Privacy Policy
Effective July 22, 2026 · Applies to platespec.com and the PlateSpec app
PlateSpec is training software for restaurant companies. That means we hold data about your company and the people who work there. This page says exactly what we collect, why, where it lives, and what we will never do with it — in plain English, because that's how we write everything.
What we collect
Account basics. Names and work emails for managers; names, emails, and (optionally) phone numbers for crew members. No passwords exist anywhere in PlateSpec — sign-in uses one-time codes and links.
Training records. Which courses are assigned to whom, completions, quiz answers and scores, and timestamps — the record your company relies on to prove who was trained on what.
Content your company uploads. Courses, menu details, photos, and videos belong to your company; we store and serve them.
Technical basics. Standard server logs, plus your IP address on our public demo widget purely for rate limiting. If you use the turnover calculator or join our newsletter, we keep the email you give us for exactly that purpose.
What we use it for
Running the product: delivering training to crew phones, showing managers live completion, sending login codes and training notifications by email, and answering support requests. That's the list.
What we never do
We do not sell your data. We do not run advertising or ad trackers. We do not use your company's content or your people's records to train AI models. We do not contact your crew with marketing. Your training data exists to train your crew — nothing else.
About the AI features
When a manager uses PlateSpec's AI to edit, draft, or translate a course, that course content is processed by our AI provider (Anthropic) to produce the result. Under our agreement with them, that data is not used to train their models. AI proposals are always reviewed by a human at your company before anything goes live.
Who can see what
Access follows your org chart, enforced by the database itself: a GM sees their store, a regional sees their region, owners see the company. Crew members see their own training. Your company controls its people's accounts and records; we process that data on your company's behalf. Full detail is on our Security & Trust page, including the short list of infrastructure providers we run on.
Where it lives
Data is hosted in the United States on Vercel (application) and Supabase/AWS (database, authentication, file storage), encrypted in transit and at rest. Emails are delivered by Resend.
Keeping it, exporting it, deleting it
We keep your data while your company's account is active. Your company can export everything — rosters, completions, reports — free, anytime, from inside the product. If you leave, ask and we delete our copy within 30 days, except records we're legally required to keep. Crew members: your employer administers your account, so start there for corrections — or email us directly and we'll help.
Cookies
Two, both boring: one keeps you signed in, one remembers which company's PlateSpec page your device belongs to. No advertising cookies, no cross-site tracking.
Changes and contact
If we make a meaningful change to this policy, we'll email account owners before it takes effect. Questions, requests, or anything unclear: hello@platespec.com — a human reads it.