FlourDesk
Privacy Policy

Privacy Policy

How FlourDesk handles your information, and your customers'.

Last updated:
August 24, 2026
Effective date:
August 24, 2026
Document version:
2026-08

This Privacy Policy explains how P5 Creative LLC, doing business as FlourDesk ("FlourDesk," "we," "us," or "our"), collects, uses, and shares information when you use the FlourDesk website and platform (the "Service").

There are two kinds of people in the FlourDesk world, and we handle their information differently:

  • Bakers are our subscribers. For a Baker's own account information, FlourDesk is the business responsible for it, and this policy describes how we handle it.
  • A Baker's Customers interact with a Baker's storefront. When a Customer places an order, the Baker decides what to collect and why. For that information the Baker is responsible, and FlourDesk only processes it on the Baker's behalf to run the shop. See Section 6.

1. Information We Collect

Information a Baker gives us:

  • Account and contact information, such as your name, email address, and password.
  • Business information you enter, such as your shop name, business contact details, pickup address, hours, time zone, license information, and the payment options you choose to display.
  • Content you upload, such as product names, descriptions, prices, allergen information, and images.
  • Communications you send us, such as support requests and messages through our contact form.

Payment information (Baker subscriptions): When you subscribe, our third-party subscription payment processor (Stripe) collects and processes your payment details directly. FlourDesk never receives or stores your full card number, bank account, or other payment credentials. We receive limited billing information from the processor, such as a customer identifier, your subscription status, and the last four digits and card brand needed to show you which card is on file.

Information we collect automatically: Basic technical and usage information such as your IP address, browser type, device information, pages viewed, and actions taken in the Service, collected through standard server logs and similar technology to keep the Service secure and working.

A Baker's Customers' information: When a Customer places an order through a Baker's shop, we process information such as the Customer's name, contact details, and order and pickup details, on that Baker's behalf. Storefront visitors who browse a shop without ordering are also covered by the automatic-collection described above. See Section 6.

2. How We Use Information

We use Baker and Service information to:

  • Provide, operate, and maintain the Service, including generating your storefront and sending transactional emails;
  • Process your subscription and manage billing;
  • Provide support and respond to your requests;
  • Keep the Service secure, prevent abuse, and troubleshoot problems;
  • Understand and improve how the Service is used;
  • Send you Service-related messages (for example billing notices, security notices, and important updates);
  • Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

3. How We Share Information

We share information only as needed to run the Service:

  • Service providers. We use trusted third parties to provide parts of the Service. They may access information only to perform work for us and are bound to protect it. Our current providers are:
    • Cloudflare — website delivery, security, and image hosting and delivery.
    • Amazon Web Services (SES) — sending transactional and billing email.
    • Kamatera — hosting the application and database.

    Separately, Stripe processes a Baker's own subscription payments to FlourDesk. Stripe is not involved in payments between a Baker and that Baker's Customers, which happen through the Baker's own payment methods and off the FlourDesk platform.

    We keep this list current. If we add or change a provider that handles personal information, we update this policy.

  • Legal and safety. We may disclose information if required by law, to respond to lawful requests, to protect the rights, property, or safety of FlourDesk, our users, or others, or to enforce our Terms.
  • Business transfers. If FlourDesk is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor this policy or we will notify you of any material change.

We do not share a Baker's information with other Bakers.

4. Public Information

Some information you enter is public by design because it appears on your storefront: your shop name, tagline and story, product listings, prices, allergen information, images, business contact details you choose to publish, and any license information you enter (displayed as entered; we do not verify credentials). A storefront is a public web page, so its contents can be viewed by anyone with the link and may be indexed or cached by search engines outside our control. Do not put anything in those fields that you do not want shown publicly. Your account password and other non-public account settings are never displayed. You control your pickup address visibility through your shop settings.

5. Cookies and Similar Technology

We use cookies and similar technology that are necessary to run the Service, such as keeping you logged in and keeping your session secure. We use limited analytics to understand and improve how the Service is used. We do not use third-party advertising cookies. If we add analytics or marketing tools later, we will update this policy and add any consent mechanism the law requires.

6. A Baker's Customers' Information (Baker Is Responsible)

When a Customer orders through a Baker's shop, the Baker decides what information to collect and why. The Baker is responsible for that information, and FlourDesk processes it only on the Baker's behalf and on the Baker's instructions, to provide the ordering, storefront, and email features. We do not use a Baker's Customer information for our own marketing, we do not market FlourDesk to a Baker's Customers, and we do not build profiles of Customers across shops. We may process this information as needed to operate, secure, support, back up, and troubleshoot the Service, and to meet our legal obligations.

Payments between a Customer and a Baker happen through the Baker's own payment methods, which may take the Customer off the FlourDesk platform to a third-party payment service. FlourDesk does not process those payments and does not receive or store Customer card, bank, or wallet credentials.

Bakers are responsible for handling their Customers' information lawfully, including giving their Customers any notice or choices the law requires. If you are a Customer of a Baker and have a question about your information, please contact that Baker directly. If you contact us, we may refer you to the Baker or pass your request to them.

7. Data Retention and Deletion

We keep a Baker's account and shop information for as long as the account is open, so the shop keeps working. Different categories are handled differently when an account closes:

Your shop and Customer data. When you close your account, your shop goes offline immediately and enters a 30-day recovery period. During that period you can restore the account. If you do not restore it, we permanently delete the shop and its Customer and order data at the end of the 30 days. This includes Customer names and contact details, orders, products, your shop settings, and your uploaded images.

Backups. We keep offsite backups of the platform on a rolling schedule: daily copies are retained for 14 days, and weekly copies for 8 weeks. A copy of deleted data may therefore remain in a backup for up to 8 weeks after the deletion, after which it is removed automatically as that backup ages out of the schedule.

Our billing and tax records. We keep the records P5 Creative LLC needs for accounting, tax, and dispute purposes, such as your subscription and payment history, for as long as the law requires or as needed to resolve disputes and enforce our agreements. These are our own business records about your subscription to FlourDesk; they are not part of your shop or your Customers' data.

Legal holds. We may keep information longer where the law requires it or where it is needed to resolve a dispute.

If you want a copy of your sales information before closing, you can download a sales report as a CSV from within the Service (see Section 9).

8. Security

We take reasonable measures to protect information, including access controls, encryption of data in transit, and technical measures designed so that one Baker's shop data is not accessible to another Baker. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials safe. If we become aware of a security incident affecting personal information we hold, we will notify affected Bakers as required by law, so that a Baker can in turn notify their Customers where the Baker's own obligations require it.

9. Your Choices and Rights

You can review and update much of your account and business information directly in the Service. You can cancel your subscription at any time. You can download a sales report as a CSV from within the Service; this report covers your sales and order summary information and is not a full export of your account, Customer list, settings, or branding. You can opt out of non-essential emails using the unsubscribe link where offered; we will still send necessary Service and billing messages.

Depending on where you live, you may have rights over your personal information, such as the right to access, correct, delete, or receive a copy of it, and the right not to be treated differently for exercising those rights. To make a request, contact us at hello@flourdesk.com. We will verify your request and respond as required by applicable law.

For a Baker's Customers: because the Baker is responsible for their information, we will generally direct a Customer's privacy request to the relevant Baker and assist the Baker in responding.

10. State Privacy Rights

Depending on where our Bakers and their Customers are located, specific state privacy laws (for example the California CCPA/CPRA, and California's CalOPPA disclosure requirements) may apply and require additional disclosures. FlourDesk does not sell personal information or share it for cross-context behavioral advertising as those terms are defined under those laws.

11. Children's Privacy

The Service is for adults operating a baking business and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will address it. (A Baker's contractual obligation not to use the Service to collect information from children is stated in our Terms of Service.)

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will take reasonable steps to notify you, such as by email or an in-app notice. The "Last updated" date shows when the policy was last revised.

13. Contact Us

Questions or requests about this Privacy Policy or your information:

P5 Creative LLC (dba FlourDesk)
hello@flourdesk.com
Based in Arizona, USA

Questions about this document

Ask through the contact page, or email hello@flourdesk.com.

See also our Terms of Service.