Privacy Policy
Last Updated: April 20, 2026

‍1. Introduction
‍Welcome to Bakeshop ("we," "us," or "our"). This Privacy Policy describes how Bakeshop collects, uses, and shares your information when you use our website and software-as-a-service (SaaS) platform (the "Services").

Our Services are designed to help bakers manage their businesses, digital storefronts, including inventory, orders, and "food drops" (pre-order events). By using Bakeshop, you agree to the collection and use of information in accordance with this policy.


‍2. Information We Collect
‍We collect information to facilitate the connection between bakers ("Chefs" or "Bakers") and their customers ("Eaters" or "Customers"), and to provide our business management tools.

‍A. Information You Provide to Us
- Account Information: When you create an account (as a Baker or Customer), we collect personal details such as your name, email address, and password.
- Email Addresses: We place a high priority on reliable digital communication. We collect your email address to facilitate account verification, send detailed order confirmations and updates, and provide "drop" notifications (alerts when a Baker’s menu goes live).
- Phone Numbers (SMS): We may also collect your mobile phone number to facilitate SMS verification, order updates, and "drop" notifications (alerts when a Baker’s menu goes live).
- Profile Information: Bakers may provide business details including bakery name, social media links, bio, logo, cover photos, and location data (such as zip code or service area). See Section 2C for details on how photos are uploaded via the iOS app.
- Financial Information: We do not store full credit card numbers on our servers. Payment information is collected and processed directly by our third-party payment processor (e.g., Stripe), subject to their privacy policy. Peer-to-Peer (e.g., Venmo, Cashapp, Zelle) payments are managed on the respective platform, we simply help our bakers keep track of these payments.
- Communications: Information you provide when contacting support or communicating with other users via the platform.
‍
B. Information Collected Automatically
- Usage Data: We collect information on how you access and use the Services, such as pages viewed, time spent, and features used.
- Device Data: IP address, browser type, device type (mobile vs. desktop), and operating system.
- Cookies: We use cookies to recognize your device, remember your preferences (like login status), and analyze site traffic (e.g., via Google Analytics).

C. Information Collected Through the Bakeshop iOS App
‍When you use our iOS app, we may additionally collect:
- Device Identifiers: Advertising identifier (IDFA, only with your permission), vendor identifier, and device model.
- Push Notification Tokens: If you enable push notifications, we collect the Apple push token assigned to your device to deliver order alerts and drop notifications. This token is used only to send notifications and is revoked when you disable notifications.
- App Usage Data: Information about how you interact with the app, including features accessed, session duration, and crash data.
- In-App Purchase Data: Transaction identifiers and subscription status provided by Apple's StoreKit framework. We receive confirmation of subscription purchases from Apple but do not receive your payment method details.
- User-Uploaded Content (Merchants Only): When you set up your storefront or add products, you may choose to upload images including your bakery logo, cover photos, and product photos, along with text content such as business descriptions, product names, ingredients, and allergen information. We store this content to display on your storefront and within the Bakeshop app. You retain ownership of content you upload, subject to the license granted in our Terms of Service.
‍
Photo Access: The Bakeshop iOS app uses Apple's secure photo picker to let you select specific images to upload.
We do not request access to your full Photos library. Only images you explicitly select are shared with Bakeshop.We do not collect your precise location, access your Contacts, or track you across other apps and websites without your explicit permission granted through Apple's App Tracking Transparency.


‍3. How We Use Your Information
‍We use your data to provide a seamless pre-order and bakery management experience:
- To Provide the Service: Creating accounts, processing pre-orders, managing inventory, and generating prep lists for Bakers.
- Email Notifications: To send timely emails regarding order confirmations, baker announcements, and pickup reminders. Note: You can unsubscribe from these notifications at any time via the link in our emails, though this may limit your ability to receive instant updates on limited-quantity food drops.
- SMS Notifications: To send timely text messages regarding order confirmations, baker announcements, and pickup reminders. Note: You can opt-out of SMS notifications at any time, though this may limit your ability to receive instant updates on limited-quantity food drops.
- Transaction Processing: To facilitate payments between Customers and Bakers.
- Fraud Prevention: To verify identities (via SMS or email) and protect against unauthorized or illegal activity.
- Platform Improvement: To analyze usage trends and improve the Bakeshop functionality.


‍4. How We Share Information
‍We are not a data broker. We do not sell your personal information to third parties. We share information only in the following ways:

‍Between Bakers and Customers:
- When a Customer places an order, we share necessary details (Name, Phone Number, Order Specifics) with the Baker to fulfill the order.
- Bakers on Bakeshop have access to the contact information of customers who order from them to manage their own business and marketing.

‍Service Providers: We engage third-party companies to perform services on our behalf, such as:
- Payment Processing: (e.g., Stripe)
- SMS/Email Delivery: (e.g., Twilio, SendGrid)
- Hosting & Analytics: (e.g., Cloud Services, Google Analytics)
We require all service providers to provide the same or equal level of protection for your data as described in this Privacy Policy and to use your information only to perform the services we have engaged them for. We do not authorize service providers to sell, share, or otherwise use your data for their own commercial purposes.

‍Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities (e.g., a court or a government agency).


‍5. Your Rights & Choices

A. General Rights
‍You have the following rights regarding your personal data:
- Access & Correction: You can log in to your account to view and update your profile and payment methods.
- Opt-Out of Communications:
Email: Click the "unsubscribe" link in any marketing email.
‍SMS: Reply "STOP" to any text message received from Bakeshop to cease SMS notifications.
- Data Portability: Bakers may request an export of their customer and order data at any time.
- Deletion: You may request the deletion of your account and personal data by contacting us at help@bake.shop.

B. Your California Privacy Rights (CCPA/CPRA)
California "Do Not Sell or Share" Notice: Bakeshop does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. California residents may still submit a verifiable request for confirmation by contacting us at help@bake.shop.
‍
‍If you are a California resident, you have the following rights:
- Right to Know: You may request a copy of the personal information we have collected about you in the past 12 months.
- Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt Out of Sale or Sharing: We do not sell your personal information and do not share it for cross-context behavioral advertising. However, you may still submit an opt-out request at any time.
- Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different level of service because you exercised your privacy rights.

To exercise any of these rights, contact us at help@bake.shop from the email associated with your account. We will verify your identity before fulfilling the request and respond within 45 days as required by law.

We honor Global Privacy Control (GPC) signals transmitted by your browser as valid opt-out requests.

‍C. Other State Privacy Rights
‍Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, and New Hampshire have similar rights under their respective state privacy laws. You may exercise these rights using the same contact methods described above. Certain states also provide a right to appeal a denied privacy request; to appeal, reply to our initial response explaining the basis of your appeal.

‍D. EU/UK Rights (GDPR)
‍If you are located in the European Economic Area or United Kingdom, you have rights under GDPR including access, rectification, erasure, restriction of processing, data portability, and objection. Our legal basis for processing is typically contract performance (delivering the Services), legitimate interests (security, fraud prevention, service improvement), and consent (marketing, SMS notifications). Bakeshop's data may be transferred to and stored in the United States. By using the Services, you consent to such transfer, which relies on Standard Contractual Clauses or equivalent safeguards where required.


6. Third-Party Services and Opt-Outs
‍Bakeshop integrates with several third-party services. Your interactions with these services are governed by their own privacy policies:
- Stripe (Payment Processing): When Customers enter payment information, Stripe acts as an independent data controller. See https://stripe.com/privacy.
- Twilio (SMS): https://www.twilio.com/legal/privacy
- SendGrid (Email): https://sendgrid.com/policies/privacy
‍- Google Analytics (Web Analytics): https://policies.google.com/privacy. You may opt out of Google Analytics tracking by installing the browser add-on at https://tools.google.com/dlpage/gaoptout.
- Apple (iOS Platform): iOS app usage and in-app purchases are subject to Apple's privacy practices. See https://www.apple.com/legal/privacy/.
- Supabase (Database Hosting): https://supabase.com/privacy


7. Data Retention
We retain your personal information only for as long as necessary to provide the Services and comply with legal obligations:
- Active Account Data: Retained for the duration of your account.
- Deleted Account Data: Most personal data is deleted within 30 days of account deletion. See our Terms of Service for details.
- Transaction Records: Retained in anonymized or de-identified form for up to 7 years for tax, accounting, and fraud prevention purposes, as required by law.
- Communications Logs: Retained for up to 2 years for customer support and dispute resolution.
- Analytics Data: Aggregated and de-identified analytics data may be retained indefinitely.
- Backup Copies: May persist for up to 90 days after deletion before being fully purged.

‍
‍8. Security
‍We implement industry-standard security measures, including SSL encryption for data transmission and secure third-party payment processing. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.


‍9. Children's Privacy
Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe your child has provided us with personal information, please contact us at help@bake.shop and we will delete the information within a reasonable time. Merchants using our Services to sell food products are responsible for complying with applicable laws when marketing to minors.


‍10. Changes to This Privacy Policy
‍We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.


‍11. Contact Us
‍If you have any questions about this Privacy Policy, please contact us:

Bakeshop LLC
30 N Gould St,
Sheridan, WY 82801
United States
‍
‍Email: help@bake.shop
‍Website: www.bake.shop