Privacy Policy

• Account info. Email address you use to sign in. We use passwordless magic-link sign-in; we do not collect or store a password.
• Subscription info. If you start a paid subscription, we receive a Stripe customer ID, subscription status, and your billing email. Card details (number, CVC) are handled directly by Stripe; we never see or store them.
• Watchlist. Cuts you pin are stored server-side against your account so they sync across devices. Up to eight items per account.
• Usage data. When you are signed in, we record which product features you open, tied to your account, so we can understand what is useful, improve the product, and support you. This is first-party only: we do not sell it and we do not share it with advertising or marketing networks. We store a feature name and a count, not a page-by-page trail. Separately, Vercel Analytics records aggregate, cookieless page-view trends. Account-level usage data is kept for 24 months, then deleted or aggregated.
• Cookies. A session cookie that keeps you signed in. See cookies policy for the full list.

• Run your account and let you sign in.
• Bill your subscription and stay compliant with tax law.
• Make the product better. Knowing which pages get used (and which don't) tells us where to invest.
• Send you product emails you've opted into. We never sell your address.

The shortest list we can keep it. Each is a vendor we use to run the service, not a partner we sell data to.

• Stripe (Ireland / United States) for subscription billing and payment processing.
• Vercel (United States) for hosting the web app.
• Fly.io (United States) for hosting the data API.
• Cloudflare (United States) for DNS, CDN, and inbound email routing for the meatread.com domain.
• Resend (United States) for sending transactional email (sign-in links, billing receipts) and the optional weekly newsletter to subscribers who opted in.

Each vendor processes your data only to provide its service to us, under a Data Processing Agreement that obliges them to standard security practices. We process customer data under the legal basis of contract performance (operating your subscription) and legitimate interest (improving the product). EU/UK customers have the rights described under "Your rights" below; we'll honor data-subject access and deletion requests through any of these vendors as needed.

Transfers outside Quebec and Canada. The vendors above store and process data outside Quebec, primarily in the United States and the European Union. Your personal information may therefore be communicated outside Quebec and outside Canada, where it remains protected by the contractual safeguards described above. If that is not acceptable to you, please do not create an account.

We do not sell your data. We do not run third-party ad trackers. We do not share usage data with marketing networks.

You can request a copy of everything we hold on you, ask us to correct it, delete it entirely, or withdraw your consent to our processing at any time. Every newsletter carries a one-click unsubscribe; for anything else, email support@meatread.com and we'll respond within 30 days. If you're in the EU or UK, this is your GDPR right of access, rectification, erasure, and to withdraw consent. If you're in Canada, this is your PIPEDA right of access and correction, and your right to withdraw consent.

Quebec residents (Law 25). In addition to the rights above, you may: request your personal information in a structured, commonly used technological form (data portability); request de-indexation or anonymization of personal information that is no longer necessary for the purpose it was collected; and be informed of the use of automated decision-making that affects you. We do not use automated decisions about subscribers: Today's Read, per-cut commentary, and the weekly read are generated from public USDA market data, not from your personal information.

Privacy Officer. Meat Read's Privacy Officer, the person responsible for the protection of personal information, can be reached at support@meatread.com. We'll respond to data-subject requests within 30 days.

• Account data: until you delete your account.
• Billing records: 7 years after your last invoice (Canadian + US tax law).
• Usage data: 24 months, then aggregated and the row-level data is destroyed.

Sign-in is passwordless: a one-time link is emailed to you and expires in 15 minutes. Sessions are signed tokens delivered as HttpOnly, Secure, SameSite=Lax cookies that expire automatically after 30 days. All traffic is HTTPS end to end. Operational access to subscriber data is restricted to a small number of named operators.

The latest version of this policy is always posted here. The “Last updated” date at the top reflects the most recent revision.

Privacy questions: support@meatread.com. General contact: support@meatread.com.