Privacy Policy

Last updated: May 26, 2025

Bakery Order Form ("the App") is a Shopify application that allows merchants to collect custom cake orders from their customers. This Privacy Policy explains what information the App collects, how it is used, and how it is protected.

Information We Collect

When the App is installed and used, we may collect and store the following information:

• Merchant data: Shopify store domain, access tokens required to operate the App, and form configuration settings (cake sizes, flavors, available days, etc.).
• Customer order data: Customer name, email address, chosen cake size and flavor, requested pickup date, optional message on the cake, and optional reference image uploaded by the customer.
• Usage data: Monthly order counts used to enforce plan limits.

How We Use This Information

• To display and operate the custom order form on the merchant's storefront.
• To store and present submitted orders to the merchant via the App's admin dashboard.
• To create Shopify Draft Orders on the merchant's behalf so order details are visible in Shopify admin.
• To enforce plan usage limits (Free plan: 5 orders per month).

Data Storage

Order data and merchant settings are stored in a Cloudflare D1 database hosted in Cloudflare's infrastructure. Data is associated with the merchant's shop domain and is logically isolated per store.

Data Sharing

We do not sell, rent, or share personal information with third parties, except:

• With Shopify, as required to create Draft Orders and authenticate the App (governed by Shopify's Privacy Policy).
• With Cloudflare, as the infrastructure provider for computing and storage (governed by Cloudflare's Privacy Policy).
• When required by law.

Data Retention

Order data is retained for as long as the App is installed on the merchant's store. When a merchant uninstalls the App, their data may be deleted upon request by contacting us.

Merchant Responsibilities

Merchants are responsible for informing their own customers about how order data is collected and used in accordance with applicable privacy laws (such as GDPR, CCPA, etc.) and Shopify's partner requirements.

Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

Contact

If you have questions about this Privacy Policy, please contact us via the support link on the app's Shopify App Store listing page.