Privacy Policy

1. Introduction

Cakesify Systems Private Limited (“Cakesify”, “we”, “our”, or “us”) provides a technology platform that enables independent food creators to build, manage, and grow their food businesses.

Cakesify operates both as a marketplace platform that facilitates discovery between buyers and sellers, and as an infrastructure provider that offers tools for sellers to run independent businesses. This Privacy Policy explains how we collect, use, process, and protect personal data when you use the platform.

2. Scope

This policy applies to all users of Cakesify, including sellers, buyers, and visitors to the platform.

3. Data We Collect

We collect information that you provide directly, information generated through your use of the platform, and content uploaded by users.

For Sellers

Personal and business information including name, phone number, email address, store details, product information, bank or payout details, and regulatory information such as FSSAI or equivalent licenses.

For Buyers

Name, contact details, delivery address, and order-related data.

Technical & Content Data

IP address, device and browser details, usage activity, and approximate location data. We also process content data including images, product descriptions, and AI-enhanced outputs generated through the platform.

4. Purpose of Processing

We use this data to operate and improve the platform. This includes enabling store creation, managing orders, providing customer support, improving product listings through AI tools, enabling seller growth features and integrations, and ensuring platform security and fraud prevention.

5. Cakesify’s Role (Controller and Processor)

Cakesify operates in different roles depending on the context.

Marketplace Interactions

Cakesify acts as a data controller for platform operations such as order workflows, while sellers act as independent data controllers for fulfillment and direct customer interaction.

Seller Infrastructure Tools

When sellers use store management, AI features, and distribution tools, Cakesify acts as a data processor on behalf of the seller. Sellers remain the primary data controllers for their business and customer data.

Platform Analytics

Cakesify acts as a data controller for aggregated and anonymized analytics used for platform improvement.

6. Data Sharing

We share data only as required to operate the platform.

Buyer information is shared with sellers for order fulfillment, delivery coordination, and order-related communication.

We may share data with service providers such as payment gateways, hosting providers, analytics tools, and communication platforms that process data on our behalf under appropriate safeguards.

If sellers enable integrations, data may be shared with third-party platforms such as WhatsApp (Meta Platforms), Instagram, Facebook, and Google Shopping. These platforms operate as independent data controllers under their own privacy policies.

When WhatsApp Business APIs are used, buyer contact details and order-related information may be transmitted through Meta’s systems. Cakesify does not control how Meta processes such data.

7. AI Processing and Consent

Cakesify uses AI tools to enhance seller content, including improving images, generating product descriptions, and structuring product data.

Sellers are required to provide explicit and informed consent before using AI-powered features. These features are optional and not required to use the core platform.

AI processing is limited to content provided by users. Personal data is not used to train AI models in a manner that identifies individuals.

8. Data Ownership and AI-Generated Content

Sellers retain ownership of all original content they upload, including product images, descriptions, and business data, as well as their customer relationships.

Sellers retain full usage rights over AI-enhanced outputs generated through the platform.

Cakesify may use AI-enhanced content in an aggregated and anonymized manner to improve platform functionality and AI systems. Sellers provide separate and explicit consent for this usage during onboarding, distinct from the feature-level AI consent described in Section 7. This usage is disclosed at the point of consent and is not limited to this policy alone.

9. Seller Responsibilities

Sellers are responsible for using customer data only for legitimate business purposes such as order fulfillment and communication. Sellers must protect customer data and must not misuse, resell, or retain it beyond legitimate needs.

As independent data controllers, sellers may be required to comply with applicable data protection laws and may need to maintain their own privacy policies.

If a seller deactivates or deletes their store, Cakesify will retain order-related data for legal and compliance purposes. Sellers must not retain or continue using customer data beyond legitimate purposes. Buyers may contact Cakesify for order history and support.

10. Data Retention

We retain data based on purpose and applicable legal requirements.

Orders & Transactions

Up to 7 years

Tax and regulatory compliance

Seller Accounts

Active + 2 years after inactivity

Account lifecycle

Buyer Contact Data

Up to 90 days post-order

Unless required for support or legal reasons

Analytics Data

Aggregated & anonymized

Retained for platform improvement

11. Cookies and Tracking

We use cookies and similar technologies to improve user experience, analyze usage, and support platform operations. Users can manage cookie preferences through browser settings.

12. Cross-Border Data Transfers

Cakesify may use service providers located outside India, including cloud infrastructure, analytics tools, and AI services.

We implement contractual safeguards with such providers and ensure compliance with applicable laws, including the Digital Personal Data Protection Act, 2023. Pending notification of approved jurisdictions under the DPDP Act, cross-border data transfers are conducted using compliant safeguards.

13. Children’s Data

Cakesify does not knowingly collect personal data from individuals under eighteen years of age. If such data is identified, we will take appropriate steps to delete it.

14. Payments

Cakesify does not store credit or debit card information. Payments are processed through secure third-party payment gateways.

15. Legal Compliance

We comply with applicable laws including the Information Technology Act, 2000, the SPDI Rules, and the Digital Personal Data Protection Act, 2023. This policy may be updated as regulatory requirements evolve.

16. Your Rights

Under applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:


  • Access information about your personal data and how it is processed

  • Request correction or updating of inaccurate data

  • Request erasure of personal data, subject to legal obligations

  • Seek grievance redressal

  • Nominate another individual to exercise your rights in case of incapacity or death

17. Grievance Officer

Name
Vinitha Varghese
Email
grievances@cakesify.com
Address

Cakesify Systems Private Limited
C/O Ouseph M.M, Maravattickal House
Meenangadi, Wayanad, Sulthan Bathery
Kerala, India – 673591
Response
Within 30 days of receiving a complaint

18. General Contact

For general queries, contact us at:
support@cakesify.com

19. Updates to This Policy

We may update this policy from time to time. Changes will be reflected on this page along with an updated effective date.