Privacy Policy

Who we are

BakeFleet is operated by BakeFleet LLC, 7533 S Center View Ct Ste N, West Jordan, UT 84084 ("BakeFleet", "we", "us"). You can reach us at support@bakefleet.com.

This policy explains our practices. It is not a contract and does not create rights beyond those the law gives you.

Three kinds of people

Bakeries are our customers. We hold their account details, storefront settings and billing records. Most of this policy describes that relationship.

A bakery's customers are theirs, not ours. Their names, addresses and order history are stored on behalf of that one bakery, kept separate from every other bakery on the platform, and are not used for our own marketing or shared between bakeries. If you ordered bread from a bakery and have a question about your data, ask them. They decide what happens to it. Our obligations to them are set out in the Data Processing Agreement.

Visitors to our own website. If you browse our site, fill in a form, use one of our free tools or sign up for updates, we collect what you give us and the browsing information described under Cookies.

What we collect about a bakery

• Account — name, email, hashed password, and the staff you invite. If you invite staff or drivers, you confirm you have the right to give us their details.
• Storefront — your business name, address, branding and settings. Whatever you choose to display on your storefront is public. If you bake from home, check your storefront settings to see which address is shown.
• Billing — your plan, invoices, and the card brand and last four digits. Not the full number.
• Usage — pages visited in the admin, and server logs including IP addresses, kept for security and debugging.
• Website activity — pages viewed on our own website, the link or ad that brought you, and cookie and device identifiers.
• Support — what you send us when you ask for help.

Most of this comes from you. Some is recorded automatically, and some comes from Stripe (whether a payment succeeded), from a partner who referred you, or from advertising and analytics providers (which ad you responded to).

Why we have it

To provide the service you signed up for, to bill you for it, to keep it secure, to improve it, to measure and advertise our own product, to meet our legal obligations, and to contact you about it. We will email you about your account and about material changes to the product or the terms. We may also email you product news, and every such email has an unsubscribe link.

We do not sell your information for money. We do use advertising and analytics providers, as described under Cookies. Some state laws call that kind of disclosure "sharing" or "targeted advertising", and you can opt out of it.

Card details

Card numbers go directly from your browser to Stripe. They do not pass through or get stored on our servers. A bakery's customers' cards are held on that bakery's own Stripe account, and a bakery's own card on ours. We keep only the brand and last four digits so a card is recognisable.

Cookies and similar technologies

Essential. A session cookie keeps you signed in, and a token cookie protects forms against cross-site request forgery. Both are strictly necessary and are scoped to the exact host you are on, so a session on one bakery's storefront does not exist on another's.

Analytics and advertising. On our own website, and on the billing screen inside the bakery admin, we use cookies, pixels and similar tags from analytics and advertising providers. They help us understand how the site is used, measure our ads, and show BakeFleet ads to people who have visited us. These providers receive cookie and device identifiers, your IP address and the pages you view, and they may combine that with what they know from other websites. They do not receive your password, your card details or your customers' records.

We do not place our analytics or advertising tags on bakery storefronts or checkout pages. If a bakery adds its own tags to its storefront, that bakery is responsible for them and for telling its customers.

Your choices. Advertising and analytics tags do not load until you accept them, and you can change your mind at any time using the cookie settings link in our footer. We treat a Global Privacy Control signal from your browser as an opt-out of advertising cookies, so a browser that sends one is never asked and never given an advertising cookie. You can also block cookies in your browser. We do not respond to the older Do Not Track signal, because there is no common standard for it.

Affiliate tracking

If you arrive through a partner link, we set one first-party cookie recording which link it was, for 60 days, so the partner can be credited if you sign up. We log the visit with the IP address stored as a keyed hash rather than in the clear, and those records are deleted after 365 days. Partners see counts and their own commissions, never a visitor's identity.

Who else sees it

Service providers. The companies we need to run the service: hosting, payment processing, traffic delivery and certificates, email delivery, text messaging, error monitoring, and support and accounting tools. Each may use your data only to provide its service to us. What each one handles is listed, by function, in the Data Processing Agreement.

Advertising and analytics providers. As described under Cookies.

Platform staff. Staff can access a bakery's account to provide support. When that happens it is labelled on screen for the whole session and recorded in an audit log naming who did it and when.

Legal reasons. We may disclose information where the law requires it, such as in response to a court order, or where needed to enforce our terms or to protect the safety, rights or property of BakeFleet, bakeries or the public.

Sale of the business. If BakeFleet is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of it, and the recipient may continue to use it as this policy describes.

The public. Anything you choose to show on your storefront.

Your rights

You can ask for a copy of what we hold about you, correct it, or have it deleted. Most of it you can see and change yourself in your account settings. For the rest, email support@bakefleet.com. We respond within the time the law requires, usually within 45 days, and may need to confirm who you are first. We may keep information the law requires or allows us to keep. We will not treat you differently for making a request.

US state privacy rights

Some states give residents extra rights, including to opt out of targeted advertising and of "sales" or "sharing" of personal information, and to appeal a decision we make on a request. Where those laws apply to us, we honour them. Use the cookie settings link in our footer to opt out, and email support@bakefleet.com for anything else, including an appeal.

In the language of those laws: we collect identifiers, commercial information, internet activity and approximate location from the sources and for the purposes described above. We disclose identifiers and internet activity to advertising and analytics providers. We do not knowingly sell or share the information of anyone under 16, and we do not collect sensitive personal information to infer characteristics about you.

Retention and deletion

We keep account data while your account is open. Cancelled accounts are retained for 90 days and then deleted from our live systems, along with everything belonging to them. Backups are overwritten within a further 35 days. Earlier deletion can be requested at any time. Server logs are kept for 90 days. Advertising and analytics providers keep their data for the periods in their own policies.

Records we must keep for tax or accounting, and anything needed to resolve a dispute, are held separately for as long as needed.

Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit, hashed passwords and a second factor on administrative access. No system is perfectly secure, and we cannot guarantee that your information will never be accessed or disclosed. If you think your account has been compromised, tell us straight away at support@bakefleet.com.

Where your data is held

We store and process data in the United States. If you use BakeFleet from elsewhere, your information will be transferred to and handled in the United States.

Children

BakeFleet accounts are for adults running a business. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

Changes

We will post any change here with a new date. If a change is material, we will tell account owners by email or in the dashboard before it takes effect.

Last updated September 2026. Questions, or to exercise any of the above: support@bakefleet.com.