BanquetLabelGet started free

Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains how BanquetLabel ("we," "us," or "our") collects, uses, and shares information when you use our website and web application (the "Service"). BanquetLabel is operated by BFA Solutions LLC, 1317 Edgewater Dr #4387, Orlando, FL 32804.

1. Information We Collect

Information you provide:

  • Account information: your name and email address. You sign in with one-time links or codes we email to you, or, if you choose, with your Google or Microsoft account. We do not use or store passwords for your account.
  • Sign-in with Google or Microsoft: if you choose to sign in with Google or Microsoft, that provider sends us your name, your email address, an identifier for your account with that provider (for Microsoft, your organization's tenant ID and your account's object ID), and whether the provider has verified your email address. We use this only to sign you in, to create your account if you are new, and to match you to your existing BanquetLabel account. We do not receive your Google or Microsoft password, we do not ask for access to your mail, contacts, calendar, or files, and we do not keep the access token the provider issues.
  • Records of acceptance of our Terms and this Privacy Policy: when you create an account, we record the version you accepted, the time, how you signed up (email link, invite code, Google, or Microsoft), and your IP address.
  • Billing information: payments are handled by Stripe on its own checkout page. BanquetLabel never sees or stores your full card number. Stripe shares with us your customer and subscription details, such as your plan and billing status.
  • User Content: menus, ingredient and allergen data, label designs and settings, uploaded files (including PDFs and images) and pasted menu text, uploaded logos and brand images ("Brand Assets"), and label content.
  • Workspace information: if you use a Premium workspace, the email addresses of people you invite and your workspace membership.
  • Records of renewal consent: when you start a subscription or add seats, we record the plan, price, and billing interval you agreed to, the version of the consent wording you accepted, the screen you agreed on, the time, and your IP address.
  • ChatGPT information: if you use BanquetLabel in ChatGPT, the menus ChatGPT sends to us and a record of your connection (see Section 6).

Information collected automatically:

  • Usage data: pages viewed, features used, and actions taken.
  • Device and log data: IP address, browser type, and timestamps.
  • When you use BanquetLabel in ChatGPT, an anonymized identifier ChatGPT sends with each request (see Section 6).
  • Information stored in your browser, and information collected by the services that load on our pages (see Section 10).

2. How We Use Information

We use information to:

  • Provide, operate, and maintain the Service.
  • Sign you in, including with Google or Microsoft if you choose, and keep a record that you accepted our Terms and this Privacy Policy.
  • Process payments and manage subscriptions (via Stripe).
  • Provide AI-assisted features such as menu/PDF parsing.
  • Communicate with you about your account, updates, and support.
  • Keep records of the subscription terms you agreed to.
  • Improve and analyze the Service, including improving menu parsing by comparing parse results with the corrections you make.
  • Detect, prevent, and address security or technical issues.
  • Comply with legal obligations.

3. AI Processing

Some features process your User Content (such as uploaded menus or PDFs) using AI services to extract or generate text and label information. Menu text and images you upload are sent to Anthropic to parse menus. Under Anthropic's commercial terms, data sent through its API is not used to train its models. We do not sell your User Content, and we do not use your uploaded logos or Brand Assets to train AI models.

4. Logos & Brand Assets

If your plan lets you upload your own logo or brand images, we store and process those Brand Assets solely to display them on the labels you create and to provide the Service to you. We do not use your Brand Assets for our own advertising or marketing, sell them, or share them except with the service providers who host and operate the Service on our behalf. You can remove an uploaded logo at any time from your account, and we delete Brand Assets in accordance with our retention practices (see Section 9) when you delete them or close your account.

5. Workspaces

When you join a Premium workspace, the menus you create there and your activity in it (such as creating, editing, or deleting menus) are visible to the workspace owner and other members. The workspace owner can invite and remove members.

6. BanquetLabel in ChatGPT

You can use BanquetLabel as an app in ChatGPT, which is operated by OpenAI. ChatGPT reads your menu and sends it to us as sections and dishes, with optional descriptions and dietary tags, together with the design and label size you choose. We receive only what ChatGPT sends to our tools, not your ChatGPT conversation or the files you share with ChatGPT. Menus that come from ChatGPT are not sent to Anthropic.

  • Browsing designs and previewing labels needs no account. A menu you preview is used only to draw the preview image and is not saved.
  • Connecting your account. To download labels, you connect your BanquetLabel account in a BanquetLabel window that ChatGPT opens. You sign in, or create an account, with your email address and a 6-digit code we email to you; a new account also needs your name. We keep a record of the connection, including when you allowed it and what it may do, so ChatGPT can act on your account. A connection lasts up to 90 days, and you can remove it at any time under Connected apps on your account page.
  • Downloading labels. When you download labels from ChatGPT, we save the menu to your BanquetLabel account like any other menu, and keep the label PDF for up to 24 hours so the download link works. Anyone who has the link can open the file until it expires.
  • Rate limiting. Requests arrive from OpenAI's servers, so we see OpenAI's IP addresses rather than yours, and ChatGPT sends an anonymized identifier for you with each request. We use the identifier and the IP address only to limit how many requests one person or address can make. The identifier is held in memory for about 10 minutes and is not stored with your account or written to our logs.
  • What ChatGPT receives. Our replies to ChatGPT, such as the preview image, a short summary, the menu name, and the download link, go to OpenAI and are handled under OpenAI's own privacy policy.

7. Service Providers

We use the following service providers to operate the Service. Each receives only the information it needs to do its job for us.

  • Stripe processes payments and subscriptions. It receives your name, email address, billing address, and the card details you enter on its checkout page.
  • Anthropic parses menus. Menu text and images you upload are sent to Anthropic to parse menus. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
  • Resend sends our emails, such as sign-in links and codes, workspace invites, shared menus, and account emails. It receives your email address, your name, and the content of those emails.
  • Google Workspace receives the email you send to hello@banquetlabel.com.
  • Render hosts the Service, its database, and its job queue. It stores your account information and User Content on our behalf.
  • Cloudflare provides our domain name service and delivers the site to your browser, so it receives your IP address and the requests your browser makes. Its R2 storage holds your uploaded logos, the files you upload while they are being parsed, cached copies of label PDFs, and label PDFs you download from ChatGPT.
  • Umami provides privacy-focused website analytics. It receives the pages you view, buttons you click, the referring page, your browser and device type, and your approximate country. It does not use cookies.
  • Google Fonts and Fontshare serve the fonts our pages use. They receive your IP address and browser information when the fonts load.
  • Google and Microsoft, only if you choose to sign in with them, confirm who you are. You sign in on their pages, under their own privacy policies, and they learn that you signed in to BanquetLabel. They send us the information described in Section 1. We send them nothing about you beyond the sign-in request, which may include the email address an invite was sent to so the right account is suggested.
  • Google serves the "Add as preferred source" button on our marketing and policy pages. It receives your IP address when the button loads and may set Google cookies if you use it.

8. How We Share Information

We do not sell your personal information. We share information only with:

  • Service providers who help operate the Service, listed in Section 7, under confidentiality obligations.
  • Your workspace, as described in Section 5.
  • People you choose to share with, such as when you share a menu by email. The recipient receives the menu and your name.
  • OpenAI, when you use BanquetLabel in ChatGPT, as described in Section 6.
  • Legal and safety purposes, when required by law or to protect rights and safety.
  • Business transfers, in connection with a merger, acquisition, or sale of assets.

9. Data Retention

We keep information for the periods below.

  • Account information, saved menus, and logos: until you ask us to delete your account. We do not currently delete inactive accounts automatically. You can delete menus and remove logos at any time. If you ask us to delete your account, we delete your account information, saved menus, logos, parse records, menu correction records, Google and Microsoft sign-in links, and ChatGPT connection and sign-in code records.
  • Google and Microsoft sign-in links (the provider account identifier and the email address at the time you first signed in with it): until your account is deleted.
  • Google and Microsoft sign-in attempts: the details the provider sends are cleared as soon as the sign-in finishes, and the attempt record is deleted after one day, when the next provider sign-in starts.
  • Files you upload for parsing: deleted from temporary storage once parsing finishes, and in any case within one day.
  • Parsed menu results kept to speed up repeat uploads: 5 days.
  • Parse records: the extracted menu text and parse results are cleared after 30 days. The rest of each record, such as timing and usage details, is kept until your account is deleted. Records of failed parses are deleted after 7 days.
  • Menu correction records: for each menu you parse, we keep the original menu text, the first parse result, and the version you finish with, to improve menu parsing. These are kept until your account is deleted.
  • Cached copies of label PDFs, kept to speed up repeat downloads: up to 60 days.
  • Label PDFs downloaded from ChatGPT: up to 25 hours. The download link works for 24 hours, and a cleanup that runs every hour removes the file after that.
  • ChatGPT connection records and sign-in code records (your email address, your name if you created an account, and a scrambled copy of the code): until your account is deleted. A removed or expired connection stops working at once. Sign-in codes expire after 10 minutes.
  • Workspace activity history: 7 days.
  • Workspace memberships after a Premium workspace is downgraded: other members lose access, and their memberships may be removed after a 30-day grace period.
  • Records of renewal consent: kept indefinitely, including after your account is deleted, as a record of the subscription terms you agreed to.
  • Records of acceptance of our Terms and this Privacy Policy: kept indefinitely, including after your account is deleted, as a record of what you agreed to.
  • Payment records are kept by Stripe, and emails by Resend and Google Workspace, under their own retention policies.

We may keep information longer where needed to comply with legal obligations, resolve disputes, or enforce agreements. You may request deletion (see Section 12).

10. Cookies and Similar Technologies

BanquetLabel does not set its own cookies to keep you signed in. When you sign in, your browser stores a sign-in token in local storage (or, if local storage is unavailable, session storage) so you stay signed in. We also use local storage to remember small preferences, such as tips you have dismissed and whether this browser has signed in before. When you connect BanquetLabel in ChatGPT, the connection window sets one cookie for 10 minutes so the connection can only be finished in the browser that started it. When you sign in with Google or Microsoft, we set two short-lived cookies that scripts on the page cannot read: one while you are on the provider's page, and one after you return so the sign-in can finish. Each lasts at most 10 minutes and is cleared when the sign-in completes.

Services that load on our pages:

  • Umami, our analytics service, is privacy-focused and does not use cookies.
  • Our pages load fonts from Google Fonts and Fontshare, which receive your IP address when fonts load.
  • Our marketing and policy pages load Google's preferred-source script, which renders the "Add as preferred source" button and may set Google cookies when you use it.
  • When you check out, you go to a payment page hosted by Stripe, which sets its own cookies under Stripe's privacy policy.

We do not currently use advertising pixels or cross-site advertising cookies. You can control cookies and local storage through your browser settings, though signing in requires local or session storage.

11. Do Not Track and Third-Party Tracking

Our site does not currently respond to browser Do Not Track signals. We do not allow third parties to collect information about your online activities over time and across other websites through our site for advertising. Google receives limited technical information, such as your IP address, when our pages load Google Fonts or the Google preferred-source button, as described in Section 10.

12. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal information, and to opt out of certain processing. To exercise these rights, or to review or ask us to change the information we hold about you, contact us at hello@banquetlabel.com. We will respond as required by applicable law (including, where applicable, GDPR and CCPA/CPRA).

13. Data Security

We use reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children's Privacy

The Service is not intended for individuals under 18, and we do not knowingly collect personal information from children.

15. International Users

Your information may be processed in the United States or other countries where we or our service providers operate, which may have different data protection laws than your jurisdiction.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date reflects the latest revision.

17. Contact

Questions about this Privacy Policy? Contact us at hello@banquetlabel.com, or by mail at BFA Solutions LLC, 1317 Edgewater Dr #4387, Orlando, FL 32804.