Privacy Policy
Last updated October 29, 2026
This policy explains what Flourloop collects, why, and the choices you have.
What we collect
- Bakers: name, email, password (stored only as a salted hash), bakery details, recipes, products, orders, expenses and Stripe account ID.
- Customers of bakers: name, email, phone, delivery address if provided, order details, allergy notes and inspiration photos submitted on an order page.
- Payments: processed by Stripe. Flourloop never sees or stores full card numbers.
- Technical data: a session cookie needed to keep you signed in, and basic server logs (IP address, user agent) for security and abuse prevention.
How we use it
To run the service: show orders to the baker you ordered from, send order confirmations and receipts, process payments, prevent fraud, and provide support. We do not sell personal information and we do not use third-party advertising trackers.
Who we share it with
- The baker you order from (customers’ order information).
- Service providers: Stripe (payments), Resend (email), our hosting and database providers.
- Authorities where required by law.
Allergy and health information
Allergy notes are shared only with the baker fulfilling the order, to help them prepare it safely.
Retention and deletion
Bakers can export all data and delete their account in one click from Settings; this permanently removes their bakery, recipes, orders and customer records, except payment records we must keep for legal or tax reasons. Customers can ask the baker or email us to delete their information.
Your rights
Depending on where you live (for example California), you may have rights to access, correct, delete or port your data. Email hello@flourloop.com and we will respond within 30 days.
Security
Data is encrypted in transit, access is isolated per bakery with database row-level security, and passwords are hashed.
Children
Flourloop is not directed to children under 13.
Contact
hello@flourloop.com
[Lawyer review: CCPA/CPRA notice at collection, state privacy laws (VA, CO, CT, TX, etc.), data processing roles (Flourloop as processor for bakers’ customer data), entity details.]