The kitchen
behind the kitchen.

Operating record

Record ID sofrito-operating-record-2026.09.17-v2

Actual categories

Application and signer identity, signed offer, payment status, business context, agreed source records, review observations, human decisions, delivery events, and action follow-ups.

Provider register

Cloudflare Pages and Turnstile, Supabase hosted Postgres and Storage, Stripe-hosted Checkout, Resend email, and optional OpenAI review preparation when separately enabled.

Storage, backup, separation, logging

Server-side credentials only; forced row-level security on governed tables; no anonymous or ordinary signed-in browser table grants. The later signed-agreement process must retain immutable acceptance and provider-event history. The public inquiry form does not create an agreement acceptance. Customer data is never mixed with synthetic Staging fixtures.

Aggregation, export, and deletion

Research use is aggregated and de-identified. Sofrito handles export or deletion requests at hello@trysofrito.com. Legal and protective records are identified when retention is required.

Training and assisted preparation

Customer records are not used to train a general model. Assisted preparation remains bounded, source-linked, and human-reviewed.

Incident contact

hello@trysofrito.com

Customer choices

Service consent, data consent, de-identified research use, and testimonial contact are all required conditions of Founding Access, acknowledged separately. Testimonial contact permits a request only; identifiable publication needs separate written permission. A new package version is required for a material offer or document change.

Applicable additional terms

The Subscription Terms, Schedule A, Customer Data Terms, Privacy Policy, and terms shown by the hosted payment provider apply alongside this record.

The later agreement acceptance must link this B10 record. The current public form submits an unsigned application only. This document does not mean payment is enabled.