Privacy Policy

1. About BakeDesk

BakeDesk helps bakers collect and manage customer orders, including order requests, quotes, payment status, and pickup details.

This Privacy Policy explains how BakeDesk (“BakeDesk,” “we,” “us,” or “our”) handles personal information when you use BakeDesk.

For questions about this policy, contact support.bakedesk@gmail.com.

2. Information We Collect

We may collect information needed to operate BakeDesk. What we receive depends on how you use the service.

For bakers, this may include Google sign-in and account information, email, bakery or shop details, timezone, currency, pickup availability, menu and custom-order form settings, notification and payment-status settings, uploaded content such as menu photos, cover images and reference material where applicable, and support communications.

For customers, this may include name and contact information, order selections and quantities, custom-order answers and notes, pickup date and time, customer-provided reference images where used, order and quote details, payment status, and necessary order metadata.

We may also receive limited technical, browser, session, and basic usage information, such as page visits, browser or device information, language, timezone, approximate country, referrer, and visited page URLs.

3. How We Use Information

We use information to operate BakeDesk; authenticate users and maintain sessions; create and display bakery order pages; receive, organize and display order requests; and help bakers review requests and their reference images, quotes, payment status, and pickup details.

We also use information for service notifications where enabled, support, security, abuse and error prevention, and service improvement. Bakers review and decide how to handle their orders; BakeDesk does not make automated order-acceptance decisions.

4. Bakery / Customer Relationship

BakeDesk provides software to independent bakers. Bakers determine what information they need from their customers and remain responsible for how they use customer information in their business.

BakeDesk processes order information to provide the service. Customers with questions about a bakery’s products, fulfillment, or use of their information should contact that bakery.

5. Reference Images

Customers may optionally upload reference images as part of a custom-order request when the bakery enables photo uploads. BakeDesk processes and stores those images so the relevant bakery can review them in connection with the request. Images may contain personal information depending on what users upload.

Customer reference images are used for the relevant order workflow, rather than a public gallery. We use access controls designed to limit access to the relevant workflow.

Only relevant images that you are permitted to use should be uploaded.

6. Payments

BakeDesk does not currently process customer payments directly. Bakers continue to use their existing payment methods.

BakeDesk may store payment status or amount information to help organize orders. Do not submit card numbers, online banking passwords, or sensitive financial credentials unless BakeDesk explicitly introduces a feature designed for that purpose.

7. Service Providers

We use service providers to operate BakeDesk, including Google for sign-in, Supabase for authentication, database, storage and backend services, Resend for service email, and Lovable for hosting, deployment and application functionality.

We use PostHog US Cloud to understand a limited set of product actions, such as completing setup, sharing an order link, sending a request and managing an order. We send pseudonymous bakery and owner identifiers, an anonymous browser identifier, event times, device category and limited workflow flags. We do not send customer or owner names, email addresses, phone numbers, addresses, order text, payment details or reference-image files or links to PostHog. We do not enable automatic interaction capture, session replay, heatmaps or automatic web-vitals capture.

The current site also includes Lovable-provided visit statistics functionality. It may collect basic visit and technical information, including page URLs and session information, to help understand how the service is used.

8. Cookies and Similar Technologies

After a request is confirmed, this browser may keep up to five recent order references and bakery links. It does not store your email, phone, or order details in this list. References expire after 30 days and are removed when the list is next accessed. You can clear the list on the bakery’s tracking page. Use caution on shared devices; contact verification is still required to view an order.

BakeDesk and its providers use cookies, browser storage and similar technologies for login and sessions, essential application state, security and authentication, and basic usage statistics.

For product analytics, browser local storage keeps an anonymous identifier and duplicate-event markers. Our PostHog integration does not set analytics cookies, read page content or send page URLs or referrers. PostHog receives network requests, which necessarily expose connection information such as an IP address; location enrichment is disabled. Product workflows continue if analytics is blocked.

For example, browser storage helps maintain sign-in and onboarding state. The hosting environment also uses security and session-related technologies and provides basic visit statistics.

9. Retention

We retain information for as long as reasonably necessary to provide BakeDesk, operate and secure the service, handle support requests, resolve disputes, and meet applicable legal obligations.

BakeDesk does not currently promise a fixed retention period for every category of information.

10. Access, Correction and Deletion

Contact support.bakedesk@gmail.com with questions about account data, correction requests, or deletion requests.

BakeDesk does not currently provide a self-service full account-data export or automatic complete deletion workflow. Some information may need to be retained for security, dispute resolution, technical integrity, or applicable legal obligations.

11. International Processing

BakeDesk and its providers may process information in countries other than the country where you live. Privacy and data-protection laws may differ between countries.

12. Security

We use reasonable technical and organizational measures to protect information. No service or method of transmission or storage can guarantee absolute security.

13. Beta Service

BakeDesk is currently in beta. Features, workflows and data-handling practices may change as the service develops. Material changes to our privacy practices will be reflected in an updated policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date above identifies the current version. We will provide appropriate notice of material changes through the service or other available means.

15. Contact

For privacy questions or requests, contact support.bakedesk@gmail.com.