Privacy Policy

For purposes of applicable privacy and data-protection laws, SoapMetrics is generally the entity responsible for determining how and why personal information collected through the Service is processed.

Privacy-related questions and requests may be sent to:

SoapMetrics is operated from the State of Georgia, United States.

The information we collect depends upon how you use SoapMetrics.

Account Information

When you create an account, we may collect information such as:

• Name
• Email address
• Account identifiers
• Password or authentication information
• Account status
• Premium subscription status
• Account preferences
• Information necessary to maintain your account

Passwords should be stored using appropriate cryptographic hashing rather than as readable plaintext.

Recipe and Calculator Information

When you create, save, analyze, or export recipes, we may process and store information including:

• Ingredients
• Oils and fats
• Additives
• Fragrances
• Ingredient quantities
• NaOH or KOH selections
• Water and liquid settings
• Superfat values
• Lye concentrations
• Recipe notes
• Calculated soap properties
• Recipe analysis
• Saved recipes
• Other recipe information you provide

Recipe information associated with an account may be stored so it can be accessed across sessions or devices.

Ask SoapMetrics AI Information

If you use Ask SoapMetrics, we may process information needed to generate a response about the recipe currently loaded in your calculator, including:

• Questions and other text you enter in the AI chat
• Conversation context needed to continue a chat
• A snapshot of the current soap recipe, which may include ingredients, quantities, formulation settings, calculated properties, warnings, and related recipe data
• Generated AI responses

You should not submit sensitive personal information, financial information, passwords, health information, or other confidential information through Ask SoapMetrics.

Subscription and Transaction Information

If you purchase SoapMetrics Premium, we may receive information relating to your transaction, including:

• Subscription status
• Payment status
• Billing dates
• Subscription identifiers
• Amount paid
• Cancellation status
• Limited transaction information

Payments are processed through Stripe.

SoapMetrics does not directly store full credit-card numbers or complete payment-card credentials on its servers. Payment information submitted through Stripe is subject to Stripe's own privacy and security practices. Stripe maintains its own privacy policy governing information it processes.

Usage and Technical Information

When you access SoapMetrics, we or our service providers may automatically receive technical information such as:

• IP address
• Browser type
• Device type
• Operating system
• Referring pages
• Pages visited
• Approximate geographic region
• Dates and times of requests
• Features used
• Session information
• Error information
• Other standard web-server or application logs

We use this information for security, operation, troubleshooting, analytics, performance monitoring, and improvement of the Service.

SoapMetrics uses cookies, browser storage, and similar technologies.

Essential Technologies

Essential cookies or local-storage entries may be used to:

• Keep users logged in
• Authenticate accounts
• Maintain secure sessions
• Protect the Service against abuse
• Remember calculator or account preferences
• Maintain security features
• Remember your cookie-consent selections

These technologies are necessary or reasonably required to provide functionality requested by the user.

Google Analytics

SoapMetrics uses Google Analytics to understand how visitors use the Service and to improve site performance and functionality.

Google Analytics may process information such as:

• Page interactions
• Browser and device information
• Approximate location
• Usage events
• Analytics identifiers

Google states that Analytics uses identifiers such as cookies and app-instance IDs to measure interactions and uses IP addresses while providing the service, although Google Analytics 4 states that IP addresses are not logged or stored by Analytics.

Where applicable law requires consent, SoapMetrics will seek consent before enabling non-essential analytics cookies or storage.

You may change available cookie preferences using SoapMetrics' cookie-consent controls.

We may use information collected through SoapMetrics to:

• Create and manage accounts
• Authenticate users
• Provide the soap calculator and analysis tools
• Save and retrieve recipes
• Generate Ask SoapMetrics responses about your current recipe or formulation
• Save and retrieve Ask SoapMetrics conversations associated with your account
• Generate reports and exports
• Provide Premium features
• Process and manage subscriptions
• Provide password resets and account recovery
• Send transaction and billing communications
• Provide important Service announcements
• Respond to customer-support requests
• Maintain and improve the Service
• Diagnose technical problems
• Analyze Service usage
• Prevent fraud, spam, abuse, and unauthorized access
• Protect SoapMetrics and its users
• Enforce our Terms of Service
• Meet legal and regulatory obligations
• Establish, exercise, or defend legal claims

We attempt to collect and use only information reasonably necessary for these purposes.

Where the GDPR, UK GDPR, or similar laws apply, we process personal information under one or more appropriate legal bases.

These may include:

Performance of a Contract

We process information necessary to provide the Service you request, including:

• Creating your account
• Saving recipes
• Providing calculator functionality
• Providing Ask SoapMetrics when you use that feature
• Managing Premium access
• Processing subscription-related activities

Legitimate Interests

We may process information when reasonably necessary for legitimate business interests, such as:

• Maintaining Service security
• Preventing fraud and abuse
• Troubleshooting
• Improving Service performance
• Responding to support requests
• Protecting our legal rights

Legitimate-interest processing is subject to applicable requirements and consideration of users' privacy interests. EU guidance recognizes legitimate interests as a lawful basis when the necessary legal conditions are satisfied.

Consent

We may rely upon consent for activities such as:

• Non-essential analytics cookies
• Certain marketing communications
• Other processing for which consent is legally required

You may withdraw consent where applicable.

Legal Obligations

We may process or retain information when required to comply with applicable law, court orders, tax requirements, financial-record requirements, or other legal obligations.

SoapMetrics may use your email address to send communications necessary to provide the Service, including:

• Email verification
• Password-reset messages
• Security notices
• Billing information
• Subscription notices
• Account information
• Service announcements
• Important changes affecting your account

These operational communications may be necessary to provide the Service.

Marketing and Newsletters

SoapMetrics may offer optional newsletters, product announcements, feature updates, promotions, or other marketing communications.

Where required by applicable law, marketing emails will be sent only after obtaining appropriate consent.

Marketing messages will provide an appropriate method of unsubscribing.

Unsubscribing from marketing does not prevent SoapMetrics from sending necessary transactional, security, billing, or account-related communications.

UK guidance distinguishes direct electronic marketing from necessary service communications and places additional requirements on unsolicited marketing messages.

SoapMetrics does not sell personal information for monetary compensation.

We may disclose information to service providers that assist us in operating SoapMetrics.

Current service providers include:

Stripe

Used to process Premium subscription payments and manage billing.

Stripe may process payment, transaction, identifying, device, and fraud-prevention information under its own applicable terms and privacy practices.

Brevo

Used to provide email-delivery functionality, such as account, password-reset, transactional, service, and potentially marketing emails.

Brevo acts as a service provider for email-related processing and maintains its own privacy and data-protection practices.

Cloudflare

Cloudflare may be used for website delivery, networking, performance, availability, and security.

In providing these services, Cloudflare may process information associated with web requests such as IP addresses, browser information, and security-related information.

Ask SoapMetrics requests are also processed using Cloudflare Workers AI. When you use that feature, Cloudflare may receive the information described in Section 9, including your question, conversation context, and the recipe snapshot needed to generate a response.

Cloudflare states that customer prompts and generated responses are not used to train AI models or improve Cloudflare or third-party services without explicit consent. Cloudflare's processing is also subject to Cloudflare's own terms and privacy practices.

Google Analytics

Google Analytics is used to measure website usage and understand how visitors interact with SoapMetrics.

Google may process analytics and device information as described in Section 3.

Hosting Providers

SoapMetrics uses third-party server and infrastructure providers, including Hetzner.

SoapMetrics' primary hosting infrastructure is located within the European Union, including infrastructure that may be hosted in Germany or Finland depending upon the relevant server configuration.

Service providers receive or process information only as reasonably necessary for the services they provide or as otherwise permitted by applicable law and their applicable agreements.

We may also disclose information when reasonably necessary to:

• Comply with applicable law
• Respond to valid legal process
• Respond to a court order or governmental request
• Investigate fraud or illegal activity
• Protect the security of SoapMetrics
• Prevent harm
• Enforce our Terms of Service
• Protect our rights or property
• Establish, exercise, or defend legal claims

If SoapMetrics or substantially all of its assets are sold, transferred, merged, reorganized, or acquired, user information may be transferred as part of that transaction, subject to applicable law.

SoapMetrics provides an AI-powered Premium feature known as "Ask SoapMetrics." Ask SoapMetrics is SoapMetrics' soap-making AI assistant. It is configured with soap-making guardrails so it can help answer questions about the recipe currently loaded in your calculator. Additional information is available on the Ask SoapMetrics page.

When you use Ask SoapMetrics, SoapMetrics may process information you enter into the AI chat along with relevant information from your current soap recipe, such as ingredients, quantities, formulation settings, calculated properties, warnings, conversation context, and other recipe data necessary to provide a response.

The purpose of this processing is to generate informational responses about your recipe or formulation. Ask SoapMetrics does not recalculate lye, water, or other formulation amounts for you. The SoapMetrics calculator remains the source of those calculations.

AI requests are processed using Cloudflare Workers AI. Cloudflare states that customer prompts and generated responses are not used to train AI models or improve Cloudflare or third-party services without explicit consent.

SoapMetrics does not use your Ask SoapMetrics questions, recipe snapshots, or conversation content to train AI models, and SoapMetrics does not share that content with third parties for their model training. SoapMetrics does not sell Ask SoapMetrics conversations.

SoapMetrics may store Ask SoapMetrics conversations in your Premium account so you can review previous chats and delete them from the chat list. Stored conversations are used to provide that history to you and to operate the feature, not to train models on your recipes or questions. Retention is described in Section 10.

Users should not submit sensitive personal information, financial information, passwords, health information, or other confidential information through Ask SoapMetrics. Anything you type into the chat may be processed as described in this Privacy Policy.

Ask SoapMetrics may be unavailable at times, and the underlying AI model or provider may change. Use of the feature is also subject to our Terms of Service, including the AI-generated content terms.

We retain information only for as long as reasonably necessary to provide SoapMetrics, fulfill the purposes described in this Privacy Policy, maintain security, resolve disputes, and satisfy applicable legal obligations.

European Commission guidance states that personal information should generally be retained for no longer than needed for the purposes for which it is processed, taking legal retention obligations into account.

Active Accounts

Account and saved-recipe information may generally remain stored while an account is active and the applicable Service is being provided.

Ask SoapMetrics Conversations

Ask SoapMetrics conversations associated with your Premium account may remain stored while the account is active so you can review previous chats.

You may delete an individual conversation from the Ask SoapMetrics chat list. Deleting a conversation removes it from active systems, subject to the backup practices described below.

If an account is cancelled, deleted, terminated, or becomes inactive, associated Ask SoapMetrics conversations may be permanently deleted with other account information and may not be recoverable.

Cancelled, Expired, or Unpaid Accounts

SoapMetrics should not be treated as a permanent data-storage or backup service.

If an account is cancelled, deleted, terminated, or becomes inactive because required payment is not successfully completed, associated account information and saved recipes may be permanently deleted and may not be recoverable.

Users are responsible for exporting or retaining copies of recipes or other information they wish to preserve.

Backups

SoapMetrics performs routine server and database backups for security and disaster-recovery purposes.

Backups are currently generated approximately weekly and retained on a rotating basis for approximately three weeks.

Accordingly, information deleted from active systems may temporarily remain within backup copies until those backups are automatically replaced or deleted.

Information remaining solely in backups is not ordinarily restored except for legitimate disaster-recovery or security purposes.

Transaction and Legal Records

Certain transaction, financial, security, fraud-prevention, or legal records may be retained longer where necessary to comply with law, resolve disputes, maintain accounting records, or establish or defend legal claims.

Third-party providers such as Stripe may also independently retain information pursuant to their own legal obligations. Stripe notes, for example, that some information may need to be retained for regulatory purposes.

Users who wish to request deletion of their SoapMetrics account may contact:

[email protected]

We may take reasonable steps to verify that the individual making the request controls the account.

When an account is deleted, associated personal information, saved recipes, and Ask SoapMetrics conversations will be removed from active systems subject to:

• Routine backup retention
• Fraud and security requirements
• Legal obligations
• Financial recordkeeping
• Dispute resolution
• Other lawful retention requirements

Deletion requests do not necessarily require third-party providers to delete information they independently must retain under applicable law.

Depending upon your jurisdiction, you may have rights regarding personal information we maintain about you.

These may include the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion
• Request a copy of certain personal information
• Restrict certain processing
• Object to certain processing
• Withdraw consent where processing is based upon consent
• Request portability of certain information
• Opt out of certain marketing communications
• Submit a complaint to an applicable privacy or data-protection authority

EU data-protection law provides individuals with rights including access, correction, erasure, restriction, objection, and other protections where applicable.

To exercise a privacy right, email:

[email protected]

Please provide sufficient information for us to identify your account and understand your request.

We may request reasonable verification before fulfilling certain requests.

We will not discriminate against a user for exercising privacy rights protected by applicable law.

Residents of certain U.S. states may have additional privacy rights if the applicable state privacy law applies to SoapMetrics.

These rights may include:

• Knowing categories of information collected
• Obtaining copies of certain information
• Correcting information
• Requesting deletion
• Opting out of certain uses or disclosures
• Appealing certain privacy-request decisions

California, for example, grants qualifying consumers rights concerning access, deletion, correction, and certain sales or sharing of personal information when the CCPA applies to a business.

SoapMetrics does not sell personal information for monetary compensation.

Because privacy-law definitions of "sale," "sharing," analytics, and targeted advertising vary by jurisdiction and may depend upon how third-party technologies are configured, SoapMetrics will provide legally required consent or opt-out mechanisms where applicable.

Privacy requests may be sent to:

[email protected]

SoapMetrics is operated from the United States and is available through the Internet to users in other countries.

Our primary hosting infrastructure is located within the European Union, while some of our third-party service providers may process information in the United States or other countries.

As a result, personal information may be processed in countries other than the country where you reside.

Where required, service providers may use recognized data-transfer mechanisms such as:

• Adequacy decisions
• Standard Contractual Clauses
• Applicable data-protection frameworks
• Other lawful transfer safeguards

The European Commission provides Standard Contractual Clauses as one mechanism for protecting personal information transferred internationally.

SoapMetrics uses reasonable administrative, technical, and organizational measures intended to protect information against unauthorized access, misuse, loss, alteration, or disclosure.

Security protections may include measures relating to:

• Authentication
• Access control
• Password protection
• Network security
• HTTPS/encrypted transmission
• Server security
• Backups
• Software maintenance
• Security monitoring

However, no website, server, database, Internet transmission, or storage system can be guaranteed to be completely secure.

You are responsible for selecting a strong password, protecting your login information, and notifying us if you believe your account has been compromised.

The FTC recommends that businesses collect only information they need, protect it appropriately, and securely dispose of information that is no longer necessary.

If SoapMetrics becomes aware of a data-security incident involving personal information, we will investigate and take reasonable measures appropriate to the nature of the incident.

Where applicable law requires notification to affected individuals, government authorities, or data-protection regulators, we will provide such notice in accordance with applicable requirements.

SoapMetrics is intended only for individuals who are at least 18 years old.

We do not knowingly permit individuals under 18 to create or maintain SoapMetrics accounts.

We do not knowingly collect personal information from children through the Service.

If you believe that a person under 18 has provided personal information through SoapMetrics, contact:

[email protected]

We will investigate and take appropriate action.

SoapMetrics may contain links to websites or services operated by third parties.

This Privacy Policy applies only to SoapMetrics.

We are not responsible for the privacy, security, content, or practices of third-party websites. You should review the privacy policies of third-party services before providing information to them.

SoapMetrics uses automated calculations to provide recipe measurements, soap analysis, and related functionality.

These calculations are part of the Service requested by users and are not intended to make decisions producing legal or similarly significant effects concerning an individual.

Ask SoapMetrics uses generative artificial intelligence to produce informational assistance about a recipe. It does not make automated decisions that produce legal or similarly significant effects concerning an individual. You remain responsible for reviewing and verifying any AI-generated response before acting on it.

SoapMetrics does not currently use personal information for automated credit decisions, employment decisions, insurance decisions, or similar profiling activities.

Browsers and devices may provide "Do Not Track" or other privacy signals.

Because there is not one universally applicable standard governing every such signal, SoapMetrics may not respond to all browser-based Do Not Track signals.

Where applicable law requires recognition of legally recognized opt-out mechanisms, SoapMetrics will endeavor to honor those requirements.

We may update this Privacy Policy when SoapMetrics changes its features, service providers, data practices, or legal obligations.

When changes are made, we will update the Effective Date at the top of this page.

If changes materially affect how personal information is used, we may provide additional notice where appropriate or legally required.

Continued use of the Service following an updated Privacy Policy constitutes acknowledgment of the updated policy to the extent permitted by applicable law.

Questions, concerns, account-deletion requests, and privacy-rights requests may be sent to: