Privacy Policy

1. Who we are

This Privacy Policy applies to the website at marrowe.app and the related email and processing services (collectively, "Marrowe", "we", "us", or "our"), operated by its founders, Ryan and Dove, in the Province of Alberta, Canada.

For questions about this policy or any privacy matter, contact our Privacy Officer at hello@marrowe.app.

2. The laws we comply with

We comply with applicable Canadian and Alberta privacy and anti-spam laws, including:

  • the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA");
  • the Personal Information Protection Act (Alberta) ("PIPA Alberta");
  • Canada's Anti-Spam Legislation ("CASL") and related regulations of the CRTC.

Where the requirements of these laws differ, we apply the stricter standard.

3. What this policy covers

This policy covers personal information we collect when:

  • a chef or their sales coordinator sends a Banquet Event Order ("BEO") email to an address at marrowe.app;
  • a chef replies to a Marrowe email with photos or text;
  • any person visits this website;
  • any person contacts us at hello@marrowe.app or another Marrowe address.

4. What we collect

We collect the following categories of personal information:

4.1 Information you give us by email

  • Chef contact information: the email address from which a BEO is sent or which is included on the BEO's recipient list, along with the sender's display name.
  • BEO content: the text and attached documents (typically PDFs) of the BEO itself. This may include event metadata (name, date, time, venue, headcount), the menu, allergen and dietary information, a service timeline, contact names and phone numbers of the booking client, and other information the sales coordinator chose to include.
  • Incidental guest information: BEOs sometimes name individual guests in relation to allergies or dietary needs (for example, "shellfish allergy, Table 7, bride's mother"). We process this information only as part of the BEO and only for the purpose of generating the kitchen card and event page for the chef.
  • Photographs and reply text: if a chef replies to our follow-up email with photographs of plates or notes about the event, we receive and store those attachments.

4.2 Information we collect automatically

  • Server logs: IP address, request timestamp, request path, and user agent for every request to our servers. We retain these for security and abuse-prevention purposes only.
  • Email metadata: standard message headers received from email providers (sender, recipients, subject, message ID, timestamps) for routing and threading.

4.3 What we do not collect

  • We do not use analytics cookies or third-party tracking pixels on our marketing pages.
  • We do not request, ask for, or store payment card numbers directly. Any future paid products will use a PCI-compliant third-party payment processor.
  • We do not knowingly collect information about children. See section 13.

5. Why we collect it (purposes)

We collect personal information only for purposes a reasonable person would consider appropriate in the circumstances, in accordance with PIPEDA s.5(3) and PIPA Alberta s.11. Those purposes are:

  1. Generating the kitchen card. We extract structured event information from the BEO and return it to you as a formatted HTML email and PDF attachment.
  2. Building your event page and portfolio. We compose a permanent page for each event you cook through Marrowe and make it available at a URL we publish to you.
  3. Sending follow-up communications. Asking for photos after the event, delivering links to your pages, sending year-end retrospectives, and providing optional printed annual books.
  4. Operating, securing, and improving the service. Detecting abuse, debugging errors, and improving how we parse and render BEOs.

6. Legal basis for collection (consent)

We rely on the following bases under PIPEDA and PIPA Alberta:

  • Express consent, where you knowingly initiate communication with us (for example, by emailing hello@marrowe.app or by configuring your sales coordinator to copy beo@marrowe.app).
  • Implied consent by virtue of your continued use of the service after being informed of this policy.
  • Inferred consent for transactional replies (the kitchen card returned in direct response to a BEO you sent us) where the use is consistent with the reasonable expectations of the sender.

You can withdraw consent at any time. See section 10.

7. Who we share information with

We do not sell, rent, or trade personal information. We share it only with the following categories of service providers ("processors"), strictly to operate the service and under contracts requiring them to safeguard the information:

  • Groq, Inc. (United States) — large language model inference for parsing BEO text into structured kitchen-card data. The text of your BEO is transmitted to Groq's infrastructure for the duration of the request.
  • Postmark / ActiveCampaign Inc. (United States) — transactional email delivery and inbound email processing. All emails sent or received under @marrowe.app pass through Postmark.
  • Our hosting provider — the server infrastructure on which Marrowe runs. The current provider is identified on request.
  • Print-on-demand vendor — when (and only when) you order a printed annual or lifetime book, we share the necessary content and your shipping address with a print-on-demand vendor for the sole purpose of printing and shipping that book.
  • Legal compliance — we may disclose information when required to do so by law, court order, or other valid legal process, or to protect the rights, property, or safety of Marrowe, our users, or the public.

We do not authorize any of these providers to use your information for their own marketing purposes.

8. Cross-border data transfers

Some of our processors named in section 7 (Groq, Postmark) are located in the United States. When personal information is transferred to or processed in the United States, that information becomes subject to United States laws, including laws that may grant US government authorities access to the information (for example, under the USA PATRIOT Act).

We use providers that maintain industry-standard security practices, but we cannot guarantee that personal information processed outside Canada will be afforded the same protections as it would under Canadian law. By using Marrowe, you acknowledge and consent to this transfer and processing.

9. Retention and deletion

We retain personal information only as long as is reasonably necessary for the purposes identified in section 5.

  • BEO content and event pages are retained indefinitely as part of your professional record, which is the core function of the service. You may request deletion at any time (see section 10).
  • Photographs you send us are retained as part of the event page on which they appear. You may request removal at any time.
  • Server logs are retained for up to 90 days, after which they are deleted on a rolling basis.
  • Email metadata is retained for the lifetime of the corresponding event record.

If you delete your account (or request deletion by email), we will delete or anonymize your personal information within 30 days, except where retention is required to comply with a legal obligation, resolve a dispute, or enforce our agreements.

10. Your rights

Subject to certain limitations under applicable law, you have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Withdraw consent to ongoing collection, use, or disclosure;
  • Request deletion of your personal information;
  • Object to or restrict certain processing.

To exercise any of these rights, email hello@marrowe.app from the email address on file with us. We will respond within 30 days, in accordance with PIPEDA and PIPA Alberta.

11. Complaints

If you believe we have not handled your personal information in accordance with this policy or applicable law, please contact our Privacy Officer first at hello@marrowe.app. We will investigate and respond within 30 days.

You also have the right to file a complaint with the appropriate regulator:

  • Office of the Privacy Commissioner of Canadapriv.gc.ca
  • Office of the Information and Privacy Commissioner of Albertaoipc.ab.ca

12. CASL — commercial electronic messages

Some of the emails we send (for example, year-end retrospective notifications or promotional notices about the printed annual book) may constitute "commercial electronic messages" under Canada's Anti-Spam Legislation.

Every commercial electronic message we send will:

  • identify Marrowe as the sender and provide a contact method;
  • include a clear and unambiguous unsubscribe mechanism;
  • be sent only with your express or implied consent under section 10 of CASL.

Unsubscribe requests are processed without charge and within ten (10) business days of receipt, as required by CASL.

Transactional messages directly responding to a BEO you sent us (such as the kitchen card reply) are not commercial electronic messages for CASL purposes, but you may still opt out of further service emails by emailing us.

13. Children

Marrowe is intended for use by adult food-service professionals. We do not knowingly collect personal information from any person under the age of 13. If you believe we have collected such information, please contact us immediately and we will delete it.

14. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, and unauthorized access, including transport-layer encryption (HTTPS for the website; TLS for email), encryption of stored data at rest with our hosting provider, and limited internal access. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

15. Cookies and tracking

Our marketing pages (this website) do not set analytics or advertising cookies. If we ever introduce analytics, we will update this policy and, where required, request consent.

Internal tools and any future authenticated user areas may use session cookies strictly necessary to operate those features.

16. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any change. Material changes will be communicated to affected users by email or by a notice on the website prior to taking effect.

17. Contact

Privacy Officer
Ryan and Dove, Marrowe
Email: hello@marrowe.app