Privacy Policy
BakeKeeper (“we,” “us,” or “our”) provides software tools for cottage food operators, home bakers, and artisan pop-ups across the United States. This Privacy Policy details how we collect, handle, and safeguard personal information across our platform.
Key Commitments at a Glance
- Zero data selling: We do not sell, rent, or trade personal data, nor do we share it for cross-context behavioral advertising.
- No payment cards on our servers: All payment transactions are handled directly through Stripe with PCI Level 1 security.
- Clear platform roles: Bakers own their customer lists; BakeKeeper acts as a technology provider to facilitate pre-orders and bake sheets.
- United States scope: Our services are offered and operated exclusively within the United States.
Platform Roles & How BakeKeeper Operates
BakeKeeper operates as a multi-sided software platform connecting artisan bakers with their pre-order customers:
Direct Baker Relationships
For registered bakers who subscribe to BakeKeeper, we act as a direct service provider (controller) for account setup, subscription billing, and platform management.
Customer Storefront Pre-Orders
When customers purchase from a baker's storefront, the individual baker is the primary merchant. BakeKeeper acts as a technology processor on the baker's behalf to capture orders, compile kitchen bake sheets, and issue receipts.
Categories of Information We Collect
A. Baker Account Information
When you register a bakery account, we collect:
- Full name, business name, and email address.
- Cryptographically hashed login credentials (managed securely via Supabase Auth).
- Bakery bio, pickup locations, fulfillment schedules, and menu catalog details.
- Stripe Connect account identifiers for automated payouts.
B. Customer Pre-Order Information
When a customer places an order on a storefront, we collect on behalf of the baker:
- Customer name and email address (for transactional receipts and pickup instructions).
- Phone number (provided to the baker for order fulfillment and pickup coordination).
- Delivery address (only if delivery is offered and selected) and custom order notes/dietary requests.
- Purchased items, quantities, order totals, and fulfillment status.
C. Technical & Diagnostic Information
We automatically collect basic technical data when accessing our web application:
- IP address, browser type, device information, and operating system.
- First-party aggregated page view counts on baker storefronts.
- Crash and runtime diagnostic traces (via Sentry) strictly to detect and fix software bugs.
Payment Processing & Financial Data
All credit card payments, merchant payouts, and subscription billing are processed directly by Stripe, Inc. BakeKeeper never receives, stores, or processes complete credit card numbers or bank account details on our servers.
Payment transactions are governed by the Stripe Privacy Policy and comply with strict PCI-DSS Level 1 security standards.
How We Use Personal Information
We use collected information solely for business purposes to deliver and maintain our services:
- Operating baker storefronts, batch drop schedules, and inventory tracking.
- Generating automated kitchen bake sheets, packing manifests, and printable summary sheets.
- Transmitting transactional email receipts and pickup notices via Resend.
- Providing customer support and responding to baker inquiries.
- Detecting security threats, authenticating users, and preventing fraudulent checkout activity.
Note: We do not engage in automated decision-making or algorithmic profiling that produces legal or significant economic effects.
Third-Party Service Providers
We do not sell personal information. We share minimal necessary information only with vetted infrastructure partners who operate under strict confidentiality and security requirements:
Cookies & Technical Safeguards
We use secure HTTP-only cookies and local session storage strictly necessary to maintain user login state, security tokens, and shopping cart persistence. We do not use third-party advertising cookies or cross-site tracking pixels.
All communications are protected using TLS 1.3 encryption in transit, and database backups are encrypted at rest.
Data Retention Schedule
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy:
- Active Baker Accounts: Account data, bakery profile, and catalogs are retained while the account remains active.
- Order & Financial Records: Order histories, receipts, and invoice records are retained for up to 7 years to comply with federal and state tax, accounting, and legal record-keeping obligations.
- System & Error Logs: Technical access logs and Sentry diagnostic reports are automatically rotated and retained for up to 90 days before deletion or irreversible anonymization.
United States & State Privacy Rights (CCPA / CPRA)
If you are a resident of California or other US states with applicable comprehensive privacy statutes, you have specific rights regarding your personal information:
To submit a verified privacy request, email support@bakekeeper.com. We will acknowledge receipt within 10 business days and respond substantively within 45 calendar days.
Children's Privacy (COPPA Notice)
BakeKeeper is a commercial software platform intended for adult business owners and customers. Our service is not directed to, marketed to, or intended for children under the age of 13. We do not knowingly collect personal information from individuals under 13 (or under 18 for baker account holders). If you believe a child has provided us with personal information, please contact us immediately for prompt deletion.
Changes to This Privacy Policy
We may periodically update this policy to reflect changes in our technology, legal requirements, or operations. When updates occur, we will revise the “Last Updated” date at the top of this document. For material updates affecting how personal data is handled, we will notify registered bakers via email or through an in-app dashboard banner prior to changes taking effect.
Contact Us & Data Inquiries
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact our team: