Privacy Policy

This Privacy Policy describes how Tarasenko Multiservice (enkeltpersonforetak, organisasjonsnummer 832237752, Norway) — the operator of belkafood.no (hereinafter "we", "the Platform") — collects, uses, and protects users' personal data, in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Norwegian Personal Data Act (Personopplysningsloven).

1. Data Controller

The data controller is Tarasenko Multiservice, organisasjonsnummer 832237752. For any questions regarding the processing of personal data, contact: tavixno@gmail.com.

2. What Data We Collect

At registration: name, email, password hash. When signing in with Google — your Google profile data (name, email, avatar). When signing in with Telegram — data from the Telegram Login widget (ID, name, username, avatar).

When creating a recipe: title, description, ingredients and their quantities, cooking steps, photos (up to 6) and video (up to 1 minute).

Data for Pro features: your own ingredient purchase prices, dish sale price, catering/event data (guest count, menu composition) — this data is visible only to you.

AI assistant and AI balance (Pro tier): the text of your messages to the builder's AI assistant, any photos you attach to them (for example, a picture of an ingredient or of someone else's recipe for recognition), and your AI balance's transaction history — top-ups and charges, with a description of what was charged for, the date and the amount.

Social activity: follows, favorites, ratings and comments on recipes, recipe reports.

Author channel (Pro tier): text, photos and video of posts in an author's own channel, reactions and comments from other users on those posts.

Referral program: if you registered via an author's referral link — the fact of that registration; if you chose a "favorite author" to support — which author you are currently supporting (you can change this choice at any time). For authors participating in the program: the fact of participation and payout connection status. Data required directly for identity verification and payout (full name, address, identity document, bank details) is collected and stored directly by Stripe (Stripe Connect) — the Platform does not receive or store this data, only a technical flag indicating whether the author's payouts are connected.

Pro subscription payment: card data is processed and stored exclusively by Stripe — the Platform does not receive or store your card number, CVC code, or other full payment details, only the fact and status of your subscription.

Technical data: session cookies for account login and form protection (CSRF). See the Cookie Policy for details.

Data from public Telegram channels: the Platform automatically aggregates recipes from publicly available cooking Telegram channels — channels with no access restrictions, visible to any user without registration. We collect the post text, photos/video, and the channel's name and @username — only information that is openly available on Telegram. Data from closed or private channels is not collected. Each aggregated recipe includes a direct link to the source channel. The owner of a public Telegram channel may claim their profile on the Platform or request the removal of their recipes by writing to tavixno@gmail.com.

3. Purposes and Legal Bases for Processing

• Contract performance (GDPR Art. 6.1(b)) — providing the Platform's functionality: registration, publishing recipes, follows, favorites, notifications, calculating nutrition and cost;
• Legitimate interest (GDPR Art. 6.1(f)) — preventing spam and abuse, moderating recipes, ensuring the Platform's security; aggregating publicly available recipes from open Telegram channels into a structured searchable database (similar to search engines indexing public content);
• Consent (GDPR Art. 6.1(a)) — where applicable;
• Legal obligation (GDPR Art. 6.1(c)) — responding to lawful requests from government authorities.

4. Processing Using Artificial Intelligence

To structure recipes from Telegram posts, translate recipes between Russian, English and Norwegian, and determine ingredient categories and allergens, we send text (post/recipe text, ingredient names) to third-party AI providers: Google (Gemini API), and, as fallback providers when the primary one is unavailable, Groq, Cerebras and Anthropic (Claude API). Only the recipe's textual content is sent to these providers — never data identifying you personally (email, password, etc.).

Builder AI assistant and photo recognition (Pro tier, paid). If you choose to use these features yourself, the text of your messages, the content of the recipe being discussed, and — if you decide to attach a photo (for example, a picture of an ingredient or of someone else's recipe) — the image itself are sent to Anthropic (Claude API) to process your request. Voice messages to this same assistant are first transcribed to text by Google (Gemini API), and only the resulting text is then used in the conversation. Unlike the automatic processing of Telegram posts described above, this processing only ever starts from your own explicit action (opening the chat, uploading a photo, or recording a voice message). We do not send these providers your email, password, or payment details either.

5. Who We Share Data With

• Hetzner Online GmbH (object storage, data center in Helsinki, Finland) — storage of uploaded photos, videos, and avatars, within the European Union;
• Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.) — processing payment for the Pro subscription; for authors who have connected payouts under the referral program — also identity verification and payout of commission (Stripe Connect). Stripe acts as an independent data controller for this verification — see Stripe's own privacy policy for details;
• Google OAuth — sign-in with a Google account (at the user's choice);
• Telegram Login — sign-in with Telegram (at the user's choice);
• Google Gemini, Groq, Cerebras, Anthropic (Claude) — see section 4;
• Sentry — technical error monitoring for the site (may record technical request data during a failure: IP address, browser, page address — solely for diagnosing and fixing errors);
• the hosting provider running our server and database.

We do not sell personal data to third parties and do not use it for targeted advertising.

6. Retention Periods

Account data is stored until the user deletes their account. When an account is deleted, your recipes, author channel, and related data (photos, video, comments, ratings, channel posts) are deleted; if one of your recipes is used as a component in someone else's recipe, account deletion is blocked until that link is removed (you'll receive a clear explanation when attempting to delete your account). We are required to keep records of accrued and paid referral commissions for longer — for the period required by Norwegian accounting and tax law, even after account deletion.

7. Your Rights

Under GDPR you have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion of your data ("right to be forgotten");
• restrict processing of your data;
• receive your data in a machine-readable format (right to data portability);
• object to processing based on legitimate interest;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority — the Norwegian Datatilsynet (datatilsynet.no) or the data protection authority of your country of residence if you are in the EU/EEA.

To exercise these rights, write to tavixno@gmail.com. You can change most of your profile data and delete your account yourself in the settings.

8. Data Security

Passwords are stored as cryptographic hashes (bcrypt), the connection to the site is protected via HTTPS/TLS, and access to administrative functions is restricted by user roles.

9. Minimum Age

The Platform is not intended for people under 13 — the minimum age for independent consent to data processing under Norwegian law. If you become aware that a child under this age has provided us with personal data without parental consent, please let us know at tavixno@gmail.com — we will delete such data.

10. Changes to This Policy

We may update this Policy — for example, when new paid features or payment methods are introduced. The new version takes effect once published on the Platform.