Privacy policy

BrandBake plans and designs email campaigns and social posts for your store. To do that it reads your product catalogue, inventory and order totals from Shopify, your past campaign results from your email platform, and public pages about your brand. It never imports your customers’ personal data: no names, no email addresses, no phone numbers, no shipping addresses. Orders are stored as anonymous financial facts. We run no advertising, set no tracking cookies, and never sell data.

BrandBake is operated by Hoffer Studios Inc., a Canadian federal corporation headquartered in Quebec (“we”). This policy covers brandbake.app and the BrandBake Shopify app.

• Your account. Your name, email address and a password we store only as a salted hash, plus the name of your workspace and the people you invite to it. Signing in sets a session cookie.
• Your store, from Shopify. Products, variants, collections, inventory levels, discounts and marketing events, and orders as anonymous financial records: dates, totals, discounts, refunds and line items. Each order carries an opaque customer identifier, and for that identifier we keep only order count, total spent, country, the tags you gave it in Shopify and whether it accepts marketing. We request read-only access and deliberately exclude customer names, emails, phone numbers and addresses. Order history informs campaign planning (bestsellers, seasonality); it is never used to target or contact an individual buyer.
• Your marketing, from your email platform. If you connect Klaviyo or Omnisend: campaign names, subjects, sender name and address, the names and sizes of the audiences they went to, their content and their results (opens, clicks, revenue), and your flows. BrandBake creates draft campaigns there; it never sends email itself.
• Your social accounts. If you connect them, the accounts you choose and the posts and media you approve for publishing.
• What you make in BrandBake. Your brand profile (colours, type, voice, imagery), campaign plans, generated emails, social posts and images, the files you upload, and an audit log of actions taken in your workspace.
• Public web content about your brand. When BrandBake researches a brand it reads publicly available pages and search results about it and stores a written report with its sources.
• If you request the free brand kit or analysis. The store address you enter, and for the analysis your name, email address and phone number. We read the site’s public pages and product feed to build the kit and the report, keep your details so we can show you the result and follow up about BrandBake, and never share or sell them. Email support@brandbake.app to have them deleted.

Personal data of your store’s customers: names, email addresses, phone numbers, addresses, payment details. Our Shopify sync asks only for the opaque customer identifier and strips orders down to financial facts before anything is stored. Because we hold no customer personal data, a customer data request from your store has a one-line answer: nothing is held beyond an anonymous record of order counts and spend.

BrandBake writes, plans and researches with Anthropic’s models and OpenAI’s models, and creates and edits images with OpenAI’s image models. Brand research uses Anthropic’s web search.

What gets sent: your brand profile, product details, aggregate sales and campaign signals, the content being worked on, and the images you choose to generate from or edit. What never gets sent: customer personal data, because we hold none. Both providers are used through their business APIs, which do not permit training their models on our requests; they may retain requests briefly under their API terms.

Vercel hosts the application and Supabase hosts the database, authentication and file storage, both in the United States. Anthropic and OpenAI process content generation as described above. Shopify, Klaviyo, Omnisend and SocialKit (which delivers social posts) are platforms you connect yourself; data flows to each only when you connect it and only to do the job you connected it for.

We share nothing with anyone else, and we never sell data.

Cookies are strictly functional: a session cookie to keep you signed in. No analytics cookies, no advertising cookies, no third-party trackers, and no visit counting. Our hosting provider keeps ordinary server logs (request addresses and browser details) briefly for security and troubleshooting.

Everything travels over TLS. The database is encrypted at rest, and API keys and access tokens are encrypted again with AES-256-GCM under versioned keys, never shown in the interface or written to logs. Every table is scoped to a workspace with row-level security, roles limit who in a workspace can act, consequential actions are audit-logged, and every webhook we receive is checked against its signature. If we confirm a breach affecting your data, we tell you within 72 hours.

• Uninstalling the Shopify app. When Shopify sends the uninstall and redaction notices we delete everything sourced from your store, including the stored access token, within 48 hours of the redaction notice.
• Disconnecting a platform revokes the stored credential immediately.
• Deleting your account. Email support@brandbake.app and we delete your workspace, account details, brand profile and generated content within 30 days, except records we must keep for legal or security reasons. Deleted data leaves any backups within a further 30 days.
• Free kit and analysis requests are deleted on request at the same address.

Wherever you are, we honour access, correction, deletion and portability requests for your data: email support@brandbake.app and we respond within 30 days. If you are in the EEA or the UK, this is how we meet the GDPR; our processing rests on performing our contract with you and on our legitimate interest in operating the service. If you are in California, we do not sell or share personal information as those terms are defined in the CCPA. In Canada, we handle personal information under PIPEDA and, as a company headquartered in Quebec, under Quebec’s private-sector privacy law (Law 25); the person in charge of the protection of personal information can be reached at support@brandbake.app.

For data about your store’s customers you are the controller and we are your processor: we act only on your instructions through the app, keep the anonymous records described above and nothing more, use the providers listed here as sub-processors, answer Shopify’s data-request and redaction webhooks automatically, and delete everything on uninstall. The data-processing terms in our Terms of Service set this out in full.

BrandBake is a business tool and is not directed at anyone under 16.

If this policy changes in a way that matters, we say so on this page and update the effective date. Questions: support@brandbake.app.