Privacy Policy

This Privacy Policy explains what information CookiePrint collects, how we use it, and the choices you have.

1. Information We Collect

• Account data: email, name, and (for bakery owners) store details you provide.
• Order data: customer name, email, phone, shipping/delivery address, uploaded artwork, and order specifications.
• Payment data: processed by Stripe. We store only order totals and payment status, not full card numbers.
• Usage data: basic logs (IP, browser, timestamps) used to secure and improve the Service.

2. How We Use Information

• To create and process orders and deliver them to you.
• To communicate order status, receipts, and account notifications.
• To operate, secure, and improve the Service.
• To comply with legal obligations.

3. Sharing

We share order information with the specific store you place an order with so they can fulfill it. We use the following categories of processors:

• Stripe — payment processing.
• Supabase / Lovable Cloud — database, authentication, and file storage.
• Google — optional sign-in via Google OAuth.

We do not sell your personal information.

4. Uploaded Artwork

Images you upload are stored securely and used only to fulfill your order. Bakery-store staff who process your order can view them. You can request deletion at any time.

5. Retention

We retain order and account records for as long as your account is active, or as needed to comply with tax and legal obligations. You may request deletion of your account and associated data by contacting us.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. To exercise these rights, email support@cookieprint.app.

7. Cookies

We use strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies.

8. Security

Data is transmitted over HTTPS and stored with access controls (row-level security) so each store can only see its own orders. No system is 100% secure, but we work to protect your data using industry-standard practices.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect data from them.

10. Changes

We may update this policy. Material changes will be communicated via email or an in-app notice.

11. Contact

Privacy questions: support@cookieprint.app.