Privacy Policy

1. Two Roles: Data Processor for Storefronts, Data Controller for Platform Accounts

Storefront Buyers (*.mypiper.shop): When you place an order or message a baker on a baker's storefront on mypiper.shop, the baker is the seller of record and the controller of your order information. Find Piper acts as a service provider / data processor on behalf of that baker to host the storefront, transmit your order and messages, and facilitate payment through the baker's Stripe account. Your buyer identity on a storefront is scoped to that specific baker and is not shared with other bakers.

Bakers & Platform Visitors (findpiper.com and app.findpiper.com): When you join the waitlist, create a baker account, configure your storefront, or subscribe to the Pro Plan, Find Piper is the data controller for your account and business information.

2. Information Collected

From Storefront Buyers: Name, email address, phone number, pickup/delivery/shipping address, order items, requested dates, allergy or dietary notes, reference photos you upload, messages with the baker, and reviews you submit. Payment card details are entered directly into Stripe and are never stored on Find Piper's servers.

From Bakers: Name, email, phone, username, profile photo, bakery name, address, operating hours, kitchen/permit type, service area, cancellation policy, product catalog, and Stripe connected-account identifiers.

Automatic & Analytics Data: IP address, browser type, device information, and page interaction data collected via Google Analytics.

3. How Information Is Used & Shared

We use the information collected to operate baker storefronts, process orders and invoices through Stripe, send transactional emails (via Postmark from orders@mail.mypiper.shop for storefront orders and from mail.findpiper.com for baker accounts), store uploaded images (via Cloudflare R2), and maintain platform security.

We share data only with: (a) the specific baker you ordered from, (b) Stripe for payment processing and identity verification, (c) Postmark for transactional email delivery, (d) Google (Google OAuth for baker sign-in, Google Places for address autocomplete, and Google Analytics — see https://policies.google.com/technologies/partner-sites), and (e) infrastructure providers (Vercel and Fly.io). We do not sell personal information.

4. Local Storage, Cookies, and Do Not Track

We use origin-isolated browser storage (localStorage and IndexedDB) to keep bakers signed in on app.findpiper.com and to keep a buyer's current basket and per-baker order token on that baker's *.mypiper.shop subdomain. Storefront tokens are never shared across different bakers' subdomains.

Our site does not alter its behavior in response to browser 'Do Not Track' signals.

5. Data Retention, Security, and Children

Inactive sign-in sessions are pruned automatically after 30–90 days. Order, invoice, and tax records are retained as needed for bakers and Find Piper to meet accounting, tax, and dispute-resolution obligations.

Our services are intended for adults aged 18 and older, and we do not knowingly collect personal information from children under 13.

6. Reviewing Your Data & Contact

Bakers can review and update their profile and storefront details at any time in Account Settings. Storefront buyers can view their orders with a baker via the 'Your orders' link on that baker's storefront or contact the baker directly.

For privacy questions or data requests, contact hello@findpiper.com (or privacy@findpiper.com).