CuteBaker · Legal information

Privacy Policy

Last updated: 17 October 2026

Before publishing: Replace the unfinished operator details below with your registered business or sole-trader legal name, postal/business contact address, and country of establishment. Confirm the support email is operational and have these policies checked against the consumer and privacy laws applying to your customers. This draft does not guarantee legal compliance.

Service operator: [LEGAL BUSINESS / SOLE TRADER NAME] (“CuteBaker”, “we”, “us”).
Business contact address: [BUSINESS POSTAL ADDRESS AND COUNTRY].
Email: [email protected].

Summary: We use purchase and login information to unlock paid Studio access, and save bakery workspace records to provide cloud synchronization. Stripe handles payments, Resend delivers secure account emails, and Cloudflare hosts our website/database. We do not sell your personal information to advertisers.

1. Data controller and contact

The operator identified above determines how personal data is used for CuteBaker services. Contact us at [email protected] for privacy questions or requests.

2. Information we collect

Account details: purchase email, unique customer identifier, authentication session records and single-use email-link requests.
Transaction records: product purchased, payment status, amount, Stripe checkout/payment identifiers and refund/dispute state; complete card data is processed by Stripe, not our database.
Bakery workspace data: ingredients, recipes, order entries, customer names/details that you choose to enter, costs, prices, business settings and saved calculation information synchronized to your account.
Technical/security data: limited request logs, hashed rate-limiting indicators, session cookies and security events needed for fraud prevention and operation.

3. Why we use it

We process information to fulfill purchases, provide purchased access, send login links, synchronize workspace records, prevent misuse, respond to support inquiries, and comply with payment, tax, accounting, or other legal obligations. Depending on applicable law, our legal bases may include contract performance, legitimate interests in security, and legal obligations. Consent is used where required.

4. Service providers

We use Stripe for checkout and payments, Resend for transactional emails, and Cloudflare for hosting, database and network security. These services may process personal data under their own policies and applicable contractual arrangements. We may update the provider list as needed.

5. Cookies and session storage

We use secure, HTTP-only cookies to remember paid access and pending checkout verification. Browser local storage may temporarily hold app settings and workspace data for responsiveness and synchronization. These are needed to operate the purchased product. Stripe may set additional cookies or use comparable technologies for payment security. If we add nonessential analytics or marketing cookies, we will provide any consent controls required by law.

6. Data retention and deletion

We keep account and workspace data while needed to operate your purchased access, meet legal obligations, or resolve disputes. Financial transaction records may be retained for periods required by law. You may request deletion of data that we are not legally required to retain by contacting us. You can export workspace information before requesting deletion. Before launch, CuteBaker must implement and document its operational retention/deletion schedule and verify that requests can be fulfilled.

7. Security and international processing

We use HTTPS, server-side purchase checks, session controls, access segregation, and restricted service credentials. No online service is risk-free. Providers may process information in countries different from yours; where required, international transfers must use appropriate safeguards.

8. Your rights

Depending on your location, you may have rights to access, correct, export, object to, restrict, or delete personal data, or complain to a data-protection authority. We will respond according to applicable law. Requests involving purchase email ownership may require verification.

9. Customer-entered information

If you enter details about your own cake customers, you are responsible for providing appropriate privacy notices and ensuring a lawful basis for doing so. Do not upload payment card numbers, passwords, or other unnecessary sensitive data into order notes.

10. Children and changes

CuteBaker is built for people operating a baking business and is not intended for children to use independently. We may update this policy and publish the new date, giving further notice where the law requires it.