Legal

Privacy Policy

Effective May 28, 2026

This Privacy Policy explains how Office Libations, Inc. (a Delaware corporation), the parent company of Curry (“Curry,” “we,” “us,” or “our”), collects, uses, discloses, and protects your information when you use our websites, applications, and related subscription services (collectively, the “Service”).

1. Scope & who we are

Curry is a subscription-based kitchen, menu, recipe, and inventory management platform operated by Office Libations, Inc., a Delaware corporation. For users in the European Economic Area (EEA) and the United Kingdom, Office Libations, Inc. is the “data controller” of personal data processed through the Service.

This policy applies to personal data we process about account holders, members of an organization's workspace, prospective customers, and visitors to our public pages. It does not apply to third-party websites or services that we do not control.

2. Information we collect

2.1 Information you provide

  • Account & profile data: username, email address, password (stored only as a salted hash), and the organization or workspace you belong to.
  • Organization & operational content: menus, dishes, recipes, ingredients, costs, inventory counts, purchase orders, suppliers, spoilage records, and any images or files you upload.
  • Support & feedback: messages, feedback submissions, and correspondence you send us.
  • Billing details: your subscription plan and billing contact. Payment card numbers are collected and stored by our payment processor, not by us (see Section 7).

2.2 Information collected automatically

  • Usage data: pages viewed, features used, actions taken, timestamps, and referring pages.
  • Device & log data: IP address, browser type and version, operating system, device identifiers, and diagnostic data.
  • Cookies & similar technologies: including a strictly necessary session cookie used to keep you signed in (see Section 5).

3. How we use information

We use personal data to:

  • provide, operate, maintain, and secure the Service;
  • create and manage your account and organization workspace;
  • process subscriptions, payments, renewals, and invoices;
  • respond to support requests and feedback;
  • send service, security, and administrative communications;
  • monitor usage trends and improve features and performance;
  • detect, prevent, and investigate fraud, abuse, and security incidents;
  • comply with legal obligations and enforce our agreements.

We send marketing communications only where permitted by law, and you can opt out at any time using the unsubscribe link or by contacting us.

5. Cookies & tracking technologies

We use a strictly necessary, HTTP-only session cookie to authenticate you and keep you signed in. This cookie is essential and the Service cannot function without it. We may also use limited functional and analytics technologies to understand and improve how the Service is used.

Most browsers let you refuse or delete cookies through their settings. Blocking the session cookie will prevent you from signing in. Our Service does not currently respond to browser “Do Not Track” signals.

6. How we share information

We do not sell your personal data. We share it only as described below:

  • Service providers: vendors who host, store, and process data on our behalf, including cloud hosting, database, file storage (Amazon Web Services / S3), email delivery, analytics, and payment processing, under confidentiality and data-protection obligations.
  • AI features: if you use the in-app assistant, the relevant portion of your question and a read-only snapshot of your organization's data are sent to a third-party AI provider solely to generate a response. This data is processed under that provider's terms and is not used to train its models on your behalf. The assistant is optional and can be disabled by an organization administrator.
  • Within your organization: content you create is visible to other authorized members of your organization's workspace and to administrators.
  • Public menus: if you choose to publish a menu, the information on that menu becomes publicly accessible by design.
  • Legal & safety: to comply with law, respond to lawful requests, enforce our terms, or protect the rights, property, or safety of Office Libations, our users, or the public.
  • Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

7. Payments & billing data

Curry is offered on a subscription basis. Payments are processed by a third-party payment processor (for example, Stripe). We do not store full payment card numbers on our servers. Your payment information is provided directly to the processor and handled under its privacy policy and the PCI-DSS standards. We retain limited billing records (such as plan, transaction identifiers, and invoices) as required for accounting and tax purposes.

8. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service. After you close your account or cancel your subscription, we delete or de-identify personal data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements. Backups are purged on a rolling schedule.

9. Security

We use technical and organizational safeguards designed to protect personal data, including encryption in transit (HTTPS), hashed passwords, access controls, tenant isolation between organizations, and hardened HTTP security headers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and regulators as required by law.

10. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal data; to object to or restrict certain processing; and to withdraw consent. Many of these actions can be taken directly in your account settings. To make a request, contact us at | a(href='mailto:' + legal.privacyEmail)= legal.privacyEmail | . We will verify your identity and respond within the time required by | applicable law. You may also lodge a complaint with your local data | protection authority.

11. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion or correction; to opt out of the “sale” or “sharing” of personal information; and to not be discriminated against for exercising your rights. We do not sell personal information. In the preceding 12 months we have collected the categories of information described in Section 2 (identifiers, customer records, commercial information, and internet/network activity) and disclosed them to service providers for the business purposes in Section 3. To exercise your rights, contact us at | a(href='mailto:' + legal.privacyEmail)= legal.privacyEmail | .

12. International data transfers

We are based in the United States and process data there and in other countries where our service providers operate. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

13. Children's privacy

The Service is intended for businesses and is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

14. Third-party links

The Service may contain links to websites or services we do not operate. We are not responsible for their content or privacy practices, and we encourage you to review their policies.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version with an updated effective date and, for material changes, provide additional notice (such as email or an in-app notice). Your continued use of the Service after the effective date constitutes acceptance of the changes.

16. Contact us

If you have questions about this Privacy Policy or our data practices:

See also our Terms of Service.