Privacy Notice

Last updated: 13 October 2026

Who we are

CakeQuote AI is run by Shivani Shah, trading as CakeQuote AI. We are the "data controller" for the personal data described below — we decide how and why it is processed. You can contact us at hello.cakequoteai@outlook.com.

What data we collect

• Account details — your email address and login credentials.
• Business content you enter — quotes, orders, recipes, costs, earnings and notes you store in the app.
• Support messages — what you send us when you get in touch.
• Usage and device data — how you use the app, plus device identifiers and IP address, for security and to keep the service working.

Payment card details are collected and processed by our payment provider Paddle, not by us, so they are outside this notice's scope.

Why we use your data

• To provide the service (creating your account, saving your data, showing your dashboard and accounts) — legal basis: performing our contract with you.
• AI features (drafting customer replies and profit explanations) — we send the relevant content to our AI provider to generate them; legal basis: performing our contract with you.
• Security and fraud prevention — legal basis: our legitimate interests.
• Product improvement — legal basis: our legitimate interests.
• Customer support — legal basis: performing our contract with you.
• Billing and tax — handled through Paddle as Merchant of Record; legal basis: contract and legal obligation.
• Marketing (if you opt in) — legal basis: consent, which you can withdraw at any time.

Who we share data with

• Service providers (subprocessors) — hosting and database (Lovable Cloud / Supabase), AI providers, and support tooling, under contracts that limit what they can do with your data.
• Paddle.com — our Merchant of Record, for selling the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal or accounting, where needed.
• Authorities — where the law requires it.

Where data is stored and sent

Your data is stored on cloud infrastructure in the EU/UK. Some providers (including our AI provider) may process data outside the UK/EEA; when that happens we rely on safeguards such as the UK International Data Transfer Agreement/addendum or adequacy decisions.

How long we keep data

We keep your account and business content while your account is active. When you delete your account, or after your subscription ends, we delete or anonymise the data when it's no longer needed (for example after any retention period required for accounting records).

Your rights

Under UK GDPR you have the right to access your data, correct it, erase it, restrict or object to processing, port it to another service, and withdraw consent where we rely on it. To exercise any right, email hello.cakequoteai@outlook.com — we respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and owner-only access to your business data — only you can see your quotes, orders, recipes and accounts.

Cookies

We use only essential cookies (needed to keep you signed in and the app working) and basic analytics to understand usage. You can manage or clear cookies in your browser settings; blocking essential cookies will affect signing in.