Privacy Policy for BakeLayer

At BakeLayer, we are committed to protecting the proprietary designs and personal information of our business users and their customers.

1. Information We Collect

We collect data through three primary channels:

• Direct Submission: Account registration (name, email), billing information, and the source images you upload for mockup generation.
• Automated Collection: Technical data such as IP address, browser type, and how you navigate the BakeLayer app.
• Third-Party Data: Information from our payment processors regarding your subscription status and transaction history.

2. Subscription Payments & Financial Data

We use [Stripe/PayPal/Other] to process payments for BakeLayer subscriptions.

• Payment Security: We do not store your full credit card numbers or CVVs on our servers. All payment data is processed by our PCI-compliant third-party partner.
• Information Shared: To facilitate your subscription, we share your name, email, and billing address with the processor. They provide us with a "token" and transaction status (e.g., "Paid" or "Overdue").

3. Analytics & Tracking

To improve the BakeLayer experience and the efficiency of our AI generation, we collect usage analytics via [Google Analytics].

• Purpose: We track which mockup combinations are most popular and monitor for system errors or latency in the AI generation process.
• Cookies: We use cookies to keep you logged in and to remember your project preferences. You can manage cookie settings in your browser at any time.

4. AI Processing (Google Gemini)

BakeLayer uses the Google Gemini API to generate mockups.

• Data Handling: Your uploaded images and prompts are sent to Gemini for processing only.
• No Training: As a paid API user, your proprietary business assets and your customers’ interactions are not used to train Google’s foundation AI models.

5. Customization Pages (End-Customer Data)

When you share a public customization link with your customers:

• End-User Interaction: We track basic interaction data (clicks, selections) to render the customized image.
• No PII Collection: By default, BakeLayer does not collect names or emails from your end-customers unless you explicitly enable a "lead capture" feature.
• Visibility: You are responsible for the content you make public on these pages.

6. Data Retention & Deletion

Active Subscriptions: We retain your data as long as your account is active to provide you access to your historical mockups.

Cancellation: If you cancel your subscription, we retain billing records for 7 years as required by tax law, but your image assets can be deleted immediately upon request.

7. Contact Us

For questions or to exercise your data rights (Access, Correction, or Deletion), contact:

Email: privacy@bakelayer.com