Privacy Policy | CrossFriend

1.Who is responsible for your data

Pranajiva Innovations (OPC) Private Limited, at Gaur Global Village, Crossings Republik, Ghaziabad, Uttar Pradesh 201016, India, is the data fiduciary for personal data collected through crossfriend.in.

This policy is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices) Rules, 2011.

2.What we collect

Because you place an order

Your name, mobile number and email address.
Delivery address and pincode, and the recipient's name and number if you are sending a gift.
Your order history, and any message you ask to be written on a cake.
Delivery date and time preferences.

Because you use the AI Cake Studio

The descriptions you type, and any reference photo you upload.
The design images generated from them, and the options you selected (size, flavour, occasion).
Whether you chose to share a design publicly.

Automatically

Device and browser information, IP address, and pages viewed.
Cookies needed to keep you signed in and to remember your cart.

We do not store your full card number, CVV or UPI PIN. Payments are handled by a payment provider; we receive only the result and a reference.

3.Why we use it

To take, prepare, deliver and support your order.
To sign you in, and to keep your account secure.
To generate cake designs you ask for, and to show you your own past designs.
To tell you about your order — confirmation, preparation and delivery updates.
To detect and prevent fraud and abuse.
To meet tax, accounting and food-safety record-keeping obligations.

We use your data for marketing only where you have opted in, and you can opt out at any time.

4.Who we share it with

Bakers see what they need to make and deliver your order — your name, delivery address, contact number, order contents and any cake message. They do not see your payment details or your wider order history with other bakers.

Delivery partners, where a delivery is not made by the baker directly.
Payment providers, to process and reconcile payments and refunds.
AI providers, to generate cake designs from your descriptions — see section 5.
Cloud hosting and storage providers who run our infrastructure.
Government authorities, where we are required by law to disclose information.

We do not sell your personal data, and we do not share it with advertisers for their own purposes.

5.AI processing of your prompts

When you describe a cake in the Studio, that description — and any reference image you upload — is sent to third-party AI providers to produce a design. Those providers process it on our behalf under their own terms, and some are located outside India.

Please do not include personal, confidential or sensitive information in a cake description. Names and occasions are fine and are the point; identification numbers, financial details or health information are not.

6.Designs you share publicly

A design is private by default. If you choose to share it to the community gallery, the image and its description become visible to anyone who visits the gallery. We do not display your name or contact details alongside it.

You can make a shared design private again at any time from the Studio.

7.How long we keep it

Order and invoice records: as long as tax and accounting law requires, currently eight years.
Account details: while your account is active, and for a reasonable period afterwards to handle disputes.
Cake designs: until you delete them or close your account.
Server and access logs: typically 90 days.

8.How we protect it

Data is transmitted over encrypted connections and stored on access-controlled infrastructure. Passwords, where used, are stored hashed and never in readable form. Access is limited to staff who need it for their work.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority as the law requires.

9.Your rights

Ask for a copy of the personal data we hold about you.
Ask us to correct data that is wrong or incomplete.
Ask us to delete your data, where we are not required to keep it.
Withdraw consent for anything you consented to, including marketing.
Nominate someone to exercise your rights if you are unable to.
Complain to the Data Protection Board of India.

To exercise any of these, email support@crossfriend.in. We will respond within 30 days.

10.Children

CrossFriend is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11.Cookies

We use cookies that are necessary for the site to work — keeping you signed in, remembering your cart and your region. Blocking these will break checkout. We also use basic analytics to understand which pages are used; you can block those in your browser without affecting your ability to order.

12.Grievance Officer

Pranajiva Director
Pranajiva Innovations (OPC) Private Limited
Gaur Global Village, Crossings Republik, Ghaziabad, Uttar Pradesh 201016, India
director@crossfriend.in