Privacy Policy

1. Who we are

CompliantLabel is operated by DivX, LLC, a Texas limited liability company, operating as CompliantLabel ("we," "us"). We're based in the United States, the service runs on infrastructure in the United States, and it's built for people selling food under U.S. labeling rules. This policy describes what we collect when you use the service and what we do with it.

2. What we collect

Account data. If you sign up with an email address and password, we store the email address; the password is hashed by our authentication provider, Amazon Cognito — we never see or store it in plaintext. If you sign in with Google instead, Google sends us your name and email address, and nothing else — we never receive your Google password, contacts, or any other Google account data.

Product data. When you build or save a product, we store the recipe data you enter: ingredient names and quantities, serving configuration, added-sugar amounts, and declared allergens, tied to your account.

Exported files. When you export a label (as a PDF or PNG), we store the exported file to deliver the download to you — including for exports made without an account. Exported files are automatically deleted after 30 days.

Service logs. Like nearly every website, our servers keep standard operational logs of requests — things like IP addresses, timestamps, and error details. We use them only to operate, secure, and troubleshoot the service.

3. Payment data

Subscription billing is handled entirely by Stripe. We store your subscription status, plan, and renewal date so the app knows what you're entitled to — we never receive or store your card number, expiration date, or CVC. Stripe's own privacy policy governs the payment data it processes on our behalf.

4. What we don't do

We do not sell your data, and we do not run ad tracking or third-party advertising pixels of any kind on this site. Ingredient searches run against our own copy of the USDA FoodData Central database on our servers — your searches and recipes are never sent to the USDA or any other third party. We share data only with the providers strictly necessary to run the service: Amazon Web Services (hosting and storage, in the United States), Stripe (billing), and Google (only if you choose to sign in with Google).

5. Cookies and analytics

We don't run any analytics on this site today, and we set no advertising or cross-site tracking cookies — the only browser storage we use is what's strictly necessary to keep you signed in. If we add analytics in the future it will be a privacy-respecting, aggregate-only kind, and we'll update this policy first.

6. Data retention and deletion

Your account data and saved products are retained for as long as your account exists. Canceling a subscription doesn't delete anything — your saved products stay in your account. To delete your account and saved products entirely, email us at support@compliantlabel.com and we'll remove them. Billing records are retained by Stripe as required for tax and accounting purposes, independent of your account's deletion. Exported label files are automatically deleted after 30 days, whether or not you have an account.

7. Your choices

You can ask us at any time what data we hold about you, ask for a copy of it, or ask us to delete it — email support@compliantlabel.com and we'll handle it. We don't sell or share personal information for advertising, so there's nothing to opt out of on that front. The service is intended for users in the United States; if you use it from elsewhere, your data will still be processed and stored in the United States.

8. Changes to this policy

If what we collect or how we use it changes, we'll update this policy and the "Last updated" date above before the change takes effect.

9. Contact

Questions about this policy, or any request about your data, can be sent to support@compliantlabel.com.