Bakebug ("we", "us", or "Bakebug") values your privacy. This Privacy Policy explains what information we collect, how we use it, your rights, and how we protect your data. Bakebug is based in Ontario, Canada and currently supports users in Canada, the United States, the United Kingdom, and Ireland.

1. Information We Collect

We collect information you provide directly and information collected automatically:

• Account Information: Name, email address, and authentication credentials when using third-party login (Google or Facebook).
• Store Information: Business name, description, fulfillment options, payment preferences, and other details you provide when setting up your store.
• Customer Data: Information that Store Owners collect from their customers in the normal course of processing orders (names, contact information, order details).
• Technical Data: IP address, browser type, device information, operating system, timezone, locale preferences, and currency settings.
• Usage Data: How you interact with the Services, including pages visited and features used.

2. How We Use Information

We use collected information to operate, provide, maintain, and improve the Services:

• Creating and managing user accounts.
• Providing the platform and enabling Store Owners to operate their online stores.
• Processing and facilitating transactions (in coordination with payment processors).
• Sending transactional and service-related emails (account updates, order confirmations, security alerts).
• Detecting and preventing fraud, improving security, and meeting legal obligations.
• Localizing user experience (language, timezone, currency defaults) using geolocation and browser settings.
• Analyzing usage patterns to improve the Services.

3. Children's Privacy & Minors

Bakebug is not intended for children under 13 years of age (or the local age of digital consent in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children under 13. Users must be at least 18 years old to use Bakebug independently, or have the involvement and consent of a parent or legal guardian if under 18.

If we learn that we have collected personal data from a child under 13 without proper parental consent, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child, please contact us at support@bakebug.com.

4. Third-Party Services & Payment Processing

We use third-party service providers to help us operate and improve the Services, including hosting, email delivery, analytics, and payment processing. These providers process data on our behalf under appropriate data processing agreements.

For payment processing, we integrate with Square. To facilitate transactions and refunds, we store minimal information from Square including:

• Square merchant IDs and location IDs
• Access and refresh tokens (encrypted)
• Token expiration times
• Location details (name, address, currency, country)
• Primary location flags

Sensitive cardholder data (card numbers, CVV codes) is processed directly by Square and is never stored on Bakebug's servers. For details on how Square handles payment data, see Square's Privacy Policy.

5. Cookies, Local Storage & Tracking

We use essential cookies for authentication, security, and core functionality. We may also use minimal analytics to maintain and improve the Services. We do not use advertising or marketing cookies by default.

Browser storage technologies are used as follows:

• localStorage & IndexedDB: Used to store shopping cart contents, checkout session data, and user preferences to improve your experience across sessions.
• sessionStorage: Used throughout the application to enhance user experience by temporarily storing session-specific data (such as form progress, navigation state, and UI preferences) and to count unique visitors to individual stores for basic analytics purposes. No personally identifiable information or IP addresses are stored in sessionStorage.

All browser storage data is stored locally on your device and can be cleared through your browser settings at any time.

6. Country Detection & Localization

To improve user experience, we may attempt to detect your country or locale using:

• IP-based geolocation: We use third-party services (such as country.is API) to estimate your country based on your IP address.
• Browser locale information: We read your browser's language and region settings.
• Timezone inference: We use your device's timezone settings to provide appropriate defaults.

This detection is provided for convenience and localization purposes only (such as setting default timezone, currency, and language preferences). It should not be relied upon for legal or eligibility determinations. Users and Store Owners remain solely responsible for ensuring compliance with all applicable local laws and requirements, regardless of detected location.

7. Sharing of Information

We do not sell your personal information. We may share information with:

• Service Providers: Third parties that assist with hosting, email, analytics, and payment processing.
• Legal Requirements: Authorities when required by law, court order, or to protect rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notification to affected users).
• With Your Consent: When you explicitly authorize us to share information.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy and as required by applicable law. Account information is retained while your account is active. Transaction records may be retained longer to comply with legal, tax, and accounting requirements.

You may request deletion of your account and personal data by contacting support@bakebug.com. Note that some information may be retained in backup systems for a limited time and certain data may need to be retained to comply with legal obligations.

9. Security

We employ reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure authentication, access controls, and regular security assessments.

However, no method of internet transmission or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

10. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Objection: Object to certain processing of your data.
• Portability: Request transfer of your data in a structured, machine-readable format.
• Withdrawal of Consent: Withdraw consent for processing where we rely on consent.

To exercise these rights or for questions about your personal data, contact support@bakebug.com. We will respond to requests within the timeframe required by applicable law.

11. International Transfers

Personal data may be processed and stored in Canada or in other jurisdictions where our service providers operate. If you access Bakebug from outside Canada, your information may be transferred to, stored, and processed in Canada or other countries where data protection laws may differ from those in your jurisdiction.

Where required by law, we adopt appropriate safeguards for international data transfers, such as standard contractual clauses or other approved mechanisms.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The revised policy will be posted on this page with a new "Last Updated" date. Material changes may be communicated via email or prominent notice on the platform.

Continued use of the Services after updates constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact

For privacy questions, concerns, or requests regarding your personal data, contact us at: support@bakebug.com