Privacy Policy

1. Who We Are

Clean Plate Innovations ("CPI," "we," "us," or "our") is a Pittsburgh, Pennsylvania-based company that provides AI-powered food waste tracking for institutional dining through our CPIsight platform. This Privacy Policy explains how we collect, use, and protect information when you visit our marketing website at www.cleanplateinnovations.com (the "Site").

2. Information We Collect

2a. Analytics Data (Google Analytics 4)

We use Google Analytics 4 (Measurement ID: G-NVBHHYMSVK) to understand how visitors interact with our Site. When you consent to analytics cookies, Google Analytics may collect:

• Pages visited and time spent on each page
• Scroll depth and navigation patterns
• Referring website or search engine
• Device type, browser, operating system, and screen resolution
• Approximate geographic location (city-level, derived from IP address)
• Interactions with CTA buttons (e.g., "Book a Demo")

Google Analytics uses cookies to distinguish unique visitors. We have configured Google Analytics with Google Consent Mode v2, which means analytics cookies are not set until you provide consent via the cookie banner on this Site. If you decline cookies, no analytics data is collected.

For more information on how Google processes this data, visit Google's Privacy Policy.

2b. Booking and Demo Request Information

Our Contact page links to Microsoft Bookings, which is operated by Microsoft Corporation. When you schedule a demo there, any information you provide (name, email, phone number, organization) is collected and processed by Microsoft under their Privacy Statement. We receive this information to schedule and conduct the meeting.

The Contact page also has a demo request form. When you submit it, we collect the name, work email, organization, role and type of operation you enter, your optional message, the page you arrived on and any campaign tags in its link (for example utm_source). We use this only to reply to your request and follow up about it. It is stored in our customer relationship database (hosted by Supabase) and sent to our team by email (delivered by Resend). The same applies if you leave your email in our ROI calculator. To keep automated spam out, the form uses Cloudflare Turnstile, which checks browser and device signals to tell people from bots; it does not set advertising cookies.

2c. Cookieless Visit Counts (Cloudflare Web Analytics)

We also count visits with Cloudflare Web Analytics, which does not use cookies or local storage and does not track you across sites. It records aggregate information such as the page viewed, referring site, country and browser type.

2d. Information We Do Not Collect

• This Site does not require user accounts or logins
• We do not collect payment information on this Site
• We do not use advertising trackers or retargeting pixels
• Our CPIsight cameras use depth sensing only — no facial recognition or personally identifiable images are captured by our product

3. How We Use Your Information

• To understand how visitors use our Site and improve its content and design
• To respond to demo requests and sales inquiries
• To measure the effectiveness of our marketing pages

4. Cookies

This Site uses the following cookies:

Google Analytics cookies are only set after you accept cookies via the consent banner. You can change your preference at any time by clearing your browser's local storage for this site.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with:

• Google Analytics — for aggregated website usage analytics (subject to your consent)
• Microsoft — for processing demo bookings via Microsoft Bookings
• Cloudflare — our hosting provider, which may process server logs for security and performance, provides cookieless visit counts, and runs the Turnstile spam check on our forms
• Supabase — hosts the database where demo requests are stored
• Resend — delivers the internal email that notifies our team of a demo request

6. Data Retention

Google Analytics data is retained for 14 months, after which it is automatically deleted. Booking information is retained in our Microsoft 365 environment for as long as needed to fulfill the business relationship. Demo requests submitted through our forms are kept in our customer relationship database for as long as needed to respond and manage the business relationship; you can ask us to delete them at any time (contact us at the address in Section 14).

7. European Economic Area (EEA) Visitors

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) applies to our processing of your personal data. This section outlines your additional rights and our obligations.

Data Controller

Clean Plate Innovations is the data controller responsible for your personal data collected through this Site. Contact details are provided in Section 14 below.

Legal Bases for Processing

We process personal data on the following legal bases:

• Consent: Analytics data via Google Analytics 4 is collected only after you accept cookies through our consent banner (Article 6(1)(a))
• Legitimate interest: Basic site functionality, security monitoring, and responding to demo requests (Article 6(1)(f))
• Contract performance: Processing booking information to schedule and conduct demo meetings you request (Article 6(1)(b))

Data Processors

We use the following third-party processors to operate this Site:

• Google LLC — Google Analytics 4 for website usage analytics
• Microsoft Corporation — Microsoft Bookings for demo scheduling
• Cloudflare, Inc. — Website hosting, CDN, security, cookieless Web Analytics and Turnstile bot protection
• Supabase, Inc. — Database hosting for demo requests
• Resend, Inc. — Transactional email for internal lead notifications

International Data Transfers

Your data may be transferred to and processed in the United States, where our processors (Google, Microsoft, Cloudflare) and our company are based. These transfers are made under appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

Your GDPR Rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate personal data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — withdraw your analytics consent at any time via the cookie banner or by clearing your browser's local storage

To exercise any of these rights, contact us at the address in Section 14. We will respond within 30 days.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority. A list of EEA data protection authorities is available at edpb.europa.eu.

Data Protection Officer

As a small business, Clean Plate Innovations is not required to appoint a Data Protection Officer under Article 37 of the GDPR. For any data protection inquiries, please contact us at the address in Section 14.

8. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to know — what personal information we collect, use, and disclose
• Right to delete — request deletion of your personal information
• Right to opt out — opt out of the sale of personal information
• Right to non-discrimination — we will not discriminate against you for exercising your rights

We do not sell personal information. To exercise any of these rights, contact us at the address in Section 14.

9. Your General Rights

Regardless of your location, you may:

• Opt out of analytics tracking via the cookie consent banner or browser settings
• Request information about what data we hold about you
• Request deletion of your personal information
• Request a copy of your data in a portable format

10. Opting Out of Analytics

• Cookie banner: Decline cookies when the consent banner appears on your first visit
• Browser settings: Clear local storage for this site to reset your cookie preference
• Google opt-out: Install the Google Analytics Opt-out Browser Add-on

11. Children's Privacy

This Site is not directed at children under 13. We do not knowingly collect personal information from children. Our CPIsight product is used by institutional staff, not students or minors.

12. Security

We use HTTPS encryption, Content Security Policy headers, and Cloudflare's security infrastructure to protect data in transit. However, no method of transmission over the Internet is 100% secure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights: