Privacy Policy
Last updated: December 8, 2026
Bakerflow (“Bakerflow”, “we”, “us”, or “our”) provides an online bakery management system to help bakers manage recipes, inventory, orders, production, capacity, analytics, and online store sales. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.
We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we follow principles aligned with the GDPR for international users. By accessing or using Bakerflow, you agree to this Privacy Policy.
1. Information We Collect
1.1 Account Information
We collect your:
- Name
- Email address
- Password
- Optional profile details
1.2 Bakery and Business Information
We collect information such as:
- Business name
- Business address
- Baking schedule and availability
- Online store configuration
- Production and capacity settings
1.3 Customer and Order Information
You may store your customers’ information, including:
- Names
- Contact details
- Order details and history
- Allergies or notes
- Pickup or delivery information
You are responsible for ensuring you have the right to store your customers’ data in Bakerflow.
1.4 Recipe, Inventory, and Product Information
We store:
- Recipe details and sub recipes
- Ingredients and supplies
- Inventory levels, batches, and expiry
- Product catalogues and pricing
- Production steps and schedules
1.5 Uploaded Files
You may upload:
- Recipe PDFs or documents
- Photos or images of recipes or products
These files support your workflow and may be processed when you use AI features.
1.6 Beta Program Data
If you join the beta program, we may collect:
- Feedback
- Bug reports
- Usage information
- Voluntary survey responses
1.7 Automatically Collected Data
We collect information such as:
- IP address
- Device and browser type
- Access times
- Pages visited
This helps us secure and improve the service.
2. How We Use Your Information
We use your information to:
- Operate and maintain the Bakerflow platform
- Process recipes, inventory, orders, production plans, and analytics
- Power features such as scheduling, capacity, and online storefronts
- Provide AI recipe imports
- Communicate updates and provide support
- Improve and develop new features
- Comply with legal obligations
We do not sell your information.
3. AI Features and How They Process Data
Bakerflow uses Claude (Anthropic) to support AI-powered recipe imports. When you use these features:
- Your uploaded file (text, image, PDF) may be transmitted securely to Anthropic’s API
- The data is processed only to provide the requested output
- To our knowledge, your data is not used to train public AI models
- Processed results (such as ingredient lists) are stored in your Bakerflow account
By using AI features, you consent to this processing.
4. Data Storage and Security
Bakerflow uses Vercel for hosting and Supabase for database storage. We apply industry-standard security measures including encryption in transit, secure password hashing, access controls, regular backups, and monitoring for unauthorized access. We take reasonable steps to protect your data but cannot guarantee absolute security.
5. Payments
Payments for paid plans are processed via Stripe. Bakerflow does not store full credit card information. Stripe stores and processes payment information under its own terms and policies, and we receive only limited billing details (e.g., card type, last 4 digits).
6. Sharing Your Information
We may share your data with:
- Service providers (hosting, email, analytics, payment processing, AI services)
- Third-party integrations you enable (e.g., Square)
- Regulators or authorities when required by law
We do not sell or rent your data.
7. International Data Transfers
Your information may be processed in regions outside your country. We take reasonable steps to ensure adequate protection when transfers occur.
8. Your Rights
You may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Request an export of your data
- Object to or restrict certain processing
To exercise these rights, email us at hello@bakerflow.com.
9. Data Retention
We retain your information while your account is active. If you delete your account, personal data is deleted or anonymised within a reasonable time. Some data may be retained if required by law.
10. Children’s Privacy
Bakerflow is not intended for children under 16. We do not knowingly collect data from children under 16.
11. Updates to This Privacy Policy
We may update this policy. When we do, we will update the “Last updated” date and notify users where required.
12. Contact Us
Bakerflow
8 Kinsfolk Circuit
Doveton VIC 3177
Australia
Email: hello@bakerflow.com