Privacy Policy

Effective November 5, 2026

This policy explains what information Sky Bake collects, how it is used and shared, and the choices you have.Sky Bake is the order, production and invoicing system operated by Earth Sky Time Farm (“we”, “us”). It is used by our staff and by our wholesale customers through the customer ordering portal. Using Sky Bake is also subject to our End-User License Agreement and Terms of Use.

1. Information we collect

• Login details: name, email address and password for staff and customer portal users. Passwords are stored only in hashed form by our authentication provider; we cannot see them.
• Customer business details: business name, contact names, email addresses, phone numbers, delivery and billing addresses, delivery instructions, delivery route, prices and payment terms.
• Orders and accounts: orders and standing orders, deliveries, returns, invoices, credit notes and balances, and which user made a change.
• Technical information: a sign-in cookie that keeps you logged in, and standard server logs kept by our hosting providers (such as IP address, browser type and time of request) for security and troubleshooting. We do not use advertising or analytics cookies, and we do not track you across other websites.

2. QuickBooks Online data

Authorized bakery staff can connect the bakery's own QuickBooks Online company to Sky Bake through Intuit's secure sign-in (OAuth 2.0, Accounting scope). We never see or store a QuickBooks password. Once connected, Sky Bake:

• reads the company name; customer names; products and services (items); income accounts; and the balance remaining on the invoices and credit memos Sky Bake has sent;
• creates and updates customers (name, email, phone and billing address), products and services, invoices and credit memos; and voids invoices (or deletes credit memos) that are voided in Sky Bake.

We use QuickBooks data only to keep the bakery's own books in step with its orders and invoices, to linkSky Bake customers and products to their QuickBooks records, and to show what is still owed: to bakery staff, and to each customer for their own invoices only. We do not use QuickBooks data for any other purpose. We do not sell it, use it for advertising, combine it with data from other businesses, or use it to train artificial intelligence models.

The access tokens Intuit issues are stored in a database table that only Sky Bake's server can read; they are never sent to web browsers. Staff can disconnect at any time in Sky Bake (Setup → QuickBooks → Disconnect) or from within QuickBooks. When the connection is ended, Sky Bake revokes the tokens with Intuit and deletes them. The links betweenSky Bake records and QuickBooks records, and balances already copied, are kept as part of the bakery's business records unless you ask us to delete them.

3. How we use information

• to take, change and deliver orders, plan production, and print packing slips, invoices and reports;
• to issue invoices and credit notes and keep our accounts in QuickBooks Online;
• to give customers access to their own orders, invoices and balances in the portal;
• to contact you about your orders, deliveries, invoices and account;
• to keep the Service secure, prevent misuse, and fix problems;
• to meet legal, tax and accounting obligations.

4. Who can see your information

Bakery staff can see the information needed to run the bakery. Each customer portal user can see only their own business's orders, standing orders, invoices and balances; this is enforced by access rules in the database, not only in the app. We share information only with:

• Service providers who run parts of Sky Bake for us and may only use the information to do so: Supabase (database and sign-in) and Vercel (website hosting).
• Intuit (QuickBooks Online), when the bakery connects its QuickBooks company, as described above.
• Authorities or others when required by law, or to protect our rights, our customers or the public.
• A successor business if the bakery is sold or reorganized, under this policy.

We do not sell or rent personal information.

Printing of invoices and packing slips happens on the bakery's own computers and printers, on the bakery's network.

5. Security

Sky Bake is served only over encrypted connections (HTTPS). Data is stored by our database provider with encryption at rest and regular backups. Access is limited by role: customer logins cannot reach staff functions, and secret keys and QuickBooks tokens are kept on the server only. No system is perfectly secure; if we learn of a breach affecting your information, we will tell you as required by law.

6. Where information is stored

Our service providers store and process information in the United States and may use other locations where they operate.

7. How long we keep information

• Invoices, credit notes and other accounting records: as long as tax and accounting law requires (generally at least seven years).
• Orders and customer details: while we do business with you, and afterwards as long as needed for our records.
• Portal logins: until you or your business ask us to remove them, or the business relationship ends.
• QuickBooks tokens: deleted as soon as the connection is ended.

8. Your choices and rights

You can ask us to show you the personal information we hold about you, correct it, or delete it (except where we must keep it, for example in invoices). Contact us using the details below. Customers can also ask us to add or remove portal logins for their staff.

9. Children

Sky Bake is a business service and is not meant for anyone under 18. We do not knowingly collect information from children.

10. Changes to this policy

If we change this policy, we will update the effective date above, and for significant changes we will let users know in Sky Bake or by email.

11. Contact

Questions or requests about your information: