Privacy Policy

Beta draft for review before public launch. These pages do not certify legal compliance. Operator identification and a working contact address must be completed before public use.

Last updated: 4 November 2026.

Service: Keki Market. Operator: not yet provided.

Who handles your information

Keki Market's operator handles personal information used to operate the marketplace, accounts, and seller tools. Independent bakeries also handle customer information to take and fulfil orders and maintain business records. Each bakery remains responsible for its own lawful handling of that information. Privacy questions and requests: Contact address not yet configured. This draft is not ready for public use..

Information handled by Keki

Account name and email address; when Google sign-in is used, its account identifier and profile information. Keki does not receive your Google password.
When email authentication is enabled, passwords you submit are processed for account access and stored as password hashes rather than readable passwords. Keki also handles verification records, password-reset records, and temporary magic-link records. Links prove mailbox access; do not forward or share them. These methods remain unavailable until a verified sender is configured.
Session and security information needed for sign-in and abuse prevention, including cookies, session records, request metadata, and rate-limit records.
Order selections, quantities, cake messages, pickup date and time, pickup name and mobile number, order source, and status history.
Seller-entered customer contacts and order history, including Messenger, phone, and walk-in orders. Customers may have records without a Keki account.
Bakery profiles, contact details, pickup addresses and pins, catalog details, and uploaded bakery and product images.
Manual payment and refund amounts, dates, methods, references, private notes, and receipt images. Keki records entries but does not collect or transfer customer payments.
Seller-entered business and personal expenses, categories, dates, notes, and correction records.
Information supplied when requesting support or reporting an issue.

Enter only information needed for the task. Do not upload passwords, OTPs, full payment-card credentials, government identifiers, or unrelated private conversations. Crop or redact unrelated details from receipt screenshots. Sellers must inform customers about relevant processing and have a lawful basis before entering their details, including for offline orders.

Purposes and basis of processing

Keki uses records to provide requested account and seller services, manage orders, support pickup, calculate summaries, and respond to requests. Processing necessary to provide an agreed service relies on the relevant contractual basis where applicable. Security, abuse prevention, and dispute handling may rely on legitimate interests, subject to legal requirements and your rights. Information may also be processed to meet legal obligations or establish, exercise, or defend legal claims. Optional processing requiring consent must be explained separately; accepting the Terms is not consent to every use of personal information.

Visibility and service providers

Published listings and public bakery profiles are visible to visitors. A bakery receiving a request sees order and pickup contact details. Customers see their own orders and payment totals; seller-private references, notes, expense records, and uploaded payment receipts are not public or included in customer payment views. Customer-uploaded downpayment screenshots are shared only with that customer and the owning bakery. Exact pickup details are shared after acceptance, subject to permitted order status, unless a seller explicitly opts to publish the shop address and exact pin on its public page.

Authorized platform personnel and providers may handle information as needed to operate, secure, support, and maintain Keki. Production infrastructure includes Vercel hosting and Neon database services; Cloudflare R2 handles uploads when configured. Google provides optional sign-in. When email authentication is enabled, Resend processes recipient addresses and verification, reset, and magic-link emails. Authentication emails contain temporary access links; provider delivery records may also contain message metadata. No email delivery or provider setup is claimed when it is disabled. These providers may process information outside the Philippines. Keki does not sell personal information. Disclosures to authorities or other recipients may be necessary where required or authorized by law.

Optional AI message extraction

Menu imports send the selected image or PDF to OpenRouter and its model provider. Keki stores the extracted listing drafts, review notices, and import progress, but does not retain the original menu file through this importer. Only reviewed cakes that the seller publishes become public.

Payment screenshot uploads also request AI scanning when configured. The private image is sent to OpenRouter and its selected model provider; extracted suggestions and scan errors are stored with the screenshot. Sellers review the original and confirm actual funds before saving a payment. Scans never verify a transfer. Remove unrelated account details from screenshots before uploading.

When a seller requests extraction, the pasted message and relevant active catalog names and options are sent to OpenRouter and its selected model provider. The message may contain customer information. Review and minimize it first, inform the customer as appropriate, and establish a lawful basis for this separate processing. Manual entry remains available without AI.

Keki does not save the raw pasted message as an order record. Reviewed fields are stored when the seller submits the form. Provider processing is subject to provider terms and privacy practices and may occur abroad. Keki requests routing that disallows provider data collection; this is not an independent guarantee of provider retention or deletion. Extraction is a draft for human review, not an automated decision about a customer or automatic order confirmation.

Maps and location choices

Device location is requested only after you select Use my location. Customer coordinates stay in the current page and are not saved in the account or order. Denying permission still allows browsing; sellers can place a pin manually. Location permission does not automatically save or publish a pin.

Sellers can save an exact pickup pin for eligible accepted orders and separately opt in to public discovery showing a rounded approximate area. A separate, off-by-default shop-address setting allows sellers to publish their full pickup address and exact pin with a directions link before any order. Sellers should use this only for premises they intend to make public. Disabling it removes this public display; people may retain copies already seen or shared. Approximate public discovery is off by default and can be disabled in seller location settings. A rounded area can still identify a small neighborhood; it is not anonymous. OpenStreetMap receives tile requests including IP address and the map area viewed. Selecting directions opens Google Maps, which receives information needed for the link and applies its own privacy practices.

In Bakery settings, selecting Use my location also sends your current device coordinates directly from your browser to BigDataCloud to suggest your city and province/region. BigDataCloud receives your IP address and uses anonymous coordinate/IP signals to improve its geolocation data, subject to its own privacy practices. This lookup is optional; you can enter your address and place a map pin manually instead. Suggestions do not automatically save or publish your location.

Retention and security

Account, order, payment, expense, and audit records are currently retained in the beta database until reviewed for removal; there is no automatic account-deletion or scheduled record-expiry feature. A final retention schedule, including backup handling, remains to be established before public launch. Keki must not retain information longer than necessary for the stated purposes, legal obligations, and legitimate claims handling. Voiding an expense or recording a refund preserves the original record rather than deleting it.

Access controls restrict seller and customer records, and payment receipts use private access checks. No internet service can promise absolute security. Avoid unrelated sensitive information in notes and uploads. Public bakery images or profiles can be copied by others; publish only information you intend to make public.

Your rights and requests

Subject to applicable law, you may request access, correction, objection, blocking or erasure, and portability where applicable, and withdraw consent for processing that relies on it. Contact Keki at Contact address not yet configured. This draft is not ready for public use. with enough information to locate the record, such as the bakery or order reference. You do not need an account to ask about a seller-entered record. Identity or authority may need verification without collecting unnecessary information.

Deletion is not automatic or unconditional: legal recordkeeping, other people's rights, and claims may justify retaining certain information. Requests must be assessed under applicable law, with explanations where they cannot be fully granted. You may raise concerns with the National Privacy Commission. A bakery may hold separate copies; contact it about those records too. This does not remove Keki's responsibilities for its own processing.

Philippine privacy law and complaints

This notice is intended to explain the processing above under the Data Privacy Act of 2012 (Republic Act No. 10173). It does not establish compliance or replace the rights and obligations in that law and applicable National Privacy Commission issuances. Before public use, the operator must complete identification, a monitored contact route, retention and request-handling procedures, provider review, and any applicable registration or notification requirements.

You can consult the National Privacy Commission's text of the Data Privacy Act and its complaint guidance. Follow current procedures; this draft does not promise that a complaint has been submitted or resolved.

Changes to this notice

Updates are dated on this page. Material new purposes or changes requiring notice or consent must be addressed before that processing; updating a policy alone does not authorize unrelated uses of previously collected information.