Privacy Policy

Plateworks is operated by Plateworks Limited, a company registered in New Zealand. This policy explains what information we collect when you use Plateworks, why we collect it, and what we do with it. If anything here is unclear, email steve@plateworks.co.nz.

We handle personal information in line with the Privacy Act 2020 (New Zealand).

• Account details. Your name, email address and password (stored hashed, never in plain text).
• Content you upload. Recipes, dishes, ingredients, photos, and supplier invoices or order documents, along with the supplier names, prices, units and dates they contain.
• Billing information. Your subscription status and plan. Card details are entered directly with Stripe and never touch our servers.
• Usage data. Basic technical logs such as sign-in times, actions taken in the app, browser type and IP address, used to keep the service working and secure.

• To run your account and show you your recipes, dishes and costs.
• To read uploaded invoices and documents and turn them into ingredient prices.
• To take subscription payments and send billing receipts.
• To provide support when you contact us.
• To improve reliability, fix faults and prevent misuse.

We do not sell your information, and we do not share your recipes or supplier pricing with other customers.

When you upload an invoice, order or recipe document, the file is sent to a third-party AI provider so the text can be read and structured into ingredients, quantities and prices. Only the document you upload is sent, and it is sent for that single task. Our AI providers are contractually restricted to processing the content to return a result to us, and we do not permit them to use your content to train their models.

AI extraction is not perfect. You should always check extracted prices and units before relying on them for costing or menu pricing.

We use a small number of trusted providers to run Plateworks:

• Stripe for payment processing and subscription billing.
• Our hosting and database provider for storing your account and content.
• Our AI provider for reading uploaded documents, as described above.
• Email delivery services for account and billing emails.

Some of these providers store or process data outside New Zealand, including in Australia, the United States and the European Union. We only use providers that apply comparable privacy safeguards.

We may also disclose information if we are legally required to, or where it is necessary to protect our rights or the safety of others.

Data is encrypted in transit and at rest. Access to your account data is restricted at the database level so only your account can read it, with limited administrative access reserved for support and troubleshooting. No system is completely secure, so please use a strong, unique password and let us know immediately if you suspect unauthorised access.

We keep your content for as long as your account is active. If you cancel, we keep your data for up to 90 days so you can reactivate, then delete it. Billing records are kept for seven years as required by New Zealand tax law.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and its content. Email steve@plateworks.co.nz and we will respond within 20 working days.

We use cookies and similar browser storage to keep you signed in and remember your preferences. We do not use advertising cookies.

If we change this policy we will update the date at the top of this page, and let you know in the app if the change is significant. Questions or complaints can go to steve@plateworks.co.nz. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (New Zealand).