Legal
Privacy Policy
Effective date: August 13, 2026
MyPorch (“we,” “our,” or “us”) operates myporch.app. This policy describes what information we collect, how we use it, and your choices. By using MyPorch you agree to the practices described here.
1. Information We Collect
Account information
When you create an account we collect your name, email address, and authentication credentials. If you sign in with Google, we receive the profile information Google shares (name and email). We do not receive your Google password.
Bakery and product information
We store the information you enter to operate your bakery — your bakery name, product descriptions, pricing, ingredient lists, allergen information, and batch details.
Order data
When your customers place orders through your MyPorch storefront we collect their name, email address, order details, and pickup information. This data is associated with your bakery account.
Payment information
Payments are processed by Stripe. We do not store credit card numbers or bank account details on our servers. We receive confirmation of payment status and transaction identifiers from Stripe. Your connected Stripe account is governed by Stripe’s Privacy Policy.
Usage data
We collect information about how you use MyPorch — pages visited, features used, clicks, session duration, and aggregate page views — using PostHog analytics and Vercel Web Analytics. This data is used to improve the product. PostHog is configured to collect data only for identified users where applicable.
Technical data
We collect standard server log data including IP addresses, browser type, and referring URLs. This data is used for security, debugging, and service operation.
Mobile and SMS information
When you request, receive, or interact with MyPorch text messages, we collect and maintain mobile and SMS information. This may include your mobile phone number; the bakery and message category associated with the request; your consent, confirmation, preference, and revocation status; the date, time, and method by which you consented, confirmed, changed a preference, or opted out; the exact disclosure presented when consent was requested; your IP address and browser or device information when you use a web-based consent or preference page; the content and timing of messages you send to a MyPorch number; and message identifiers, delivery status, error codes, and related information supplied by Twilio, wireless carriers, and other messaging providers. We use this information to document and administer consent, provide requested messages, process opt-out and help requests, maintain suppression records, monitor delivery and abuse, resolve disputes, and comply with legal and carrier requirements. The order-related program sends one pickup reminder for each eligible order; marketing message frequency varies. Each program sends up to 10 messages per month. Message and data rates may apply.
2. How We Use Your Information
- To operate and provide the MyPorch platform
- To process orders through your storefront
- To send order confirmation and pickup reminder emails to your customers
- To generate cottage food labels for your orders
- To send you account-related communications (billing, product updates, support)
- To analyze usage and improve the product
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
- To send transactional text messages you request about eligible orders placed with a bakery using MyPorch, including pickup reminders.
- To send new-batch and last-call marketing text messages about a bakery only after you separately request those messages and complete MyPorch’s confirmation process by replying YES.
- To create and maintain electronic records of SMS disclosures, consent, confirmations, preferences, and revocations; authenticate and process opt-out and help requests; and prevent messages from being sent without current consent.
- To operate and monitor message delivery, investigate failed, blocked, filtered, fraudulent, or abusive messaging activity, enforce program limits, protect the security and integrity of the SMS programs, and comply with carrier requirements and applicable law.
We do not sell your personal information or your customers’ personal information to third parties.
3. Information Sharing
We share your information only in the following circumstances:
Service providers
We use third-party services to operate MyPorch, including Supabase for database and authentication services, Stripe for payments, Twilio for text-message transmission and messaging-program operations, PostHog for analytics, and Vercel for hosting, performance monitoring, and web analytics. These providers may access information only as necessary to perform services on our behalf and are subject to contractual or other obligations governing their use of that information. Twilio, participating wireless carriers, and other messaging providers process mobile phone numbers, message content, routing information, message identifiers, delivery status, and error information as necessary to transmit, deliver, filter, and troubleshoot text messages and to comply with messaging requirements.
Mobile information and messaging consent
We do not sell or rent your mobile phone number, mobile information, or SMS opt-in data or consent. We do not share that information with third parties or affiliates for their own marketing or promotional purposes. SMS opt-in data and consent are used only to operate the MyPorch messaging programs you requested and will not be transferred to another business for that business’s independent marketing.
We may disclose mobile and SMS information to service providers and wireless carriers only as necessary to provide and support MyPorch’s messaging services, including transmitting messages, routing carrier traffic, documenting consent, processing opt-out and help requests, preventing fraud or abuse, troubleshooting delivery, and complying with applicable law and carrier requirements. These parties may use the information only to provide services on our behalf or as required by law; they are not authorized by MyPorch to use it for their own marketing or promotional purposes.
The bakery associated with an order or SMS program may access a customer’s mobile number, applicable subscription or opt-out status, and limited message or delivery information when reasonably necessary to fulfill orders, respond to customer requests, or use the constrained messaging features MyPorch provides. This access does not transfer or assign MyPorch’s SMS consent to the bakery, does not authorize the bakery to enroll the customer or restore consent, and does not permit the bakery to export, sell, share, or use the mobile information for independent marketing or any messaging outside MyPorch. Bakery owners may revoke consent at a customer’s request but cannot grant consent on the customer’s behalf.
Store owner Meta Pixel tracking
Individual bakery storefronts may run their own Meta (Facebook) Pixel to measure their advertising. When a store owner enables this, MyPorch renders Meta's tracking snippet on that store's storefront using a Pixel ID the owner provides. Data collected by that pixel is controlled by the store owner and shared with Meta according to Meta's policies; it is scoped to that owner's storefront pages.
Your customers
Order and pickup information is shared with the customers who place orders through your storefront as necessary to fulfill those orders.
Legal requirements
We may disclose information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of MyPorch, our users, or the public.
Business transfers
If MyPorch is acquired, merged, or undergoes a change of control, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
4. Data Retention
We retain your account information and bakery data for as long as your account is active. Order records are retained for a minimum of three years to support compliance and tax record-keeping. If you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.
We retain identifiable SMS consent and subscription records for as long as reasonably necessary to operate the programs, honor and prove your choices, maintain suppression records, resolve disputes, and comply with applicable law and carrier requirements. Ordinarily, we retain the consent ledger and subscription record for four years after the last SMS-related activity. After that period, we replace the mobile phone number in retained consent records with a salted hash and remove free-text message content, while retaining non-identifying record structure where reasonably necessary for compliance or defense of legal claims. Message bodies stored in our SMS outbox are ordinarily deleted after 13 months, and short-lived provider callback records are ordinarily deleted after 30 days. These limited compliance, suppression, security, and legal records may be retained after an account-deletion request notwithstanding our general 90-day deletion period, but only to the extent and for the time reasonably necessary for those purposes.
5. Your Choices and Rights
Account data
You can update your account information at any time from your account settings.
Account deletion
You can request deletion of your account by contacting us at hello@myporch.app. We will process deletion requests within 30 days.
Marketing communications
You can opt out of non-essential email communications by clicking the unsubscribe link in any marketing email or by contacting us. Transactional emails (order confirmations, billing receipts) cannot be disabled while your account is active.
Text messages
You may stop text messages from a bakery’s MyPorch number at any time by replying STOP; this revokes both order-update and marketing messages from that number. Reply HELP for program information and support instructions. Where available, you may use the MyPorch SMS preferences page to change an individual program preference without disabling the other program. You may also request help or ask us to update or revoke your SMS preferences by contacting hello@myporch.app. Replying START or UNSTOP may remove a carrier-level block but does not by itself restore consent in MyPorch; after a prior opt-out, messages resume only after you complete MyPorch’s current re-enrollment and confirmation process.
Analytics
PostHog analytics and Vercel Web Analytics can be blocked using standard browser privacy tools or ad blockers. Blocking analytics does not affect your ability to use MyPorch.
6. Data Security
We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. Our authentication and database infrastructure is provided by Supabase. No system is completely secure — if you believe your account has been compromised, contact us immediately at hello@myporch.app.
7. Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences, and collect analytics data. Essential cookies required for authentication cannot be disabled. Analytics cookies can be blocked via browser settings without affecting core functionality.
8. Children's Privacy
MyPorch is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Your continued use of MyPorch after the effective date of any changes constitutes acceptance of the updated policy.