Privacy
Last updated · 3 September 2026
Costcina is a service of Joapo Group LLC. This says what we collect, why we have it, who else touches it, and what you can make us do about it. It is meant to be read rather than survived.
What you send us
If you fill in the form, we get your name, your business name, your email, your phone number, which language you would rather use, whether you are open yet, what kind of food business you run, roughly how many dishes you sell, and anything you write in the message box.
If you ask us to email you the sample, we get your email address and nothing else.
If you become a client, we also get whatever you send us for the work itself — your dish list, your recipes, your vendor invoices, your prices and your portions.
What your browser sends
Ordinary web server records: your IP address, your browser and device type, which pages you opened, and the page you arrived from. We do not try to identify you from these.
If you pay us
Payments run through Stripe. Your card number goes to Stripe and never to us. We receive the confirmation, the amount, and the email address you used.
Why we have it
- To answer you, and to work out whether we can help before either of us spends money.
- To do the work you hired us for, and to keep in touch while we do it.
- To keep the accounting and tax records a business is required to keep.
- To see which parts of this page people actually use, so we can fix the parts they do not.
What we do not do
We do not sell your personal information. We do not share it for cross-context behavioural advertising. There are no advertising trackers and no third-party ad pixels on this site.
We do not send you anything you did not ask for beyond a short follow-up about the enquiry you made, and every message has a way to stop it.
Cookies and analytics
We use PostHog to count page views and to see which parts of the demo get used. It stores an identifier in your browser. Session recording is switched off, so we are not watching your screen.
The demo itself keeps whatever you do with it in your own browser. Moving the levers sends us nothing.
Who else touches it
These companies process data on our instructions and for no purpose of their own:
- Cloudflare — hosting and delivery of this site.
- Supabase — the database behind our own client records.
- Resend — the email that tells us you got in touch.
- Stripe — payments.
- Cal.com — booking calls.
- PostHog — analytics.
How long we keep it
- An enquiry that goes nowhere: up to two years, then deleted.
- Client records, invoices and engagement files: seven years, because tax law requires it.
- Analytics: as configured in PostHog, and never tied back to your enquiry.
Your rights in California
Under the CCPA as amended by the CPRA you can ask us what personal information we hold about you, ask for a copy of it, ask us to correct it, and ask us to delete it. You can do any of that by writing to [email protected]. We will not treat you any differently for asking.
We may need to confirm who you are before we act, and there are records — accounting and tax — we are required to keep even if you ask us to delete everything else.
Because we do not sell or share personal information, there is nothing here for you to opt out of.
Security
Everything travels over HTTPS. Client records sit behind authentication and row-level access rules. No arrangement is perfect, and we will tell you promptly if something goes wrong in a way that affects you.
Children
This is a service for businesses. It is not aimed at anyone under 16 and we do not knowingly collect their information.
Changes
If we change this, the date at the top changes with it. If the change is significant and we have your email because you are a client, we will tell you.
Contact
Joapo Group LLC, California. Write to [email protected] and a person will answer.