Privacy Policy

Last updated: 2026-05-01 · Effective: 2026-05-01

Draft v1. This policy is a working draft. It reflects our actual practices and is binding for purchases made today, but a Canadian privacy lawyer is reviewing it. We'll re-publish if anything material changes and notify all customers by email.

Page for Plate ("we", "us", "the Company") respects your privacy and is committed to handling personal information in accordance with Canadian privacy law, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (PIPA). This policy explains what we collect, why, who we share it with, and your rights.

1. Information we collect

From restaurants we contact via postcard

Before you sign up, we may have built a preview website for your restaurant and mailed you a postcard inviting you to claim it. To do this, we collect publicly available information about your business:

Restaurant name, address, phone number
Public reviews and ratings
Photos uploaded to Google Maps
Menu items pulled from your existing website (if any)
Hours of operation

This information comes from Google Places, public review sites, and your own website. We do not collect personal information about individual employees, customers, or owners during this stage.

When you visit our website

Visitor analytics via Cloudflare's edge analytics — this is privacy-preserving and does not use cookies, fingerprinting, or unique identifiers. We see aggregate counts of pageviews per country and per page, but cannot identify individual visitors.
QR scan tracking. When you scan a QR code on a Page for Plate postcard, the resulting visit is counted in Cloudflare's aggregate analytics. We can see that someone scanned a particular postcard, but not who.

When you subscribe

Payment information — handled directly by Stripe Inc. We do not see or store your credit card number. We receive only: your name, email, billing address, and a Stripe customer/subscription identifier.
Account information — email address, restaurant name, slug, and chosen plan.
Customizations you provide — menu items, hours, photos, logo, social-media links, and any text or imagery you ask us to put on your site.

From your subscribers' interactions with the AI concierge

Customer questions sent to your AI concierge are processed by our AI provider (Anthropic) to generate responses. We retain the question and response for up to 90 days for quality monitoring, then delete them. We do not associate them with identifiable customer profiles.

2. Why we collect it (purposes)

To build and host your custom website
To bill you accurately, send receipts, and handle subscription changes
To provide visitor analytics so you understand your traffic
To operate the AI concierge feature
For Full Bundle subscribers, to manage your Google Business Profile and reputation
To contact you about service changes, outages, and support requests
To comply with our legal obligations (tax records, etc.)

3. Who we share it with (third parties)

We use the following third-party processors to operate the Service. Each receives only the information necessary for the function listed.

Stripe Inc. — payment processing. Stores your billing information directly; we receive only customer/subscription identifiers and metadata. Stripe data may be processed in the United States.
Cloudflare, Inc. — website hosting and edge analytics. Cloudflare may process traffic data internationally; the privacy-preserving analytics do not identify individual visitors.
Airtable, Inc. — our internal CRM. Stores your restaurant info, contact details, and subscription status. Data is stored in the United States.
Anthropic, PBC — AI provider for the concierge feature. Receives anonymized customer questions and your menu/hours data to generate responses.
Google LLC — we use Google Places API for restaurant data and, for Full Bundle subscribers, Google Business Profile API to manage your listing.
PostGrid and Lob — print-and-mail providers for our postcard outreach.

We do not sell, rent, or trade personal information.

4. International data transfers

Some of our processors (Stripe, Cloudflare, Airtable, Anthropic) store or process data in the United States or other jurisdictions outside Canada. By using the Service, you understand and consent to this cross-border transfer. We require all processors to meet privacy standards comparable to Canadian law and have contractual data protection agreements with each.

5. Retention

Lead information (pre-subscription): retained for up to 24 months from collection, then deleted.
Subscriber information: retained for the duration of the subscription plus 7 years for tax/accounting purposes, then deleted.
AI concierge interactions: retained up to 90 days, then deleted.
Visitor analytics (aggregate, non-identifying): retained up to 12 months in Cloudflare.

6. Your rights

Under PIPEDA and BC PIPA, you have the right to:

Know what personal information we hold about you
Request access to that information
Request correction of inaccurate information
Withdraw consent for further use (this may end the Service)
File a complaint with our Privacy Officer (below)
File a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for BC

To exercise any of these rights, email support@pageforplate.com. We will respond within 30 days.

7. Security

We use industry-standard safeguards: encrypted connections (TLS) for all data in transit, encrypted storage with our processors, access controls limiting who can see your data, and prompt notification if we detect a breach affecting your information. No system is perfectly secure; we make reasonable efforts in proportion to the sensitivity of the data.

8. Cookies & tracking

The marketing site at pageforplate.com does not use cookies or tracking pixels. Your subscriber site (e.g. {your-restaurant}.pageforplate.com) does not use cookies by default; if you enable third-party tools (e.g. Meta Pixel) on your site, separate disclosure on your site will be required.

Stripe may set cookies on the Stripe-hosted Checkout page during payment; that is governed by Stripe's privacy policy.

9. Children

The Service is sold to businesses, not consumers, and is not directed at children. We do not knowingly collect personal information from anyone under 16.

10. Changes to this policy

We may update this policy. The "Last updated" date at the top reflects the most recent change. For material changes affecting subscribers, we will notify you by email at least 14 days before the change.

11. Privacy Officer & contact

Our Privacy Officer can be reached at:
Email: support@pageforplate.com
Subject line: "Privacy request"
Postal: Page for Plate, Burnaby, British Columbia, Canada