Privacy Policy

We collect information from you, from other people using the service, and automatically when you use the service.

• Account and contact details. This may include your name, email address, phone number, account role, and sign-in details. If you choose Google Sign-In, Google may provide basic profile information such as your name, email address, and profile image when available. We use this information to create or sign in to your account and give you access to your saved orders or bakery workspace. We do not request access to Gmail, Google Drive, Google Contacts, or Google Calendar. Customers may place an order without creating an account.
• Orders and pickup details. We collect the bakery and items selected, quantities, prices, requested pickup date and window, order notes, status changes, cancellation information, and payment status. When a customer chooses online checkout, Stripe collects card or wallet details directly. We retain transaction identifiers, payment status, amount, card brand and last four digits, refund information, and dispute status, but not full card numbers, security codes, or wallet credentials.
• Messages. We collect the name, email address, subject, optional order number, and message submitted when a customer contacts a bakery, along with replies and order-related messages.
• Bakery information. Bakery owners may provide a bakery name, description, contact details, website and social links, menu, prices, availability, pickup windows, payment methods, address, photos, and information about permits or other credentials.
• Online payment setup. Bakery owners who choose to prepare for online payments provide identity, business, tax, and payout details directly to Stripe. We receive and retain the connected account identifier and readiness information, but not bank account numbers, identity documents, or the answers entered during Stripe’s verification process.
• Location information. Bakery owners provide a pickup address that is shown on their public bakery page. We may also store map coordinates used to display that location.
• Documents and media. Bakery owners may upload bakery and menu images and private copies of permits, licenses, registrations, or insurance documents for review.
• Technical and security information. When you use the service, we and the companies that help us operate it may receive an IP address, browser and device information, request times, cookie or session identifiers, email delivery events, and diagnostic or security logs.

We use information to:

• provide accounts, bakery discovery, guest checkout, orders, pickup coordination, and messaging;
• calculate and preserve order prices and help bakeries manage availability and capacity;
• send sign-in links, order updates, payment-status updates, and customer-bakery messages;
• show each bakery’s listed address and pickup location;
• review bakery credentials and respond to questions or support requests;
• protect customers and bakeries, prevent fraud or misuse, and enforce our Terms and Conditions;
• maintain, troubleshoot, and improve the service; and
• comply with law, resolve disputes, and protect legal rights.

We disclose information only as needed for the service and the purposes described in this policy:

• Between customers and bakeries. The bakery receives the customer and order details needed to review and fulfill an order. Customers receive bakery, pickup, order, and payment instructions. Messages are shared with the intended customer or bakery.
• With companies that support the service. Providers help us with hosting, authentication, file storage, email delivery, mapping, payment-account setup and processing, refunds, security, diagnostics, and similar operational needs. They may process information only to provide those services or as allowed by their agreements and applicable law.
• For legal and safety reasons. We may disclose information when reasonably necessary to comply with law or legal process, investigate misuse, protect a person’s safety, or defend the rights of My Porch Front Bakery, a customer, a bakery, or others.
• As part of a business change. Information may be transferred in connection with a merger, financing, acquisition, reorganization, or sale of all or part of the service, subject to appropriate protections.
• At your direction. We may share information when you ask us to or give permission.

We do not sell personal information for money. If you allow marketing cookies, we use the Meta Pixel to measure visits and actions such as searches, product views, orders, contacts, catering requests, and bakery registrations. Meta may use information received through the pixel to provide measurement services and to help us understand and improve advertising. This activity may be considered sharing for cross-context behavioral advertising or targeted advertising under some privacy laws.

Published bakery pages are public and may appear in search results. Information a bakery owner chooses to publish may include the bakery name, description, menu, prices, photos, service area, pickup schedule, payment methods, links, credential details, and listed street address.

Private permit documents are not displayed to shoppers. Customer contact details, order notes, and private messages are not public.

We use cookies and similar local identifiers that are necessary to keep you signed in, protect account sessions, remember secure guest access to an order, remember your privacy choice, and prevent misuse. Blocking these tools may prevent sign-in, guest order access, or other parts of the service from working.

With your permission, we use Meta marketing cookies and similar technology to understand how people find and use My Porch Front Bakery, measure orders and other actions, and improve our advertising. Marketing technology remains off unless you choose to allow it. You can accept, reject, or later change this choice through the Cookie choices link in the site footer. We also treat a supported Global Privacy Control signal from your browser as a request to keep marketing cookies off.

Embedded maps and links to third-party payment or mapping services may allow those services to receive technical information under their own privacy policies. You can choose whether to open an external link, but an embedded map may load when you view a bakery page.

You can choose whether to create a customer account. Bakery owners can update their public listing and bakery address. You may also ask us to access, correct, delete, or provide a copy of personal information we hold about you.

Depending on where you live, you may have additional rights to know the categories, sources, purposes, and recipients of your information; to limit certain uses of sensitive information; to opt out of a sale, sharing, or targeted advertising; to appeal a denied request; and to be free from discrimination for exercising a privacy right. You can opt out of marketing measurement and targeted advertising through the Cookie choices link in the site footer or through a supported Global Privacy Control signal.

Submit a request by emailing cirestudios.dev@gmail.com with the subject Privacy Request. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law. Some information may be retained when needed to complete orders, prevent fraud, keep required records, or comply with law. A bakery may also retain its own lawful records of a transaction or message it received.

We keep information for as long as reasonably necessary to provide the service, maintain order and business records, resolve disputes, enforce agreements, protect the service, and meet legal obligations. The period varies by the type of information and why it was collected. When information is no longer needed, we delete it, de-identify it, or keep it securely isolated until deletion is practical.

We use administrative, technical, and organizational safeguards designed to protect personal information. No online service can guarantee absolute security. Keep email links that provide access to an account or guest order private, and contact us if you believe your information or access link has been compromised.

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Accounts, bakery listings, and orders are intended for people who are at least 18 or the age of legal majority where they live. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

We may update this policy as the service or legal requirements change. We will post the revised policy here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice when required.

For privacy questions or requests, contact Cire Studios LLC at cirestudios.dev@gmail.com.