Privacy Policy

Bakery Dashboard is operated by Crusted Bakery Inc, which is the party responsible for the personal data described in this policy (the data controller).

For any privacy question, or to request a copy or deletion of your data, contact us at bakerydashboardusa@gmail.com.

When you sign up for or use this system, we collect:

• Account information: your name, email address, and business name.
• Sign-up details: anything you write in the optional sign-up note, and the phone number you choose to leave. We use the phone number only to contact you about your account and to help you set it up; it is never shared or used for marketing.
• How you found us: your optional answer to "How did you hear about us?", and, from your first visit to our website, the campaign tags on the link you followed, which ad network sent you (if any), the website that linked to us and the page you first opened. We use this only to understand which of our own marketing works.
• Reviews: the rating and comments you choose to leave about the system.
• Business data you enter while using the system: recipes, inventory, sales, costs, and similar production records tied to your account.
• Payment details: if you subscribe, Stripe processes and stores your payment card information — we never receive or store full card numbers ourselves.
• Basic technical data such as login timestamps, needed to keep the service secure and reliable.
• Usage data: which screens of the system your business opens and how often, per day (for example, "Sales" twice). We record only the screen's name, never what is on it, and your staff are counted together with your business rather than one by one. We also see which steps of the first-time setup checklist are done (step names only, not what you entered).

Information is collected directly from you, through:

• The sign-up ("Start free trial") form when you sign up.
• The data you enter while using the bakery management features after your account opens.
• Stripe's checkout flow, if you subscribe to a paid plan.

We do not use advertising cookies. Our public website uses Plausible, which is cookie-free, and Google Analytics, which sets analytics cookies to count visits; neither is used for advertising.

We use your information to:

• Create and manage your account, including opening it with a free trial and keeping automated sign-ups out.
• Contact you, by email or by phone if you left a number, to help you set up your account.
• Provide the bakery production, inventory, and sales-management features of the system.
• Process subscription payments and manage billing.
• Respond to feedback and feature requests you send us.
• Spot when a business seems stuck (for example, setup left unfinished or no sales entered for a while) so we can offer help, and learn which parts of the system are used.
• Maintain the security and reliability of the system.

We do not sell your data, and we do not use it for advertising or marketing to third parties.

You can:

• Access or correct your account information at any time from within the system.
• Request a copy of, or deletion of, your personal data and account by contacting us at bakerydashboardusa@gmail.com.
• Withdraw consent and close your account at any time — contact us to request account deletion, and stop using the system to stop further data collection.

We share data only with the service providers needed to run this system, and never for advertising:

• Supabase — hosts our database, authentication, and backend functions.
• Stripe — processes subscription payments and stores payment card details securely.
• Google Analytics and Plausible — count visits to our public website and how many visitors request an account, by source. They never receive your name, email address or business name.

We do not share data with advertising platforms or outside contractors.

We protect your data using:

• SSL/TLS encryption for all data in transit.
• Row-level security so each account can only access its own business data.
• Password-based authentication managed by Supabase, with passwords stored hashed, never in plain text.
• Restricted, owner-only access for approving accounts and managing billing settings.

We keep your account and business data for as long as your account is active. When you request deletion, we remove your personal data and business records from the live system within a reasonable period, except where we are required to keep certain records (for example, billing and tax records) for a limited time to meet legal obligations.

Encrypted backups may retain copies for a short rolling window before being overwritten in the normal course of operations.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you within the Service before the change takes effect. Continuing to use the Service after changes take effect means you accept the updated policy.

Questions about this policy or your data? Contact Crusted Bakery Inc at bakerydashboardusa@gmail.com.