Privacy policy

Last updated October 29, 2026

This policy explains what personal information Organic Check (run by Josh Yaspan, "we") collects, why, and what you can do about it. Short version: we collect only what's needed to run the service, we don't sell or share your data for advertising, and there are no ad or tracking cookies.

What we collect

Account details: your email address, company name and password. The password is stored only as a secure, one-way hash; we can't read it.
What you put in the app: supplier names, places and products you check or watch, the results of your checks, and items you mark as handled.
Billing: if you subscribe, Paddle, our reseller and Merchant of Record, collects your payment and billing details. We receive and keep only your plan, billing period, subscription status and Paddle customer and subscription IDs, not your card number.
Newsletter: if you subscribe to the monthly report, your email address, when you signed up and on which page. It's used only to send that email; every email has an unsubscribe link, and unsubscribing deletes your address.
Technical data: your IP address and the pages and API calls you request, in server logs used for security and fixing problems, and a usage count per account for rate limits.

The USDA data the app shows is public business information. USDA's files also contain contact names, phone numbers and email addresses of certified operations; Organic Check doesn't load or show those.

How we use it

To run the service: sign you in, run your checks, watch your suppliers and keep your records.
To bill you through Paddle and manage your plan.
To email you about your account, alerts you've asked for, billing and important changes.
To keep the service secure, prevent abuse and fix problems.

We don't sell your personal information, share it for advertising, or use your supplier lists for anything except running the service for you.

Cookies

We use one cookie, oc_session, which keeps you signed in. It's essential, so there's no cookie banner, and there are no analytics, advertising or third-party tracking cookies. If you use an API key in the browser instead, it's saved in that browser's local storage. When you pay, our checkout page loads Paddle's checkout, which may use its own cookies to process the payment securely.

Who else handles data

Paddle sells our subscriptions as Merchant of Record and processes payments (Paddle's privacy policy).
Cloudflare carries traffic to organiccheck.app and protects it, so it handles IP addresses and requests (Cloudflare's privacy policy).
If we start sending email through a delivery service, it will receive your email address and the messages.

We may also disclose information if the law requires it, or to a buyer if Organic Check is ever sold, in which case this policy continues to apply to your data. Your data is stored in the United States.

How long we keep it

Account data, watchlists and records: while your account is open. Records are kept as evidence for your inspections, so we don't delete them on our own.
After you ask us to delete your account: removed within 30 days, and from backups within a further 14 days. Billing records may be kept longer where tax law requires.
Server logs: up to 30 days.

Your choices and rights

You can download your records from the app (Records → Download records), and ask us to access, correct, export or delete your personal information by emailing [email protected]. We'll answer within 30 days and won't treat you differently for asking. Depending on where you live (for example California or the EU/UK), you may have further rights under local law; contact us and we'll honor them.

Security

Connections are encrypted (HTTPS), passwords and keys are stored only as hashes, sign-in attempts are rate-limited, and data is backed up. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.

Children

Organic Check is a business tool and isn't meant for anyone under 18.

Changes

If we change this policy in a significant way, we'll tell you by email or in the app before it takes effect.

Contact

[email protected]