Privacy Policy

We collect the following types of information when you use Whiskly: Account Information: When you create an account, we collect your name, email address, and password. Bakers may also provide a business name, location, specialties, pricing, and profile photos. Order Information: When you place or fulfill an order, we collect details about the order including event type, event date, budget, item description, delivery address, and any inspiration photos you upload. Payment Information: Payments are processed through Stripe. Whiskly does not store your full payment card details. We receive limited transaction data from Stripe including the last four digits of your card and transaction amounts. Communications: We store messages sent between customers and bakers through the Platform in order to facilitate order management and dispute resolution. Usage Data: We may collect information about how you use the Platform, including pages visited, features used, and actions taken.

We use the information we collect to: - Create and manage your account - Facilitate transactions between customers and bakers - Send order-related notifications and reminders - Respond to customer support requests - Improve the Platform and develop new features - Enforce our Terms of Service - Comply with legal obligations If you are a baker on the Pro tier, we may use your profile information for marketing purposes including featuring your profile in search results and promotional materials.

We do not sell your personal information to third parties. We share your information in the following limited circumstances: Between Users: Certain information is shared between customers and bakers as necessary to fulfill orders. For example, a baker receives a customer's event details and delivery address when an order is confirmed. Customer delivery addresses are not shared with bakers until an order is accepted. Service Providers: We share information with trusted third-party service providers who help us operate the Platform, including Stripe (payments), Supabase (database), Vercel (hosting), and Resend (email). These providers are contractually obligated to protect your information. Legal Requirements: We may disclose your information if required by law or if we believe disclosure is necessary to protect the rights or safety of Whiskly, our users, or the public. Business Transfers: In the event of a merger, acquisition, or sale of Whiskly, your information may be transferred to the acquiring entity.

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes. Order records may be retained for up to 7 years for tax and legal compliance purposes.

Whiskly uses cookies and similar technologies to maintain your session, remember your preferences, and analyze Platform usage. You can control cookie settings through your browser, but disabling cookies may affect Platform functionality. We do not use third-party advertising cookies or share your data with advertising networks.

Depending on your location, you may have the following rights regarding your personal information: - Access: Request a copy of the personal information we hold about you - Correction: Request that we correct inaccurate information - Deletion: Request that we delete your personal information - Portability: Request a machine-readable copy of your data - Objection: Object to certain uses of your information To exercise any of these rights, contact us at privacy@whiskly.com. We will respond to your request within 30 days.

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. These measures include encrypted data transmission, secure authentication, and access controls. No system is completely secure. We cannot guarantee the absolute security of your information and are not responsible for unauthorized access resulting from factors outside our reasonable control.

Whiskly is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and, where appropriate, by email. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

For questions about this Privacy Policy or to exercise your data rights, contact us at privacy@whiskly.com.