Data rights & subprocessors

This page describes template-level data-rights posture for pilots. It is not a substitute for counsel-approved agreements. Production marketing must respect LEGAL_POLICIES_PUBLISHED and your finalized privacy program.

Access, correction, export

Workspace owners can export operational data from dashboard tools where implemented. For formal subject requests, contact the address listed in your executed privacy notice.

Deletion

Account deletion and hard data removal require a reviewed workflow to avoid accidental production loss. Use support for coordinated deletion requests.

Subprocessors

Typical infrastructure subprocessors include managed Postgres (e.g. Supabase), hosting (e.g. Vercel), email (Resend), payments (Stripe), and optional observability vendors when enabled. Maintain your own subprocessor list for customer contracts.

California residents (CCPA / CPRA)

California consumers may have rights to know, delete, correct, and opt out of certain data uses. OS Kitchen does not sell personal information for monetary consideration. To submit a privacy request or opt out of analytics cookies on marketing pages, use the cookie banner or contact support@os-kitchen.com with subject line California Privacy Request.

Do Not Sell or Share: We do not sell personal information. Marketing analytics (e.g. GA4, optional PostHog) may constitute “sharing” under CPRA when enabled — disable non-essential cookies via the site banner or browser controls.

DPA

A Data Processing Addendum is provided separately through your legal/commercial process — OS Kitchen does not auto-generate binding legal instruments from this template page.