Privacy Policy

What we collect

• Account information: email address and password (managed by Supabase Auth).
• Company data: the firm names and competitors you enter during onboarding and account management.
• Digest delivery data: which digests were sent and whether they were opened or bounced (via Resend).
• Billing data: subscription status managed by Stripe. We do not store full card numbers.
• Analytics and usage data: anonymized event signals (e.g., which sections you interact with, CTA clicks) used to improve the product. No personally identifiable information is included in these events. No analytics provider is currently enabled on this deployment: these events are logged to the browser console in development and sent to no third-party service.
• Sample digest links:if you open a personalized sample digest link we sent you, we record that it was opened, roughly what kind of device opened it (mobile, desktop, or an automated scanner), and the website or mail service it was opened from. We do not record your IP address in any form, we do not store your browser’s user-agent, and we do not set a cookie or any other identifier — so we cannot tell two visits by one person apart from visits by two people.
• How you found us: if you sign up via a link that carries campaign parameters (for example from an email we sent you), we store the campaign labels from that link with your account so we can tell which outreach actually helps. These are short campaign names, not a browsing history.

Why we collect it

We use your email to deliver weekly digests and transactional messages (billing receipts, account notices). We use the firm names you provide to match official public records and assemble your digest. We do not use your data for advertising.

Who we share it with

We share data only with the service providers necessary to operate FDA Recall Radar:

• Supabase — database and authentication.
• Resend — transactional email delivery.
• Stripe — payment processing and subscription management.
• Vercel — application hosting.
• Anthropic — LLM summarization of official public records (inputs are public government data, not your personal information).

We do not sell your data to third parties.

If we emailed you about a free sample report

We sometimes email business contacts at US food and beverage companies to offer a free sample report. This section explains how we handle the information about you in that case.

Where we got your details.We obtained your business contact details (your name, job title, work email address, and your company’s name, website, location and industry) from a commercial business-data provider. You did not give them to us directly.

What we do with them. We use them only to decide whether a free sample report is relevant to your company, to prepare that report from official public records, and to email it to you: one first email, one follow-up if you do not reply, and up to two further weekly reports if you ask for them. We also check that your email address is deliverable using an address-verification service, which receives the address.

What we keep. We keep your contact record for up to 90 days after we last contact you, unless you become a customer. We keep the text of the emails we sent you, who approved them and when for 3 years, so that we can show what was sent if it is questioned; that record does not store your email address in readable form. When you open your report, we record that it was viewed. We keep a one-way hash of your email address (not the address itself) indefinitely, only so that we can honor your opt-out.

Opting out.Reply “unsubscribe” to any of our emails, or use the link in the email footer. We honor requests immediately and will not email you again. You can also write to support@fdarecallradar.com to ask what we hold about you or to ask us to delete it. If you ask us to delete your record we keep only the one-way hash so that we do not contact you again.

Who sees it. The email service we send from (Google Workspace), our hosting and database providers, and the address-verification service, each only as needed to provide their service. We do not sell your information.

If you subscribe to the free weekly brief

If you sign up for our free weekly FDA recall brief, this section explains what we do with your information.

What we keep. Your email address; the categories you chose; when you asked to subscribe and when you confirmed; the version of the consent text you saw and which page you used; the campaign or link you came from; and the delivery, bounce and complaint events our email provider reports for the emails we send you. We do not store your IP address or browser details with your subscription, and we do not track whether you open or click the emails.

What we use it for.To send you the brief you asked for, to confirm your sign-up, to honor your choices and unsubscribe, and to stop emailing addresses that bounce or complain. If you later start a free trial of our paid report, we may count that the trial came from the newsletter link. We do not use the brief’s list to send you other marketing without your separate consent.

If you are on our cold-outreach list. Confirming your subscription means we stop sending you sample-report emails.

How long we keep it. While you are subscribed. If you unsubscribe, we keep your record for 30 days, then delete your email address and choices. We keep only a one-way hash of your address (not the address itself) so that we never email you again, and a record of your consent history for 3 years.

Who sees it. Resend, our email provider, and the hosting and database providers named above, only as needed to provide their service. We do not sell your information.

Errors. If an item in the brief is wrong, write to corrections@fdarecallradar.com.

Your choices. Unsubscribe from any email, or write to support@fdarecallradar.com to ask what we hold or to have it deleted.

How long we keep it

Account data is retained while your subscription is active and for 90 days after cancellation, after which it is deleted on request. Digest HTML and source records are retained for 12 months to support the audit trail required by our legal-safety design.

Your rights

You may request deletion of your account and associated data at any time by emailing us. You may unsubscribe from digest emails at any time via the unsubscribe link in any digest.

Cookies

We use a single session cookie to keep you signed in. We do not use tracking or advertising cookies.