Legal
Privacy Policy
Quote n Bake ("Quote n Bake," "we," "us," or "our") provides software that helps bakeries and cake businesses collect quote requests, manage workflows, and communicate with customers. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, applications, and related services (collectively, the "Services").
1. Scope
This policy applies to visitors of our marketing website, registered business users ("Tenant Administrators"), and end customers who submit information through a tenant's public quote/inquiry form or review a quote. If you are interacting with Quote n Bake only as a customer of a bakery, both your bakery's practices and this policy may apply.
2. Information we collect
Account and profile data. When you sign up or manage your account, we collect identifiers such as name, email address, business name, and authentication credentials. We may collect billing-related contact information processed by our payment provider.
Service and usage data. We log technical data necessary to operate the Services, including IP address, device and browser type, approximate location derived from IP, timestamps, and diagnostic events.
Content you provide. Tenant Administrators submit quote requests, messages, scheduling notes, branding assets (e.g. logos), and configuration. Customers may submit form fields, event details, and reference images as part of a quote request.
Cookies and similar technologies. We use cookies and similar technologies for session management, security, preferences, and analytics. You can control cookies through your browser settings; disabling certain cookies may limit functionality.
3. How we use information
- Provide, maintain, secure, and improve the Services;
- Authenticate users, prevent fraud and abuse, and enforce our terms;
- Communicate about the Services, including transactional notices and, where permitted, product updates;
- Process subscriptions and payments through our payment processor;
- Comply with legal obligations and respond to lawful requests;
- Analyze aggregated or de-identified usage to understand product performance.
4. Legal bases (EEA, UK, and similar jurisdictions)
Where applicable law requires a legal basis, we process personal data on the basis of: (i) performance of a contract with you; (ii) our legitimate interests in operating and improving the Services (balanced against your rights); (iii) compliance with legal obligations; and (iv) consent where we have obtained it (for example, certain marketing communications or non-essential cookies).
5. How we share information
We do not sell your personal information. We share information with service providers who perform services on our behalf under strict confidentiality and data-processing terms, including hosting and infrastructure, email delivery, payment processing (e.g. Stripe), analytics, and customer support tooling. We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.
6. Subprocessors and international transfers
We may process and store information in the United States and other countries where we or our providers operate. Where we transfer personal data from the EEA, UK, or Switzerland, we implement appropriate safeguards such as Standard Contractual Clauses or other mechanisms approved under applicable law.
7. Data retention
We retain information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on data type and legal requirements. Backup copies may persist for a limited period after deletion.
8. Security
We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure; we encourage strong passwords and safeguarding of your credentials.
9. Your rights and choices
Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data; object to or restrict certain processing; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority. To exercise rights, contact us using the details below. We may need to verify your identity before fulfilling requests.
10. Children
The Services are not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps.
11. California residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including rights to know, delete, and opt out of certain sharing. We do not "sell" or "share" personal information as those terms are defined under the CCPA for cross-context behavioral advertising. You may designate an authorized agent to make requests on your behalf subject to verification.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated through the Services or by email where appropriate. Continued use after the effective date constitutes acceptance of the revised policy.
13. Contact
For privacy-related questions or requests, contact us at contact@savvytron.com.