Privacy Policy

Last updated: September 22, 2026

This Privacy Policy explains how PreciTaste Inc. (“PreciTaste”, “we”, “us”) collects, uses, shares, and protects personal information when you visit our website (precitaste.com), contact us, register for a webinar or event, or otherwise interact with our online presence. It also describes the rights you have under the EU General Data Protection Regulation (GDPR) and under California privacy law (CCPA/CPRA), and how to exercise them.

Who We Are (Data Controller)

PreciTaste Inc. 420 Lexington Ave, Suite 1402 New York, NY 10170, USA

Tel: +1-212-804-8813 E-Mail: info@precitaste.com

Managing Director: Dr. Ingo Bernd Stork-Wersborg

Scope

This policy covers our website and the ways you can contact us through it, and it is the privacy policy for the PreciTaste mobile applications published by PreciTaste Inc. on the Apple App Store and Google Play. See “PreciTaste Mobile Applications” below for what those apps collect.

Where our restaurant customers process operational data in the PreciTaste platform (for example kitchen production data entered by a customer’s staff), we act as a service provider / processor on that customer’s instructions, and our agreement with that customer governs how the data may be used. That relationship is unchanged. What this policy adds is a plain description, for the people who actually use the apps, of what the apps collect and why — which the app stores require us to publish, and which our customers’ staff are entitled to read.

Personal Information We Collect

Information you provide to us

Contact and lead forms (contact form, call-back request, information and demo requests, case-study requests, webinar and event registrations, referral and partner programs): name, company, job title (where asked), email address, phone number, number of locations, the POS system you use, and anything you write in a message field.
Solution-finder quiz: if you complete our quiz, your answers about your operation (type of operation, how you source and produce food, what you want to improve, interest in Vision AI, number of locations) together with the solution we recommend, submitted with your contact details above.
Meeting scheduling: if you book a meeting through our Google Calendar scheduling page, Google collects the details you enter there (name, email, chosen time) and shares the booking with us.
Job applications: application materials you send us by email (see “Job Applications” below).

Information collected automatically

Hosting and server logs: our website is hosted by Netlify. Like any web host, Netlify processes technical data such as your IP address, browser type, and the pages you request, to deliver the site and keep it secure.
Analytics (only with your consent): if — and only if — you accept analytics cookies in our cookie banner, we use Google Analytics 4 to understand how the site is used (pages visited, approximate location, device and browser information). See “Cookies and Consent” below.
Spam and abuse protection: pages with forms load Google reCAPTCHA to distinguish people from bots, and our infrastructure applies short-lived, IP-based rate limiting to form submissions.

PreciTaste Mobile Applications

This section describes the apps we publish for restaurant teams — the tablet and phone apps a crew member signs into at work. It applies in addition to everything above.

Information you provide in the app

Account identity: the work email address you sign in with, and your name as recorded for your account. In most cases your employer creates the account for you; where an organization uses self-service sign-up, whoever sets it up provides those details directly.
Work you record: the entries you make while doing your job — prep and production quantities, task completions, waste records, temperature and food-safety check results, counts, and the times at which they happened.
Photos you take or attach: some checks ask for photo evidence, and some screens let you attach an image to a task, a recipe step, or a reference document. The app uses your device camera only when you tap to take a photo, and reads your photo library only when you choose an existing image — your device asks your permission the first time, and you can refuse. Photos are stored with the record they belong to and are visible to your employer, exactly like the rest of the work you record.

Information collected automatically

Technical data needed to serve the app: the app version and device platform, and standard server logs (including IP address) from the requests the app makes.

What the apps do NOT do

No tracking: we do not track you across other companies’ apps or websites, and we do not use your data for advertising. There is no advertising identifier collected.
No third-party analytics SDK: the apps do not embed an analytics or attribution SDK, and the software-update component that keeps the app current is configured with its usage reporting switched off.
No location tracking: the apps do not request or collect your device location.
No microphone access: taking a photo captures an image only; the apps never request the microphone.

Who your work data belongs to. For everything in “Work you record” and “Photos”, your employer is the controller and we act as their processor. If you want that data corrected or removed, ask your employer first — they can do it directly. We will help them, and we will act on a direct request from you where the law entitles you to make one.

Signing up for AIKMS online. Some organizations create their AIKMS account through self-service online sign-up rather than having PreciTaste set it up for them. That flow additionally collects:

Signup contact data: the name, work email, phone number, and organization name of the person signing up.
Consent record: which version of this Privacy Policy and our Terms of Use they accepted, when, and from what IP address — kept as evidence of acceptance, retained even after the account is later deleted, because it documents the agreement under which we processed their data.
Customer data, however it reaches us: uploaded by the organization, shared with us directly, uploaded by us on the organization’s behalf, or pulled programmatically through an integration the organization authorizes (for example a POS or inventory system) — all four are handled the same way.

We may create and use de-identified data (data with identifying details about an organization, its staff, and its customers removed, such that none of them can reasonably be re-identified) for analytics, benchmarking, and improving the Service, during and after the subscription. We do not sell customer data or de-identified data. We do not currently operate a de-identification pipeline; this describes a use we’re permitted to make, not a live process.

How and Why We Use Personal Information

Purpose	Legal basis (GDPR)
Responding to your inquiries, call-back requests, and messages	Art. 6(1)(b) — steps prior to entering a contract; Art. 6(1)(f) — legitimate interest
Providing requested content: demos, case studies, webinar access and reminders	Art. 6(1)(b); Art. 6(1)(f)
Following up with business contacts about our solutions and services	Art. 6(1)(f) — legitimate interest in B2B communication; consent where required
Operating, securing, and improving the website (logs, spam protection, rate limiting)	Art. 6(1)(f) — legitimate interest
Website analytics	Art. 6(1)(a) — your consent, which you can withdraw at any time
Complying with legal obligations (e.g., commercial and tax retention duties)	Art. 6(1)(c)

Inquiry data may be stored in a customer relationship management (CRM) or comparable request-management system.

We keep the cookie footprint of this website deliberately small:

We set no advertising cookies and do no cross-site tracking or profiling for advertising.
The only cookies we set ourselves are Google Analytics cookies (_ga and similar) — and only after you choose “Accept” in our cookie banner. If you do nothing, decline, or later withdraw consent, no analytics run and no analytics cookies are set; withdrawing consent also deletes existing analytics cookies. Google Tag Manager, which loads Google Analytics, is itself only loaded after consent (Consent Mode v2 with a default of “denied”).
Your consent choice is stored in your browser’s local storage so we don’t ask on every visit. You can change or withdraw your choice at any time via “Your Privacy Choices” in the website footer.
We honor the Global Privacy Control (GPC) signal: if your browser sends GPC, we treat it as an opt-out and analytics stay off, even if you previously accepted.

Some pages load third-party tools that may set their own cookies, governed by the respective provider’s privacy policy:

Google reCAPTCHA loads on pages with forms to protect them from spam and abuse (legal basis: our legitimate interest in site security, Art. 6(1)(f) GDPR).
Google Calendar scheduling loads only when you click “Schedule a Meeting” or open the booking page.
YouTube videos are embedded in privacy-enhanced mode (youtube-nocookie.com) and connect to YouTube when a video loads or plays.

Analytics data is retained for a maximum of 14 months.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only:

To service providers (processors) acting on our instructions — see the vendor list below.
External services you choose to use via links from our site — for example some webinar registrations or recordings (ON24). When you follow such a link, the provider’s own privacy policy applies.
When legally required — to comply with law, legal process, or enforceable governmental requests, or to protect our rights.
In a business transaction — if PreciTaste is involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction, subject to this policy’s commitments.

Vendors We Work With

Vendor	What they do for us	Privacy policy
Netlify, Inc. (USA)	Website hosting, content delivery, and storage of form submissions	netlify.com/privacy
Google LLC (USA)	Google Analytics 4 and Tag Manager (only with your consent), reCAPTCHA spam protection, Google Calendar meeting scheduling, YouTube video embeds (privacy-enhanced mode)	policies.google.com/privacy
Atlassian (USA/Australia)	Customer service desk for support requests	atlassian.com/legal/privacy-policy
ON24, Inc. (USA)	Some webinar registrations and recordings (external links)	on24.com/about-us/privacy-policy

In addition, our team receives and answers inquiries using standard business email and CRM tools acting on our behalf. We update this vendor list when our service providers change.

International Data Transfers

We are a U.S. company and process data in the United States. If you access our website from the European Economic Area, the United Kingdom, or Switzerland, your personal information is transferred to the U.S. Where required, we rely on appropriate safeguards for such transfers, in particular our processors’ certifications under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.

Data Retention

Inquiries and form submissions are deleted when they are no longer required for the purpose they were submitted for; we review necessity at least every two years. Statutory retention obligations (e.g., commercial or tax law) may require keeping certain records longer — such data is blocked from other use until deletion.
Analytics data is retained for a maximum of 14 months.
Job applicant data is deleted six (6) months after the end of an unsuccessful application process, unless you consent to longer retention.
Server logs and anti-abuse data are short-lived and rotated automatically.

Security

We take appropriate technical and organizational measures in accordance with Art. 32 GDPR — taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing — to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction. These include controlling physical and logical access to data, encryption in transit, and procedures for handling data subject rights, deletion, and potential data incidents. No website or internet transmission is completely secure, however, and we cannot guarantee absolute security.

You have the right to:

Access the personal data we hold about you (Art. 15)
Rectify inaccurate or incomplete data (Art. 16)
Erase your data (“right to be forgotten”, Art. 17)
Restrict processing (Art. 18)
Data portability — receive your data in a structured, commonly used, machine-readable format (Art. 20)
Object to processing based on legitimate interests, including direct marketing, at any time (Art. 21)
Withdraw consent at any time, with effect for the future, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
Lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement (Art. 77)

To exercise any of these rights, contact us at info@precitaste.com or by mail at the address above.

Your California Privacy Rights (CCPA/CPRA)

This section applies to California residents and serves as our Notice at Collection.

Categories of personal information we collect (described in detail in “Personal Information We Collect” above), the purposes, and retention:

Identifiers (name, email address, phone number, IP address) — to respond to your requests, provide requested content, and operate and secure the site — retained as described in “Data Retention”.
Commercial / professional information (company, job title, number of locations, POS system, message content) — to respond to and qualify your inquiry — retained as described in “Data Retention”.
Internet or other electronic network activity (pages visited, device and browser information — analytics only with your consent; server logs for security) — retained for at most 14 months (analytics) or rotated automatically (logs).

We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done either in the preceding 12 months. We do not collect or use sensitive personal information for purposes beyond those permitted by the CPRA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.

As a California resident, you have the right to:

Know / access the personal information we have collected about you, including the categories, sources, purposes, and third parties it is disclosed to
Delete personal information we have collected from you
Correct inaccurate personal information
Opt out of sale or sharing — not applicable, as we do not sell or share personal information
Limit use of sensitive personal information — not applicable, as we do not use sensitive personal information beyond permitted purposes
Non-discrimination — we will not discriminate against you for exercising any of these rights

How to exercise these rights: email info@precitaste.com or use our contact form. We will verify your request using the contact details associated with the information (for example, by confirming control of the email address on file) and respond within 45 days, extendable once by a further 45 days where reasonably necessary. You may designate an authorized agent to submit a request on your behalf; we will ask for proof of the agent’s written permission and verify your identity.

We honor the Global Privacy Control (GPC) browser signal as an opt-out preference signal, as described in “Cookies and Consent”.

Text Messages

We do not send marketing communications via SMS. If you contact us and provide a phone number, we may respond to your request by phone call or text message. You can opt out of text responses at any time by replying STOP or by telling us your preference.

Account and Data Deletion (PreciTaste App)

If you use a PreciTaste application with a user account, you may exercise your right to have your account and personal data deleted at any time:

In-app deletion: initiate an automated account deletion request directly through the settings menu within the application.
Direct request: contact us using the details in this policy.

What happens next depends on which application you use.

AIKMS: deleting your account signs you out immediately and disables sign-in right away. Your account and data are then kept for 30 days, during which only PreciTaste staff can restore it if you contact us — there is no self-service way to cancel or restore it yourself, including by signing back in. After 30 days, your account and personal data are permanently deleted by an automated process, unless statutory obligations require retaining specific records. Work records your employer is required to keep (for example completed food-safety checks) remain with your employer as their own business records — deleting your account removes your ability to sign in and your personal account details, not your employer’s operational history.
PreciTaste – Restaurant AI: a 30-day processing period begins, during which your data remains stored but is marked for removal. You can cancel the deletion within this window by signing back in or contacting us. After 30 days, your account and associated personal data are permanently deleted or anonymized, unless statutory obligations require retaining specific records.

Closing an entire organization’s account (AIKMS). The above describes deleting one person’s own login. Closing an organization’s whole AIKMS workspace — every user, not just one — is a separate action a customer’s admin requests by contacting us, not something done through the in-app button. That request disables the workspace and destroys its data after a 30-day recovery window, during which the organization or PreciTaste support can reverse it; a snapshot of configuration data (recipes, locations, and the user list — not day-to-day operational history) is then kept for up to 90 further days for support purposes, then removed.

In both cases, if you are the last administrator for your organization, you will be asked to appoint another administrator before you can delete your own account, so that the organization is not locked out.

Job Applications

We process applicant data only for the purpose and in the context of the application process, in accordance with legal requirements. Applications reach us by email; please note that ordinary email is not encrypted in transit. Application materials typically include personal and contact details, a cover letter, and a resume; anything beyond that is voluntary. If an application is unsuccessful or withdrawn, applicant data is deleted after six (6) months, unless the applicant consents to longer retention (e.g., for future openings). If an application is successful, the data may be further processed for employment purposes.

We maintain profiles on social networks to communicate with customers, prospects, and users there. When you visit those platforms, the platform operator’s terms and privacy policies apply. We process data of users who interact with our official accounts (for example posts or direct messages) only as described in this policy.

Children

Our website is directed at businesses and is not intended for children under 16. We do not knowingly collect personal information from children.

Changes to This Policy

We update this privacy policy periodically to reflect changes in our practices or legal requirements. The “Last updated” date at the top shows the current version. Material changes to how we use analytics or cookies will additionally trigger a fresh consent prompt in the cookie banner.

Contact

PreciTaste Inc. 420 Lexington Ave, Suite 1402 New York, NY 10170, USA Tel: +1-212-804-8813 E-Mail: info@precitaste.com