Privacy Policy

When you request access or use this system, we collect:

• Account information: your name, email address, and business name.
• Account request details: anything you write in the optional sign-up note.
• Business data you enter while using the system: recipes, inventory, sales, costs, and similar production records tied to your account.
• Payment details: if you subscribe, Stripe processes and stores your payment card information — we never receive or store full card numbers ourselves.
• Basic technical data such as login timestamps, needed to keep the service secure and reliable.

Information is collected directly from you, through:

• The account request ("Request Access") form when you sign up.
• The data you enter while using the bakery management features after your account is approved.
• Stripe's checkout flow, if you subscribe to a paid plan.

We do not use advertising or tracking cookies.

We use your information to:

• Create and manage your account, including the approval process for new sign-ups.
• Provide the bakery production, inventory, and sales-management features of the system.
• Process subscription payments and manage billing.
• Respond to feedback and feature requests you send us.
• Maintain the security and reliability of the system.

We do not sell your data, and we do not use it for advertising or marketing to third parties.

You can:

• Access or correct your account information at any time from within the system.
• Request a copy of, or deletion of, your personal data and account by contacting the owner.
• Withdraw consent and close your account at any time — contact the owner to request account deletion, and stop using the system to stop further data collection.

We share data only with the service providers needed to run this system, and never for advertising:

• Supabase — hosts our database, authentication, and backend functions.
• Stripe — processes subscription payments and stores payment card details securely.
• Google Analytics — not currently used by this system.

We do not share data with advertising platforms or outside contractors.

We protect your data using:

• SSL/TLS encryption for all data in transit.
• Row-level security so each account can only access its own business data.
• Password-based authentication managed by Supabase, with passwords stored hashed, never in plain text.
• Restricted, owner-only access for approving accounts and managing billing settings.