Privacy

OvenBoard, operated by Nupik Wenpach LLC, runs shops for independent makers of food and other goods. That means we hold two kinds of information: the account a maker opens with us, and the customer records a maker keeps inside their shop. This page says what we store, why, and what we never do with it.

What we store about makers

• Your name, email address and phone number, from signup.
• A hash of your password. We cannot read the password itself.
• Timestamps of what you agreed to: account email at signup, and product news only if you ticked that box. You can leave product news any time.
• Your shop's settings, products, drops and billing state.

What a shop stores about its buyers

• Name and mobile number, an email address if one was given, and a trading name when the buyer is a business.
• The orders placed, and the pickup slot booked for each.
• Store credit, kept as a ledger of entries rather than a balance.
• Whether the record came from another platform's export rather than from somebody using this site.
• Text message consent as three facts, not one: whether it is on, the moment it was given, and how it was given. Drop alerts go only to buyers whose consent carries a moment, so a record imported from elsewhere is never texted on the strength of having been imported.
• A record of each alert sent, so the same person is never told twice about one drop and can be answered when they ask why a message arrived.

Mobile information

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Mobile numbers and text message consent are never sold, rented, or passed to anyone for their own marketing. They go to our messaging provider for the sole purpose of delivering the messages you asked for, and nowhere else.

A shop texts you only after you tick the box asking to be texted, on that shop's order form. Ticking it records the moment you did. Reply STOP to any message to stop them, START to begin again, and HELP for help. Text messages are sent only between 9am and 8pm in the shop's own timezone.

You will receive no more than 3 drop alerts from any one shop in any seven days, and the platform enforces that rather than estimating it. Msg & data rates may apply.

Buyer records belong to the maker who runs that shop. The maker can export them or ask us to delete them; if you are a buyer, the maker you bought from is the right first door to knock on, and we help them honour the request.

What we do not do

• No third-party trackers, analytics or ad scripts on buyer-facing pages. None.
• We do not sell or rent anyone's information.
• We do not text anyone whose consent has no moment recorded against it, whatever their record otherwise says.
• We do not use anyone's information to train models.

Cookies

We set functional cookies only: the session that keeps you signed in. Your light or dark choice is stored in your own browser and never sent to us. There is nothing here a cookie banner would be protecting you from, which is why there is no cookie banner.

Who processes data for us

The platform is hosted in the United States. Card payments, when enabled, are handled by Stripe, and card numbers never touch our servers. Text messages, when enabled, are handed to our messaging provider for delivery and for nothing else. Email is handed to our mail provider the same way. Each processor sees only what its job requires, and none of them receives anyone's information for their own purposes.

Changes

If this page changes in a way that matters, makers hear about it at their account email before it takes effect.

Questions

Write to [email protected] or text (575) 909-1701.