Privacy policy
Last updated: August 2026
1. Who processes your data
Data collected through breadup.com and the BreadUp service is processed by Bread France, Saint Martin, 04200 Noyers-sur-Jabron, France. Any questions: contact@breadup.com
2. Data we collect
- Account data: email address, name, role within the team.
- Business data: everything you enter into the app (recipes, ingredients, production sheets, orders, customers, starters).
- Payment data: handled by Stripe. BreadUp has no access to card numbers.
- Usage data: pages visited and actions taken, to improve the service.
- Technical data: IP address, browser, sign-in timestamps.
3. Why, and on what basis
- Providing the service and managing your account · performance of the contract.
- Handling payments and subscriptions · performance of the contract.
- Improving the product and understanding how it is used · legitimate interest.
- Meeting our accounting and legal obligations · legal obligation.
Your recipes and business data are never sold or used for advertising purposes.
4. Who has access
We work with providers bound by a GDPR-compliant processing agreement: Supabase (database, authentication, storage in the European Union), Vercel (website hosting), Stripe (payments and subscriptions), PostHog (usage analytics).
5. How long we keep it
- Account data: for the duration of the subscription, then 3 years (legal obligations).
- Business data: for the duration of the active subscription; deleted within 30 days of account closure, on request.
- Payment data: 10 years (accounting obligations).
- Usage data: 12 months.
6. Your rights
You have the right to access, correct, erase, restrict, object to and port your data. To exercise these rights: contact@breadup.com. You may also lodge a complaint with your local data protection authority.
7. Security
Traffic is encrypted, access is partitioned by account, and passwords are never stored in plain text.
8. Cookies
Cookies are detailed in our cookie policy.