Privacy policy

Public community designs

The free community generator requires your explicit agreement to public sharing. We record that agreement and review designs before publishing a watermarked preview. Your email and identity are not shown. Delete the artwork from your AI library to withdraw it from the gallery. Existing images, uploaded photographs and Baker generations in AI Studio are never automatically published.

Account information

CakeyTops uses Supabase for account authentication. If you create an account or sign in, the service processes the basic information needed to manage that session and recognise your account.

Account records may also be used to manage access to paid or account-based features, including Baker membership status, monthly AI usage, generation history, admin test access, and support checks.

Payments through Stripe

Baker membership checkout and billing management are provided by Stripe. Stripe processes payment-card and billing details under its own privacy terms; CakeyTops does not store your full card number. We receive identifiers and subscription events needed to activate access, show renewal or cancellation state, and provide billing support.

Uploaded images

The current editor workflow is primarily browser-based. Image manipulation and background removal are designed to run client-side rather than being exposed as public uploaded content on the site. Print downloads upload source artwork to private storage for server rendering. Download links expire after 60 seconds. Source images are removed after rendering; abandoned uploads and print files are scheduled for daily cleanup after three hours. Usage records are retained for up to 30 days. Saved projects and AI library artwork remain private until you delete them.

Do not upload images that contain private, confidential, sensitive, unlawful, non-consensual, or third-party material unless you have the right to process and use that material. You are responsible for checking that any uploaded image is appropriate for the feature you are using.

AI image generation data

When you use AI image generation, your prompt, selected settings, account identifier, and technical request information may be processed on CakeyTops servers and sent to third-party AI providers such as Cloudflare Workers AI, Black Forest Labs, or Together AI so they can generate the requested image.

Generated image results may be returned to CakeyTops servers before being shown in the editor. Provider delivery links may be temporary, and CakeyTops may convert the generated image into a browser-usable format for immediate editing. You should not include sensitive personal data, confidential business information, payment details, private addresses, or material you do not have permission to process in AI prompts.

AI providers may apply their own safety checks, abuse monitoring, logging, retention, and processing rules. Their handling of submitted prompts and generated outputs is governed by their own terms and privacy policies as well as by CakeyTops processing choices.

Baker membership and generation logs

To operate paid AI features fairly, CakeyTops may store records such as your user ID, email address, Stripe customer and subscription identifiers, membership status, billing period, monthly usage, submitted prompt, enhanced prompt, provider, model, generation status, error messages, and creation time.

These records help us show allowances, prevent abuse, return failed actions, provide support, diagnose provider errors, and understand usage costs. They are not intended to create a public gallery.

Your customers’ details in the business suite

The business suite stores information about your customers, not about you. If you record an order, you may enter a customer’s name, email address, phone number, delivery address and notes, along with order history, invoices, event dates, amounts and any files you attach. Notes are a free-text field, so what ends up there is entirely your choice — but it is the field most people use for allergies and dietary requirements, which is health information about another person.

For these records you are the data controller and CakeyTops is your processor. We store and return them so the suite works, and we do not use them for anything else: no marketing, no profiling, no training of AI models, and no sharing with other members. Because you are the controller, responsibility for telling your customers what you hold, having a lawful basis for holding it, and answering their requests rests with you.

These records are readable only by the CakeyTops servers acting for your signed-in account. They are not reachable from a browser, not exposed through any public endpoint, and not visible to other members. Deleting a customer removes their record; an invoice you have already issued keeps the name and address that were on it at the time, because invoices are accounting documents and UK record-keeping rules expect them to stay intact and unbroken. Closing your account removes your business data along with it.

If you want your data exported or erased, or you need a written processing agreement for your own records, contact us and we will provide it.

Free template downloads

When you request the free edible image templates we store your email address, the date, and whether you ticked the box to hear from us. The box is unticked unless you tick it, and the templates are yours either way.

If you ticked it, we keep your address and the exact wording you agreed to so we can send new templates and the occasional offer; every email will let you unsubscribe, or you can ask us to remove you at any time through the contact page. If you did not tick it, we never email you: your address is kept only so your download link keeps working, and is deleted 30 days after your last download.

Local browser data

Some site preferences and working settings may be stored locally in your browser to improve usability, for example interface settings or currency choices. This helps the tools behave consistently when you return to the site.

Analytics and operational data

CakeyTops may collect basic analytics and operational records such as page views, account activity, feature usage, request status, and error information. This helps understand which tools are useful, maintain reliability, manage costs, and protect the service from misuse.

Future updates

If marketing pixels, materially different payment flows, public galleries, or new AI providers are added, this policy will be updated so visitors can understand what information is collected, where it is processed, and how it is used.