Privacy Policy

• Account information: Name, email address, and password when you create an account.
• Baker profile information: Business name, city, state, bio, profile photo, and Minnesota MDA registration number (if applicable).
• Order information: Pickup details, order notes, and purchase history.
• Payment information: Payment details are collected and processed directly by Stripe. Ovendrop does not receive or store your full credit card number, CVV, or bank account details.
• Baker financial information: Identity verification and banking information for payouts is collected and processed directly by Stripe Connect. Ovendrop does not store this data.
• Content you create: Product listings, product images, profile photos, reviews, ratings, and messages sent through the Platform.
• Communications: Messages you send to other users through in-platform messaging, and any emails or support requests you send to us.
• Waitlist information: Email address, state, and interest type (buyer, seller, or both) if you join our waitlist.

• IP address: Collected from standard request headers for abuse prevention, rate limiting, and security logging. Not used to identify you across sites or shared with third-party trackers.
• Device and browser information: Browser type, operating system, and device type, collected through standard HTTP headers.
• Usage data: Pages visited, features used, and timestamps of activity.

We do not knowingly collect personal information from children under 13. We do not collect biometric data, social security numbers, or government IDs (Stripe may collect identity verification documents directly as part of Baker onboarding — see Stripe's privacy policy for details).

• Baker information visible to Buyers: Business name, city, state, bio, profile photo, product listings, and review ratings are displayed publicly on Baker storefronts.
• Buyer information visible to Bakers: When a Buyer places an order, the Baker receives the Buyer's name and any order notes.
• Reviews: Your first name and review content (rating and comment) are displayed publicly on the Platform.

We share data with the following service providers who process information on our behalf:

Ovendrop does not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not use your data for targeted advertising.

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of Ovendrop, our users, or the public.

When you opt in to SMS, we collect and store: your mobile phone number, the timestamp of your initial opt-in (for carrier- compliance recordkeeping), and your current consent status. We do not collect SMS content from outside Ovendrop or import phone numbers from third parties.

SMS is used exclusively for transactional notifications related to your orders, including: order confirmations, pickup notifications, and order status updates. We do not send marketing, promotional, or advertising messages by SMS.

Your mobile phone number and consent record are shared only with our SMS delivery provider for the purpose of sending the messages you have consented to receive. We do not sell, rent, lease, share, or otherwise disclose your mobile phone number or SMS opt-in information to third parties or affiliates for their own marketing or promotional purposes. This restriction applies even if you later opt out.

Message frequency varies based on your account activity. Message and data rates may apply depending on your mobile carrier and plan. Mobile carriers are not liable for delayed or undelivered messages.

You can opt out of SMS at any time by replying STOP to any Ovendrop text message. Reply HELP for assistance. You may also revoke consent in your account settings or by emailing [email protected]. Opting out of SMS does not affect transactional email notifications.

If you are a Minnesota resident, you have the right to: access your data, correct inaccuracies, delete your data, obtain a portable copy, and opt out of data sales or targeted advertising. Ovendrop does not sell personal data or use it for targeted advertising. To exercise your rights, contact [email protected].

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. Ovendrop does not sell personal information. For requests, contact [email protected].

Categories of personal information collected in the past 12 months: Identifiers (name, email, IP address), commercial information (order history), internet activity (usage data), and geolocation data (state-level, derived from IP).