Glos Cake provides software that bakeries use to run their own online shops. This policy explains what we do with data when you sign up as a bakery, and what we do with the data your customers give you through your storefront.
Data we hold about a bakery
When you register a shop we collect your name, email address, mobile number, shop name and shop address. If you subscribe, we also keep a record of your payments and invoices. We use this to run your account, take payment, and contact you about your subscription and about the service.
Data your customers give you
Orders placed on your storefront contain your customers' names, mobile numbers and delivery addresses. That data belongs to your relationship with them, not to us. Under India's Digital Personal Data Protection Act, you are the Data Fiduciary for it and Glos Cake acts as a Data Processor on your behalf.
In practice this means:
- We store and process it only so your shop can function.
- We do not sell it, and we do not use it to market anything to your customers.
- We do not share it with other bakeries on the platform. Each shop's data is isolated from every other shop's.
- When one of your customers asks you to export or delete their data, the tools to do that are in your panel, and the deletion is real.
Who we share data with
We use third parties to deliver parts of the service — payment processing, SMS and WhatsApp delivery, and hosting. They receive only what they need to perform that function. We do not sell data to anyone.
Optional AI features
Some features send product descriptions and images you write to an AI provider to generate copy. This is optional, it is triggered only when you ask for it, and customer personal data is never part of what is sent.
How long we keep data
We keep your account and order records while your shop is active, and for as long afterwards as we need them for tax and accounting obligations. You can ask us to delete your shop and its data at any time; we will do so except where the law requires us to retain a record.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Your customers have the same rights against you, and your panel has the tools to honour them.
Security
Access to shop data requires authentication, and every request is scoped to the shop that made it. Passwords are stored hashed, never in readable form. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
Contact
Questions about this policy, or a request about your data, can be sent to support@gloscake.com.