Privacy Policy

Last updated: July 2026

Here is everything we hold about you, why we hold it, and who else touches it. It is a longer list than most bakeries would print, and we would rather you read the real one.

1. What we collect, and why

When you make an account:

Your name, so we know who the cake is for.
Your email address, which is how you sign in and where your receipt, your delivery updates and any reminders you asked for are sent.
Your WhatsApp number, so we can reach you on the delivery day. We ask for it when you make the account, not at checkout.
Your address and pincode, which fill in your delivery details and let us check we can reach you.
Your date of birth. We use it to wish you a happy birthday, and nothing else. It is asked for at sign-up.
Your gender, which is optional. Leave it blank if you would rather not say.
Your password, stored scrambled (hashed), never as text anyone could read.

When you order:

The delivery address you type or drop a pin on, including the map coordinates of that pin. We use them to check the pin and the pincode agree, so a cake does not go to the wrong end of the city.
Your delivery day and time window, to plan the baking and the driving.
Anything you write in the note box, including allergies. Allergy notes are read in the kitchen before we bake.
If you are sending a cake or a gift card to someone else, their name, their email address and your message to them, so we can send it.

When you sign in with Google:

Google tells us your name and your email address. We keep those two and nothing else about your Google account.

Cookies, and what each one is for:

A sign-in cookie, so you stay signed in for a week rather than typing a code on every page.
A trusted-device cookie, kept for 30 days, so this device is not asked for an emailed code every time.
A short-lived sign-in-in-progress cookie while you are part-way through signing in.

There is no analytics cookie, no advertising cookie and no third-party tracker on this site.

About payment. Your card number and your bank credentials go straight to Razorpay and never reach us. What we do keep is the record Razorpay sends back when a payment succeeds, which names the method you used and can include a masked reference such as the last four digits of a card or the UPI ID it came from. We keep it because it is the proof a payment happened, and it is what a refund is matched against.

2. Who processes it for us

Supabase hosts our database and sends the one-time sign-in codes.
Razorpay processes payments (an RBI-regulated payment gateway).
Resend sends our emails (confirmations, reminders, and the occasional gentle nudge).
Google Maps powers the address box. What you type there, and your IP address, go to Google so it can suggest real addresses and turn your pin into coordinates.
Google again, separately, if you use “Continue with Google” to sign in.
Cloudflare runs the check on our forms that keeps bots out, which sees your IP address.
Vercel hosts the site itself, so every page you load passes through it.

Each processor receives only what it needs to do its job. We don’t sell your data, and we don’t share it with advertisers.

3. How long we keep it

Order records, kept as long as required for accounting and legal obligations.
Waitlist details, kept until you ask us to remove you. Every reminder we send has an unsubscribe link at the bottom.
Your account details, kept while your account exists, so your past orders and any gift cards stay yours.

4. Your choices

You can stop the reminders whenever you like. Use the unsubscribe link at the bottom of any one of them and you are off the list straight away. You do not need to sign in or wait for a reply. Order emails are separate and keep coming: your receipt, your delivery updates and your sign-in codes are part of the order, not news from the kitchen.

You can also ask us at any time to see what we hold about you, correct it, or delete it (except records we’re legally required to keep). Just write to us.

5. Contact

For anything privacy-related, email anirudh@sihistudio.in. We’re a small studio. The person who bakes your cake is not far from the person who reads your email.