information

We may collect technical information such as your IP address, browser type, operating system, and device identifiers for analytics and security purposes.

Instagram API Data

Crispy uses the Instagram Basic Display API and Instagram Graph API (Meta) to discover and display food content from public creator profiles. Specifically, we collect:

• •Public Instagram profile information (username, profile picture, follower count).
• •Publicly available media (photos and videos) and their captions from creator accounts.
• •Post engagement metrics (likes, comments) where publicly accessible.

This data is used solely to curate restaurant recommendations and showcase creator reviews. We only access public content and do not access private messages, private posts, or any non-public information. Instagram data is governed by Meta's Privacy Policy.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number or banking details. Stripe may collect and process payment information per their Privacy Policy.

• •To provide, operate, and maintain the Service.
• •To personalize your experience (bookmarks, followed creators, preferences).
• •To process your reviews, votes, and hidden gem submissions.
• •To curate restaurant recommendations using public creator content from Instagram and other platforms.
• •To send service-related communications (account verification, security alerts).
• •To detect and prevent fraud, abuse, or security incidents.
• •To provide aggregate, anonymized analytics to claimed restaurant owners.
• •To analyze platform usage via PostHog analytics and improve product features.

We work with third-party service providers who may receive your data only as necessary to operate the Service:

• •Clerk — Authentication and user account management. Privacy Policy
• •Stripe — Payment processing for subscriptions and restaurant claims. Privacy Policy
• •Meta / Instagram API — Public creator content discovery for food recommendations. Privacy Policy
• •Google APIs — Restaurant data enrichment via Google Places API; maps via Google Maps. Privacy Policy
• •PostHog — Product analytics to understand how users interact with the platform. Privacy Policy
• •Vercel — Hosting and infrastructure. Privacy Policy
• •Neon / Supabase — Database storage.

Crispy embeds content from YouTube, Instagram, and TikTok. When you view embedded content, those platforms may collect data according to their own privacy policies.

We do not sell your personal information. We may share data only in the following cases:

• •Service providers: As described in Section 3, only as necessary to operate the Service.
• •Restaurant owners: Aggregate, anonymized analytics only (e.g., total profile views). No personal user data is shared.
• •Legal requirements: If required by law, court order, or to protect our legal rights.
• •Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before such a transfer.

We use cookies and local storage for the following purposes:

• •Authentication: Session tokens managed by Clerk to keep you logged in.
• •Preferences: User settings such as hidden creators, saved filters, and display preferences.
• •Analytics: PostHog uses cookies to track usage patterns and help us improve the Service.

We do not use third-party advertising cookies. You can control cookie behavior through your browser settings, though disabling cookies may affect Service functionality.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymized usage analytics may be retained indefinitely. Instagram API data (creator posts and captions) is refreshed periodically and only retained as needed to display current recommendations.

To request deletion of your data, email us at support@crispyfeeds.com.

Crispy is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately at support@crispyfeeds.com and we will promptly delete that information.

You have the right to:

• •Access and review your personal data.
• •Correct inaccurate or incomplete information.
• •Delete your account and associated personal data.
• •Export your data (bookmarks, reviews, account info).
• •Opt out of non-essential email communications at any time.

To exercise any of these rights, contact us at support@crispyfeeds.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• •Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• •Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• •Right to Opt Out: We do not sell personal information. If this changes, we will provide a “Do Not Sell My Personal Information” link.
• •Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email support@crispyfeeds.com with the subject line “CCPA Request.”

We implement industry-standard security measures including encrypted connections (HTTPS), secure token-based authentication via Clerk, and access controls on our database. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: