Privacy Policy

1. Who we are

Shucker ("Shucker," "we," "us," or "our") provides a shellfish compliance product for restaurants, including our mobile app and website at shucker.io. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

For privacy questions, contact us at privacy@shucker.io.

2. Information we collect

We collect information in the following categories when you use Shucker:

Account and contact information

• Email address
• Name or display name
• Restaurant, organization, and role information associated with your account
• Authentication credentials and session data managed by our auth provider

User content and compliance records

• Photos of shellfish tags (front and back)
• Tag and lot details captured or extracted from those photos (for example lot number, species, harvest and ship dates, producer information, quantity, and related compliance fields)
• Notes, waste log entries, and other records you enter for restaurant operations
• Service or ordering profile information you choose to save in the product

Identifiers

• User account identifiers used to operate your account and attribute activity

Subscription and billing-related information

• Subscription status and related billing state for your restaurant (for example whether access is active and current period end)
• Payment card details are processed by our payment processor (Stripe) when you subscribe on the website. We do not store full payment card numbers in the Shucker mobile app.

Product usage

• Information about how you use Shucker features needed to provide the service (for example captures, sync status, and operational activity tied to your restaurant)

Device and technical information

• Basic technical information needed to run the service securely (for example app session tokens stored on device, and online/offline connectivity state used for sync)

3. Information we do not collect

We do not collect or sell the following for advertising or tracking purposes:

• Precise or coarse device location (GPS)
• Advertising identifiers used for tracking across other companies' apps or websites
• Contacts from your address book
• Health or fitness data about you as an individual
• Browsing or search history outside Shucker

Harvest location text on shellfish tags is product/compliance metadata from the tag, not your device location.

4. How we use information

We use the information above to:

• Provide, maintain, and improve the Shucker app and website
• Create and manage accounts, restaurants, and staff access
• Capture, store, and organize shellfish compliance records and related photos
• Send operational reminders and account-related communications
• Process subscriptions and manage access to paid features
• Provide customer support and respond to requests
• Protect the security and integrity of the service
• Comply with legal obligations

We do not use personal information for third-party advertising, and we do not track users across other companies' apps or websites for advertising.

5. How we share information

We share information only as needed to operate Shucker:

• Service providers. We use vendors that process data on our behalf, including hosting, authentication/database infrastructure (Supabase), and payment processing (Stripe).
• Your organization. Information associated with a restaurant or organization may be visible to authorized managers and staff within that account, according to role and product settings.
• Legal and safety. We may disclose information if required by law or to protect the rights, safety, and security of Shucker, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal information.

6. Data retention

We retain account information and compliance records for as long as needed to provide the service, support restaurant audit and retention needs, and meet legal obligations. When you delete content or close an account, we delete or anonymize associated personal data within a reasonable period, unless we must retain it for legal, security, or accounting reasons.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information we process. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of personal information
• Object to or restrict certain processing
• Request a copy of information you provided to us

To exercise these rights, email privacy@shucker.io. You can also update some account details directly in the product. If you are a staff user, some restaurant records may be controlled by your organization's administrator.

9. Children

Shucker is a business product intended for restaurant professionals. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

10. International users

Shucker may be operated from the United States. If you access the service from another country, your information may be processed in the United States or other locations where we or our service providers operate.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, when appropriate, provide additional notice. Continued use of Shucker after an update means you acknowledge the revised policy.

12. Contact

Questions about this Privacy Policy or our data practices can be sent to privacy@shucker.io.