Privacy Policy – Culinum

1. Information We Collect

We may collect:

• Account information (email, name)
• Usage data (saved recipes, menus, interactions)
• Technical data (device, browser, IP address)

Payment information is not collected or stored by Culinum and is handled exclusively by lemonsqueezy.com.

2. How We Use Your Information

We use your data to:

• Provide and improve the Service
• Manage user accounts
• Communicate service-related updates
• Ensure security and prevent abuse

3. Payments & Third Parties

All payments are processed by lemonsqueezy.com, acting as Merchant of Record. lemonsqueezy may collect and process personal data in accordance with its own privacy policy.

We may also use trusted third-party services for analytics (including Google Analytics 4), advertising (including Google AdSense and Meta Pixel), and infrastructure. Meta Pixel is loaded only after the consent platform confirms consent for Meta.

4. Data Retention

We retain personal data only as long as necessary to provide the Service or comply with legal obligations.

5. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Request correction or deletion
• Object to processing

You can exercise these rights by contacting us.

6. Data Security

We implement reasonable technical and organizational measures to protect your data.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page.

8. Contact

Email: info@kod-web.com

GDPR & Cookies

Culinum processes personal data in accordance with the General Data Protection Regulation (GDPR).

Your Rights

As a user, you have the right to:

• Access your personal data
• Request correction or deletion
• Object to or restrict processing
• Request data portability

You may exercise these rights by contacting us at info@kod-web.com.

Cookies and Google consent

Culinum uses essential cookies and browser storage for authentication, security, language preferences, and basic functionality. For visitors in the EEA, the UK, and Switzerland, Google’s certified Consent Management Platform (CMP) collects advertising and analytics choices through the IAB Transparency and Consent Framework. Google Consent Mode v2 starts with restricted signals in these regions and is updated by Google’s CMP. With consent, Google Analytics 4 may use full measurement and Google AdSense may serve personalized ads. Without consent, Google may serve limited ads or no ad. Google Programmable Search may use invalid-traffic-only storage where permitted. Choices can be changed later through Google’s privacy settings on the Cookie Policy page.

Pinterest integration

Authorized Culinum editorial users may connect a Pinterest account to publish original Culinum content. With the user's authorization, we receive and securely store Pinterest access and refresh tokens and retrieve the names and identifiers of boards the account can access. We use the boards:read, boards:write, pins:read, and pins:write permissions only to list available boards and publish Pins selected by an authorized editor. We do not sell this data or use it for advertising.

Pinterest credentials are encrypted and retained only while the integration is active or as needed to provide the publishing feature. Access can be revoked at any time in the connected Pinterest account settings. You may also contact info@kod-web.com to request disconnection and deletion of stored Pinterest integration data. After access is revoked, Culinum can no longer access the Pinterest account through the integration.

Instagram publishing integration

Authorized Culinum editorial users may connect the Culinum Instagram professional account to publish original Culinum content. We use instagram_business_basic only to identify the connected professional account and access its profile and media, and instagram_business_content_publish only to publish an image and caption explicitly selected by an authorized editor. We do not request access to Instagram messages or comments.

We securely store the Instagram account identifier, username, encrypted access token, token expiry and authorization metadata while the integration is active. A generated JPEG is temporarily placed on a public server only long enough for Instagram to retrieve it for the selected publication, then deleted. Access may be revoked in Instagram's Apps and websites settings. Revocation, Meta's deauthorization or data-deletion callback, or a verified request to info@kod-web.com deletes the stored Instagram publishing credential. We do not sell this data or use it for advertising.

TikTok publishing integration

Authorized Culinum administrators may connect a TikTok account. We use user.info.basic to identify and display the connected account, video.upload to send a selected video for completion in TikTok, and video.publish when the administrator expressly chooses Direct Post. Before Direct Post, the administrator reviews the video, caption, privacy, interaction and disclosure settings and confirms publication to the displayed account.

We securely store the account identifier, display name, encrypted access and refresh tokens, expiration times and publication-task history. Videos selected from your device are sent to TikTok; hosted videos may be fetched by TikTok from an approved media URL. Tokens remain stored while the connection is active. Disconnecting through the dashboard revokes access and deletes stored credentials. For deletion of publication history or other integration data, contact info@kod-web.com. TikTok may retain submitted content under its own Privacy Policy. We do not sell integration data or use it for advertising.