We believe in transparency.
Here's exactly how we handle your data.
Overview
BakedIn ("we," "our," or "us") provides AI-powered product recommendation services to licensed cannabis dispensaries. This Privacy Policy explains how we collect, use, and protect information through our services.
Key Point: We are a B2B service. We process data on behalf of dispensaries, not directly from consumers.
Data We Collect
From Dispensary Partners
- Business contact information (name, email, phone)
- Account credentials
- Product inventory data
- Usage analytics and preferences
From Website Visitors
- Device and browser information
- IP address (anonymized)
- Pages viewed and interaction data
What We Don't Collect
- Consumer personal identification
- Purchase history tied to individuals
- Medical information
- Payment card details
How We Use Data
- Providing and improving our recommendation engine
- Communicating with dispensary partners
- Analyzing aggregate usage patterns
- Ensuring security and preventing fraud
- Complying with legal obligations
Data Sharing
We do not sell personal information. We may share data with:
- Service Providers: Cloud hosting (AWS), analytics tools—bound by confidentiality agreements
- Legal Requirements: When required by law or to protect rights
- Business Transfers: In connection with merger or acquisition (with notice)
Data Retention
| Data Type | Retention Period |
|---|---|
| Account Data | Duration of relationship + 2 years |
| Analytics Data | 24 months (aggregated) |
| Server Logs | 90 days |
| Support Records | 3 years |
Your Rights
Depending on your location, you may have rights to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Export your data
- Opt out of certain processing
To exercise these rights, contact us at privacy@bakedin.co.
Security
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Regular security assessments
- Access controls and authentication
- Incident response procedures
Children's Privacy
Our services are intended for adults 21 and older. We do not knowingly collect data from minors. If we learn we have collected information from a minor, we will delete it promptly.
Policy Changes
We may update this policy periodically. Material changes will be communicated via email to active partners and posted on our website with an updated effective date.
Contact Us
Questions about privacy?
We're here to help with any concerns.