Privacy & Cookie Policy

Controller and scope

ALSERSA, UAB is the controller of personal data processed through PurePlate Pro. Company number 307158618; address: Architektų g. 56-101 (Lazdynai), Vilnius, 04111, Lithuania. Contact: office@alsersa.tech. This policy covers customers, creators and website visitors.

Legal bases and health information

We process account, purchase, delivery and creator-contract information to perform our contracts; accounting and legally required records to comply with legal obligations; and proportionate security, fraud prevention and service administration data for our legitimate interests in protecting and operating the service.

We process health-related profile information, including allergies, intolerances and dietary requirements, only with your explicit consent, for generating your personalised meal plan. You give separate consent before saving a profile and before sending it for generation. Optional cookies also require consent.

You may withdraw health-data consent at any time using Withdraw health consent in your dietary profile or by contacting support. Withdrawal stops future profile-based generation and removes the stored dietary profile; it does not affect the lawfulness of processing before withdrawal. Contact support to request deletion of previously generated plans. Without health-data consent we cannot save your dietary profile or generate a personalised plan.

Adults only

PurePlate Pro is for users aged 18 and over. Do not create a child's profile. An adult user may purchase a general family-oriented meal plan but must not submit personal or health information relating to a child or another individual without an appropriate legal basis and authority. Contact support if such information has been submitted so we can remove it.

International transfers

Service providers may process information outside the European Economic Area. Where a transfer is restricted by applicable data-protection law, it requires an applicable adequacy decision or appropriate safeguards such as European Commission standard contractual clauses and any necessary supplementary measures. Contact support for information about the safeguards applicable to your data.

Your rights

Subject to applicable law, you may request access, correction, erasure, restriction and data portability, object to processing based on legitimate interests, and withdraw consent. Contact support to exercise these rights; we normally respond within one month and may need to verify your identity. You may complain to Lithuania's State Data Protection Inspectorate or the supervisory authority where you live or work. Meal-plan generation is automated, but is not a decision producing legal or similarly significant effects about you.

Data we collect

• Account and authentication information, such as your name, email address, password credential stored as a one-way hash, and session records.
• Billing details, such as your name, email address, billing address, country, and postal code, plus transaction records such as the amount, currency, product, payment status, transaction identifier, card scheme, and last four card digits when available.
• Dietary profile information you provide, including age, gender, height, weight, activity level, allergies, tolerances, goals, meal preferences, cuisine preferences, and additional notes.
• Generated meal-plan documents and storage metadata, including filenames, download details, plan type, and expiry time.
• Creator program information, including professional and legal-name profile details, country, specialties, languages, contribution files and metadata, review decisions, offers, rights confirmations, and payout history.
• Creator bank payout details, including account holder, country, transfer method, and account identifier. These details are encrypted at rest; routine screens show only the method and last four characters.
• Technical and security information needed to operate the service, such as session-cookie data and the IP address used during checkout.

Why we use data

• Create and secure your account, maintain your session, and provide customer support.
• Use your dietary profile to generate the meal plan you request and make the resulting document available for download.
• Process purchases, apply credits, confirm payment status, provide receipts, handle refunds or disputes, and meet accounting or legal obligations.
• Operate, troubleshoot, protect, and improve the service using operational and support information.
• Verify creator profiles, privately review contributions, make and administer optional purchase offers, record rights decisions, and process creator-requested manual bank payouts.

Payment-card data

Checkout currently evaluates predefined card numbers locally in your browser. Card inputs are not transmitted to our servers or stored. Payment-provider processing described below applies when live payments become available.

PurePlate Pro does not store full payment-card numbers, expiration dates, or CSC/CVV security codes in its database. It stores only the transaction and receipt metadata described above, including the card scheme and last four digits when available.

ALSERSA, UAB does not store full payment card numbers or card verification codes. Card payment data is processed directly by independent payment service providers in accordance with applicable payment-security requirements.

When data is shared

• Payment and transaction information may be shared with payment service providers, acquiring institutions, card schemes, fraud-prevention providers and authentication service providers where necessary to process payments, perform 3DS/SCA, prevent fraud, process refunds and comply with legal obligations.
• OpenAI receives the dietary profile details included in a meal-plan request so it can generate the requested plan. The generation request does not include your account name, email address, billing address, or payment-card details.
• Cloudflare R2 stores generated meal-plan PDF files so they can be delivered through time-limited download links.
• Cloudflare R2 stores creator contribution files. Access is limited to the creator and authorized PurePlate reviewers through short-lived signed links.
• Authorized PurePlate reviewers and payment-operations personnel access creator data only as needed to review contributions, administer offers, or complete requested payouts. Access to a full payout destination is on demand and audited.
• Hosting, database, and infrastructure providers process service data only as needed to run, secure, and maintain PurePlate Pro.
• Transactional confirmation emails are not currently sent. If email delivery is introduced, email delivery providers will process your email address and purchase-confirmation details for that purpose.
• We may disclose information where required by law, to protect users or the service, or in connection with a business reorganization subject to appropriate safeguards.

Cookies

PurePlate Pro uses strictly necessary cookies to keep you signed in and protect authenticated requests, and asks for your consent before loading optional categories such as functional or analytics cookies. You can accept, reject, or customize non-essential categories through the cookie banner or the Your Privacy Choices link in the footer available on every page.

See the full breakdown of cookie categories and the specific cookies used in our Cookie Policy at /cookie-policy.

Storage and security

We use access controls, authenticated account boundaries, encrypted network connections, and other reasonable technical and organizational safeguards designed to protect personal data. No internet service can guarantee absolute security.

Generated meal-plan download records and links are set to expire after 24 hours. Other account, profile, and transaction records are retained for as long as needed to provide the service, maintain receipts, resolve disputes, and meet legal or accounting obligations.

A contribution file is made inaccessible and scheduled for deletion when the creator withdraws it, declines an offer, or PurePlate rejects it. Purchased contribution files and creator audit records are retained as needed to exercise the accepted rights, account for payments, resolve disputes, and meet legal obligations.

Full encrypted payout destination snapshots are removed from PurePlate's active database record when a payout request is paid or rejected. Redacted payout records and audit events may be retained for accounting, security, and dispute-resolution purposes.

Questions and requests

To ask a privacy question or request access, correction, or deletion of your personal data, contact office@alsersa.tech. Some transaction records may need to be retained where required for legal, accounting, fraud-prevention, or dispute-resolution purposes.