Privacy Policy
Last updated: March 2026
1. Introduction
FoodSight by Positive Carbon Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at foodsight.com, use the FoodSight platform at app.foodsight.com, or interact with our Scrappy food waste monitoring devices.
2. Information We Collect
We collect the following categories of information: Personal Data (name, email address, phone number, company name, job title, and other contact details you provide when creating an account, filling out forms, or contacting us); Usage Data (information about how you use our website and platform, including pages visited, features used, time spent, and interactions); Device Data (browser type, IP address, operating system, and device identifiers); Waste Monitoring Data (for customers using our platform or Scrappy devices, we collect food waste classification data, weights, photos, and operational metrics from your kitchen operations); and Authentication Data (login credentials, OAuth tokens, and session information managed by our authentication provider).
3. How We Use Your Information
We use the information we collect to: provide, operate, and maintain the FoodSight platform and services; classify and analyse food waste using AI-powered image recognition; generate reports, dashboards, and actionable insights for your organisation; improve and personalise your experience; communicate with you about service updates, features, and support; process transactions and manage your subscription; analyse usage patterns to improve our platform; comply with legal obligations; and protect against fraud and unauthorised access.
4. Data Sharing and Third Parties
We do not sell your personal information. We may share your data with: cloud infrastructure providers (Supabase for database and authentication, Cloudflare for hosting and image storage, Railway for API hosting); AI service providers (Anthropic for food waste image classification โ photos are processed but not stored by the AI provider); email service providers (Resend for transactional emails and notifications); analytics tools to help us understand platform usage; and legal authorities when required by law or to protect our rights. All third-party providers are bound by data processing agreements and are required to protect your data.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is encrypted in transit using TLS and at rest. Access to production systems is restricted to authorised personnel via CI/CD pipelines โ no developer has direct access to production databases. Authentication uses industry-standard JWT tokens with custom claims for multi-tenant isolation. Row-level security policies enforce tenant data separation at the database layer.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Account data is retained for the duration of your subscription plus 90 days. Waste monitoring data (classifications, weights, photos) is retained for the duration of your contract plus 12 months to support year-over-year reporting. You may request earlier deletion at any time. Marketing lead data (contact forms, report requests) is retained for 24 months unless you request deletion.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to: access your personal data and receive a copy; rectify inaccurate or incomplete data; request erasure of your data ("right to be forgotten"); restrict processing of your data in certain circumstances; data portability โ receive your data in a structured, machine-readable format; object to processing based on legitimate interests; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at privacy@foodsight.com. We will respond within 30 days.
8. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a data protection concern, please contact us at privacy@foodsight.com. Our registered address is Positive Carbon Ltd, Dublin, Ireland. For complaints, you may also contact the Irish Data Protection Commission (DPC) at dataprotection.ie.