Privacy Policy

1. Overview

This Privacy Policy describes how Infinity Digital LLC ("we," "us," or "our") collects, uses, and protects information when you use KneadIt ("the Service") at getkneadit.app and its subdomains.

This policy applies to Baker accounts (bakery owners using the platform) and End Customers (people who place orders through Baker storefronts).

2. Information We Collect

Account Information (Bakers)

• Name, email address, and password
• Bakery name and subdomain
• Business information (phone number, address, if provided)

Billing Information

• Payment details are collected and processed by Stripe. We do not store your full credit card number on our servers.
• We receive from Stripe: card type, last four digits, expiration date, and billing address for record-keeping.

End Customer Information (collected by Bakers through storefronts)

• Name, email, phone number
• Order details and delivery/pickup preferences
• Any other information provided during the ordering process

Usage Data

• Log data such as IP address, browser type, and pages visited
• Feature usage patterns within the platform
• We do not currently use third-party analytics tools

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process subscription payments and manage your account
• Send transactional emails (order confirmations, password resets, account notifications)
• Respond to support requests and communicate with you
• Enforce our Terms of Service and protect against misuse
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services to operate KneadIt:

Stripe

Processes subscription payments. Stripe collects and manages payment information under its own Privacy Policy.

Resend

Delivers transactional emails (from hello@getkneadit.app). Email addresses are shared with Resend for delivery purposes. See Resend's Privacy Policy.

Cloudflare

Provides content delivery, DNS, and security services. Cloudflare may process connection metadata (IP addresses, request headers). See Cloudflare's Privacy Policy.

PayPal (Baker-configured)

Bakers may use PayPal to process payments from their End Customers. KneadIt does not process these payments — PayPal's relationship is directly with the Baker and their customers.

5. Cookies & Tracking

KneadIt uses only essential session cookies required for the Service to function (authentication, CSRF protection). We do not use:

• Third-party tracking cookies
• Advertising cookies
• Analytics cookies

Your browser may allow you to disable cookies, but doing so may prevent you from using certain features of the Service.

6. Data Retention

• Active accounts: Data is retained for as long as your account is active.
• Canceled accounts: Data is retained for 30 days after cancellation to allow for reactivation or export, then permanently deleted.
• Billing records: Retained as required by applicable tax and financial regulations.
• Support communications: Retained for a reasonable period to provide ongoing service.

7. Baker Responsibility for Customer Data

Bakers who use KneadIt collect and manage their own End Customers' data through their storefronts. As a Baker, you are responsible for:

• Complying with all applicable privacy laws regarding your customers' data
• Informing your End Customers about what data you collect and how you use it
• Handling data access, correction, and deletion requests from your End Customers
• Ensuring your use of customer data complies with local regulations

KneadIt acts as a data processor on behalf of Bakers (the data controllers) for End Customer data. We process this data only to provide the Service and do not use End Customer data for our own independent purposes.

8. Children's Privacy (COPPA)

KneadIt is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@getkneadit.app and we will promptly delete such information.

Baker accounts require users to be at least 18 years old.

9. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Secure password hashing
• Regular security updates and monitoring
• Access controls limiting who can view your data

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Your Rights & Choices

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your account settings
• Delete your account and associated data by contacting us
• Export your data (products, orders, customers) before account deletion
• Opt out of non-essential communications

To exercise any of these rights, contact us at hello@getkneadit.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through the Service at least 30 days before the changes take effect. The "Effective Date" at the top of this page indicates when this policy was last revised.

12. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: hello@getkneadit.app
• Company: Infinity Digital LLC
• Location: Florida, USA