This Privacy Policy explains how Journey Foods Inc., a Delaware corporation ("Journey," "we," "us" or "our") collects, uses, shares and protects personal information through our websites (including journeyfoods.io), the Journey AI platform at app.journeyfoods.io, our API, developer portal and documentation, Journey Labs, The Pie newsletter, events and other services that link to this policy (the "Services"). Guava, our consumer nutrition app, has its own policy at withguava.io/more/policy.
1. Who is responsible
Journey Foods Inc. is the controller of personal information collected through our websites, marketing and account administration. When a business customer uploads personal information into the platform as part of its Customer Data, we process it on that customer's behalf and under its instructions, and the customer is responsible for it. Requests about that data should go to the customer first; we will help them respond.
2. Information we collect
You give us directly
Account and contact details: name, work email, phone, company, job title and role. Demo, sales and partnership requests, support tickets, survey answers and other messages. Newsletter sign-ups for The Pie and event registrations. Billing contact details. Card and payment details are collected and stored by Hyperline, not by Journey. Supplier profile content, such as contact names and certifications.
Collected automatically
Device and log data: IP address, browser, operating system, pages viewed, referring pages and timestamps. Product usage: features used, searches, API calls and errors, used to run and improve the Services. Cookies and similar technologies (section 7).
From others
Your organization, when it invites you as a user. Partners, event organizers and public business sources such as company websites and professional profiles, used for business development. We do not knowingly collect sensitive personal information such as health, financial account or government ID data, and we ask customers not to upload it.
3. How we use information
Provide, maintain, secure and support the Services and your account. Process payments and send invoices, receipts and service notices. Respond to demo, sales, partnership and support requests. Send The Pie, product updates and marketing, with an unsubscribe link in every email. Analyze usage and improve the Services, including through aggregated and de-identified data. We do not use one customer's Customer Data to train models that serve other customers without consent. Detect and prevent fraud, abuse and security incidents. Comply with law and enforce our Terms and Conditions.
4. Legal bases (EEA, UK and Switzerland)
Where these laws apply, we rely on: performance of a contract (providing the Services); legitimate interests (running, securing, improving and marketing a business service, balanced against your rights); consent (certain cookies and marketing, which you can withdraw at any time); and legal obligation.
5. How we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only with:
Service providers that act for us under contract, including Vercel (website hosting), Hyperline (billing and payments), HubSpot (CRM and email), Google Workspace (email and files), Vanta (security compliance), Google Cloud and Firebase (platform hosting, sign-in and AI processing), OpenAI and Anthropic (AI model providers), MongoDB Atlas and Neon (databases), Cloudflare (hosting, storage and security), Mailchimp, Mandrill and Resend (email delivery), and Google Analytics, Microsoft Clarity and Ahrefs (analytics). A current list is available from hello@journeyfoods.com. Your organization, if you use an account it administers. Other users, for content you choose to publish, such as a supplier profile. Professional advisers, such as lawyers, auditors and insurers. Authorities, when required by law or to protect rights, safety and the Services. A successor, in a merger, financing, acquisition or sale of assets, subject to this policy. Anyone else, with your consent.
6. International transfers
Journey is based in the United States and serves customers in North America, Europe, Latin America and Asia, so information may be processed in countries other than yours. When we transfer personal information from the EEA, UK or Switzerland, we use safeguards such as the European Commission's Standard Contractual Clauses.
7. Cookies and analytics
We use strictly necessary cookies to run the site and keep you signed in, and, where allowed, analytics cookies to understand how the Services are used. We use Google Analytics, Microsoft Clarity, Vercel Web Analytics, HubSpot and Ahrefs. Where required, we ask for consent before setting non-essential cookies. You can block or delete cookies in your browser, though some features may stop working. We do not currently respond to Do Not Track signals; we honor Global Privacy Control signals where the law requires.
8. Security
We use administrative, technical and physical safeguards, including encryption in transit, access controls and monitoring. No system is completely secure, so please use strong credentials and tell us of any concern at hello@journeyfoods.com.
9. Retention
We keep personal information as long as needed for the purposes above. Account information is kept while the account is active. After an account ends, Customer Data is available for export for 30 days and then deleted or de-identified within 90 days,
except backups, which roll off on a set schedule, and records we must keep for legal, tax or dispute purposes. Marketing contacts are kept until you unsubscribe or ask us to delete them.
10. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to opt out of marketing. To make a request, email hello@journeyfoods.com with "Privacy request" in the subject line. We will verify your identity, respond within the time the law requires, and not discriminate against you for using your rights. You may use an authorized agent where the law allows. If you are in the EEA or UK, you may also complain to your local data protection authority.
11. California residents
In the past 12 months we collected these categories of personal information: identifiers (name, email, IP address); professional information (company, title); commercial information (purchases and plan); internet activity (usage and log data); and inferences about business interests drawn from that information. We collect them from the sources in section 2, for the purposes in section 3, and disclose them to the categories of recipients in section 5. We do not sell or share personal information as California law defines those terms, and we do not knowingly sell or share the information of anyone under 16. California residents may request to know, delete and correct their information and may not be discriminated against for doing so. To make a request, email hello@journeyfoods.com with "Privacy request" in the subject line.
12. Children
The Services are for business use and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
13. Third-party sites
Our Services may link to sites and integrations we do not control. Their privacy practices are governed by their own policies.
14. Changes to this policy
We will post any update here with a new date. For material changes, we will notify account holders by email or in the app before they take effect.
15. Contact
Journey Foods Inc., 101 Nerem St NW, Floor 10, Atlanta, GA 30313. Privacy requests: hello@journeyfoods.com (subject line "Privacy request"). General: hello@journeyfoods.com.