Privacy Policy

Bakery Dashboard is operated by Crusted Bakery Inc, which is the party responsible for the personal data described in this policy (the data controller).

For any privacy question, or to request a copy or deletion of your data, contact us at bakerydashboardusa@gmail.com.

When you request access or use this system, we collect:

• Account information: your name, email address, and business name.
• Account request details: anything you write in the optional sign-up note.
• Business data you enter while using the system: recipes, inventory, sales, costs, and similar production records tied to your account.
• Payment details: if you subscribe, Stripe processes and stores your payment card information — we never receive or store full card numbers ourselves.
• Basic technical data such as login timestamps, needed to keep the service secure and reliable.

Information is collected directly from you, through:

• The account request ("Request Access") form when you sign up.
• The data you enter while using the bakery management features after your account is approved.
• Stripe's checkout flow, if you subscribe to a paid plan.

We do not use advertising or tracking cookies.

We use your information to:

• Create and manage your account, including the approval process for new sign-ups.
• Provide the bakery production, inventory, and sales-management features of the system.
• Process subscription payments and manage billing.
• Respond to feedback and feature requests you send us.
• Maintain the security and reliability of the system.

We do not sell your data, and we do not use it for advertising or marketing to third parties.

You can:

• Access or correct your account information at any time from within the system.
• Request a copy of, or deletion of, your personal data and account by contacting us at bakerydashboardusa@gmail.com.
• Withdraw consent and close your account at any time — contact us to request account deletion, and stop using the system to stop further data collection.

We share data only with the service providers needed to run this system, and never for advertising:

• Supabase — hosts our database, authentication, and backend functions.
• Stripe — processes subscription payments and stores payment card details securely.
• Google Analytics — not currently used by this system.

We do not share data with advertising platforms or outside contractors.

We protect your data using:

• SSL/TLS encryption for all data in transit.
• Row-level security so each account can only access its own business data.
• Password-based authentication managed by Supabase, with passwords stored hashed, never in plain text.
• Restricted, owner-only access for approving accounts and managing billing settings.

We keep your account and business data for as long as your account is active. When you request deletion, we remove your personal data and business records from the live system within a reasonable period, except where we are required to keep certain records (for example, billing and tax records) for a limited time to meet legal obligations.

Encrypted backups may retain copies for a short rolling window before being overwritten in the normal course of operations.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you within the Service before the change takes effect. Continuing to use the Service after changes take effect means you accept the updated policy.

Questions about this policy or your data? Contact Crusted Bakery Inc at bakerydashboardusa@gmail.com.