Privacy Policy

We collect the following types of information when you use Whiskly: Account Information: When you create an account, we collect your name, email address, and password. Bakers may also provide a business name, location, specialties, pricing, and profile photos. Order Information: When you place or fulfill an order, we collect details about the order including event type, event date, budget, item description, delivery address, and any inspiration photos you upload. Financial Information: When you connect a payment method or Stripe account to Whiskly, we collect and store the minimum information necessary to process payments, including your name, billing address, and the last four digits of your payment method. Full payment details are stored by Stripe, our payment processor, not by Whiskly. Bakers receive payouts directly from Stripe on a standard 2-business-day schedule. Whiskly does not hold baker funds in reserve. Communications: We store messages sent between customers and bakers through the Platform in order to facilitate order management and dispute resolution. Attribution Data: We track the source through which you first arrived at the Platform (for example, organic search, direct visit, or a baker's referral link) using a first-touch attribution cookie. We also record the entry path of each session within the Platform (for example, whether a customer reached a baker's profile through the browse page, a search result, or a direct link). This data is used to calculate Platform attribution metrics that determine commission activation under our Terms of Service. Bakers can view aggregated attribution metrics for their own profile in their dashboard. Usage Data: We may collect information about how you use the Platform, including pages visited, features used, and actions taken.

We use the information we collect to: - Create and manage your account - Facilitate transactions between customers and bakers - Send order-related notifications and reminders - Respond to customer support requests - Improve the Platform and develop new features - Enforce our Terms of Service - Comply with legal obligations If you are a baker on the Pro tier, we may use your profile information for marketing purposes including featuring your profile in search results and promotional materials.

We do not sell your personal information to third parties. We share your information in the following limited circumstances: Between Users: Certain information is shared between customers and bakers as necessary to fulfill orders. For example, a baker receives a customer's event details and delivery address when an order is confirmed. Customer delivery addresses are not shared with bakers until an order is accepted. Service Providers: We share information with trusted third-party service providers who help us operate the Platform, including Stripe (payments), Supabase (database), Vercel (hosting), and Resend (email). These providers are contractually obligated to protect your information. Legal Requirements: We may disclose your information if required by law or if we believe disclosure is necessary to protect the rights or safety of Whiskly, our users, or the public. Business Transfers: In the event of a merger, acquisition, or sale of Whiskly, your information may be transferred to the acquiring entity.

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes. Order records may be retained for up to 7 years for tax and legal compliance purposes.

Whiskly uses cookies and similar technologies to maintain your session, remember your preferences, analyze Platform usage, and track referral sources for attribution purposes. You can control cookie settings through your browser, but disabling cookies may affect Platform functionality, including the proper attribution of orders to baker referral links. We do not use third-party advertising cookies or share your data with advertising networks.

Depending on your location, you may have the following rights regarding your personal information: - Access: Request a copy of the personal information we hold about you - Correction: Request that we correct inaccurate information - Deletion: Request that we delete your personal information - Portability: Request a machine-readable copy of your data - Objection: Object to certain uses of your information To exercise any of these rights, contact us at support@whiskly.co. We will respond to your request within 30 days.

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. These measures include encrypted data transmission, secure authentication, and access controls. No system is completely secure. We cannot guarantee the absolute security of your information and are not responsible for unauthorized access resulting from factors outside our reasonable control.

Whiskly is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and, where appropriate, by email. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

For questions about this Privacy Policy or to exercise your data rights, contact us at support@whiskly.co.