1. Introduction
BakeMargin (“we”, “our”, “us”) is a recipe costing and margin tracking service for home bakers and micro-bakery owners. We are operated from Madrid, Spain and comply with the EU General Data Protection Regulation (GDPR).
This policy explains what personal data we collect, how we use it, and your rights regarding that data.
2. Information We Collect
We collect the following data when you use BakeMargin:
- Account information — email address, name, and profile preferences (currency, locale) when you create an account
- Recipe and ingredient data — recipes, ingredients, costs, and selling prices you enter into the platform
- Payment information — processed securely by Stripe; we do not store credit card numbers
- Usage data — pages visited, features used, and session duration collected via Vercel Analytics
3. How We Use Your Data
- Provide and operate the BakeMargin service
- Calculate recipe costs, margins, and pricing suggestions
- Send monthly reports and service notifications via email
- Improve the product based on aggregated, anonymized usage patterns
- Process payments and manage subscriptions
4. Third-Party Services
We use the following third-party providers to operate BakeMargin:
- Supabase — database hosting and authentication (hosted in the US)
- Stripe — payment processing (PCI DSS compliant)
- Vercel — hosting and privacy-friendly analytics
- Resend — transactional and report emails
- Google — OAuth authentication and Google Analytics
Each provider processes data according to their own privacy policies and under appropriate data processing agreements.
5. Cookies
We use a limited number of cookies:
- Authentication cookies — to keep you logged in (essential, session-based)
- Analytics cookies — Vercel Analytics and Google Analytics for understanding site usage
We do not use advertising or tracking cookies.
6. Data Retention
Your data is retained for as long as your account is active. If you delete your account, we permanently remove all associated personal data, recipes, and ingredients within 30 days. Anonymized, aggregated data (such as average cost statistics) may be retained indefinitely.
7. Your Rights
Under GDPR, you have the right to:
- Access your personal data (Art. 15)
- Correct inaccurate data (Art. 16)
- Delete your account and all data (Art. 17)
- Export your data in a portable format (Art. 20)
- Object to processing of your data (Art. 21)
To exercise any of these rights, email us at support@bakemargin.com. We will respond within 30 days.
8. Children’s Privacy
BakeMargin is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through a notice on the website. Continued use of BakeMargin after changes constitutes acceptance of the updated policy.
10. Contact
For questions about this privacy policy or your data, contact us at support@bakemargin.com.