Privacy Policy

1. Introduction

Culixur ("we," "us," or "our") is an invitation-only private culinary platform operated by Pizzy Holdings. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our platform as a member, chef, or visitor. By using Culixur you agree to the practices described in this policy.

We take your privacy seriously. We do not sell your personal data. We do not use it for advertising. Every data decision we make is guided by necessity, proportionality, and your trust.

2. Information We Collect

Members

• Identity: full name, date of birth, government-issued ID (for verification only)
• Contact: email address, phone number, billing and service addresses
• Payment: billing details processed and tokenised by Stripe. We never store card numbers or CVVs.
• Service preferences: dietary requirements, allergens, occasion types, guest counts
• Booking history: dates, menus, chefs assigned, service outcomes, ratings submitted
• Referral: your unique referral code and referrals attributed to it
• Account activity: login timestamps, device type, IP address, browser information

Chefs & Culinary Professionals

• Professional background: culinary history, certifications, specialties, portfolio images
• Identity verification: government-issued ID, background check consent
• Banking details: account information for payment disbursements (stored encrypted)
• Performance data: ratings received, training completion records, service recordings
• Availability: calendar preferences and unavailable dates

All Users

• Technical data: IP address, browser type, device identifiers, operating system
• Usage data: pages visited, features used, session duration
• Communications: support messages, concierge correspondence
• Cookies: see our Cookie Policy

3. How We Use Your Information

• Service delivery: matching members with appropriate chefs, coordinating bookings, facilitating payments
• AI-powered matching: your booking preferences and anonymised chef profiles are processed by Anthropic's Claude API to generate personalised chef recommendations. No personally identifiable data is retained by Anthropic beyond the processing of individual requests.
• Payments & disbursements: processing membership fees via Stripe; calculating and distributing chef earnings according to our disbursement model
• Communications: booking confirmations, service reminders, concierge updates, membership communications. You may opt out of non-essential communications at any time.
• Safety & compliance: identity verification, fraud prevention, dispute resolution, compliance with applicable law
• Platform improvement: aggregated and anonymised analytics to improve matching quality, service design, and user experience
• Training oversight: service recordings are reviewed by our quality team solely for chef performance and compliance purposes

4. Sharing Your Information

We do not sell or rent your personal data. We share information only as described below:

• Assigned chefs: when a booking is confirmed, the assigned chef receives your first name, service address, dietary requirements, occasion type, and guest count (the minimum necessary for service delivery)
• Stripe: payment processing. Subject to Stripe's Privacy Policy
• Anthropic: anonymised booking preferences and chef profiles for AI matching. Subject to Anthropic's Privacy Policy
• Amazon Web Services: cloud hosting and file storage (chef photos, menu images, service recordings) on AWS infrastructure in the US East region. Subject to AWS's Privacy Policy
• Legal obligations: when required by law, court order, or to protect the rights, property, or safety of Culixur, our users, or the public
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may transfer to the successor entity subject to equivalent privacy protections

5. Data Retention

• Active member data is retained for the duration of your membership
• Financial records (invoices, disbursements) are retained for 7 years to comply with accounting obligations
• Inactive accounts are deleted or anonymised 24 months after last activity, unless a legal hold applies
• Service recordings are retained for 90 days following quality review, or longer if flagged for compliance purposes
• Chef banking details are retained while the chef is active on the platform and deleted within 30 days of account closure
• Support correspondence is retained for 2 years

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your personal data (subject to legal retention obligations)
• Portability: receive your data in a structured, machine-readable format
• Restriction: request that we limit processing of your data in certain circumstances
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, email privacy@culixur.com. We will respond within 30 days. We may need to verify your identity before processing the request.

7. Security

We implement industry-standard safeguards to protect your personal data, including:

• TLS encryption for all data in transit
• Encryption at rest for sensitive data including banking details and identity documents
• AWS infrastructure with role-based access controls and audit logging
• Regular security assessments and penetration testing
• Strict internal access controls; staff access to personal data is limited to those with a legitimate operational need

No system is entirely secure. If you believe your account has been compromised, contact us immediately at security@culixur.com.

8. Cookies

We use cookies and similar technologies to operate our platform and improve your experience. For full details, see our Cookie Policy.

9. Children

Culixur is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor's data has been collected, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and prominently posted on the platform at least 14 days before taking effect. Continued use of Culixur after the effective date constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related queries, data requests, or concerns:

• Email: privacy@culixur.com
• Concierge: concierge@culixur.com

Culixur is operated by Pizzy Holdings. Learn more at pizzyholdings.com.