Privacy Policy

Last updated: July 2026

We collect as little as we can get away with — just enough to bake your cake, bring it to your door, and let you know when the next batch opens.

1. What we collect, and why

• Phone number — to verify it’s really you when you join the queue, and to reach you about your delivery.
• Name — so we know who the cake is for.
• Email (optional) — for order confirmations and, if you asked for them, drop reminders.
• Pincode and delivery day — to check we can reach you and to plan the day’s single delivery.

We never see or store your card, UPI, or bank details — payment happens entirely on Razorpay’s secure systems.

2. Who processes it for us

• Supabase — hosts our database and handles phone verification.
• Razorpay — processes payments (an RBI-regulated payment gateway).
• Resend — sends our emails (confirmations, reminders, and the occasional gentle nudge).

Each processor receives only what it needs to do its job. We don’t sell your data, and we don’t share it with advertisers.

3. How long we keep it

• Order records — kept as long as required for accounting and legal obligations.
• Waitlist details — kept until you ask us to remove you (every reminder tells you how).
• Queue entries — kept only as operational records of past drops.

4. Your choices

You can ask us at any time to see what we hold about you, correct it, or delete it (except records we’re legally required to keep). Just write to us.

5. Contact

For anything privacy-related, email hello@sihistudio.in. We’re a small studio — the person who bakes your cake is not far from the person who reads your email.