YOUR DETAILS, TREATED WITH CARE

Privacy &
Protection Policy.

Version 2026-10-29 · Updated October 29, 2026

Information you choose to share

Order forms collect your name, reply contact, requested date, servings or quantity, city/fulfillment preference, optional delivery ZIP, budget preference and order details. Cake requests collect your name, phone, email and cake description, with optional additional details and a private inspiration photo. You may provide dietary/allergy information; share only what is needed to discuss your request. You may optionally choose a six-digit handoff PIN and request a private package photo at handoff. No customer account, card number or bank details are required. Staff can enter a private delivery address after checking it with the customer, as well as agreed deadlines, fulfillment updates, private notes and a history of changes. Your private order number also opens a temporary customer page containing your saved request, name, contacts and any delivery address recorded for that order. Anyone holding that number can open this page; there is no customer login or extra email code. The page cannot directly edit confirmed information. Keep the number private. The website does not collect live driver GPS location.

The website-help form collects your name, reply email, description of the website problem and an optional ticket reference. The request is saved privately, and the website sends an email alert to MAXX FORGE STUDIO’s configured support inbox through Chef Rissa’s Gmail connection. The alert includes only your support reference, a general issue category and a link to the staff dashboard. It does not include your full message, name, reply contact, order number, address, PIN or photos. Staff sign in to read the saved request and contact you. A failed alert does not remove your request. Delivery and attempt records are retained separately to prevent repeated emails if a help request is edited or deleted. No automatic email is sent to a visitor-selected recipient. Do not put payment credentials, passwords or unnecessary personal details in any form.

How requests are used & who can access them

Requests and support forms are saved in the site’s database so they can be reviewed and followed up. The authorized website-owner account, managed by technical support, can view and manage the full staff records after sign-in. A customer holding the private order number can view that order’s customer-facing record and submit a change request. The customer page has limited, order-specific access and cannot open the staff dashboard. Chef Rissa handles food, order, payment and booking questions. MAXX FORGE STUDIO builds and publishes the website and handles website/navigation support. Website-help requests are displayed separately in the private staff dashboard. Only the authorized website-owner account can access these sections.

Tickets include request details and references. A QR contains a same-site staff lookup reference, not the customer’s order details. A separate family status link reveals only the ticket type, plate name/quantity when applicable, saved progress, fulfillment state, agreed deadline, customer-facing updates and timestamped history. It does not contain the private order number. It does not reveal customer names, contact information, addresses, ZIP codes, allergy details, photos, full requests or staff notes. The order number opens personal order details; the separate family status link opens only limited status. Either is an access key to its respective page. Keep the order number private and contact Chef Rissa if it has been exposed. There is no public ticket directory.

Order changes

Anyone holding your private order number can submit text requesting a change for that order. These requests and staff replies are saved privately and appear in the staff dashboard and your customer page. They do not change confirmed details automatically. Please allow 24 hours for staff to discuss and confirm a change. Address updates require staff to verify the request with the customer directly. Family status links cannot submit changes or read these messages.

Staff-entered orders & receipts

Authorized staff can record an order on a customer’s behalf, add private order notes and a private order photo, and record an agreed price, payments received and manual refund arrangements. Staff entry does not record a customer’s policy agreement. Staff can optionally send a request acknowledgment to the customer. After delivery or collection, staff can download a PDF receipt with the order number, customer contact, order details, recorded fulfillment and any verified payment amounts. Private staff notes, PINs and photos are excluded from that PDF. Staff are responsible for sharing it with the right customer.

Private inspiration photos

You or authorized staff may add or replace one inspiration photo for a cake or baked-goods order, when entering the order or later while the order remains active. The browser resizes the image, and the server validates the JPEG and removes image metadata. The photo is stored privately and is visible to authorized staff and through that customer’s private order page. Anyone holding the private order number can open that page until access expires or is replaced. Family status links never include the photo. Existing staff-only order photos and handoff photos remain staff-only. Adding a cake photo does not change the agreed order, price, payment or progress. Do not upload faces, address labels or other unnecessary personal information.

Handoff checks & sharing

Your order number is also the tracking reference for new requests. A replaced tracking link may use a new private code to revoke an older link. A handoff PIN is separate from your tracking reference. Only a keyed verification signature is stored; the PIN is not included in text/email drafts, browser draft storage, the staff view or shared trackers. Staff check the PIN at handoff, with attempt limits and a temporary lock after repeated errors. If you forget it, contact Chef Rissa to resolve handoff before collection or delivery.

If you request a proof photo, authorized staff can upload a package photo to private Cloudflare object storage. Image metadata is removed. The photo can be viewed only through authorized staff accounts, and is never embedded in shared tracking links. Avoid faces, address labels and unnecessary personal details in these photos.

The family status Copy or Share buttons give your separate limited status link to family or others you trust. Anyone holding it can open the limited tracker, so treat it as private. Staff can recover the current tracking link for customer assistance or replace it to invalidate an older link. The temporary customer order page and shared tracking close 10 minutes after staff records actual handoff or cancels the order. This closes customer access; it does not delete the private order record, history or proof photo.

Contact drafts & other services

When a reply email is supplied, the website sends a request acknowledgment through Chef Rissa’s Google Workspace Gmail mailbox. It sends a second email when staff approves an order, a handoff acknowledgment when staff marks it delivered or collected, and a cancellation email when staff cancels it. Cancellation emails include the applicable staff-cancellation refund notice. Request, approval, delivery-status and cancellation emails contain the order number and a private order-page link, but not your address, allergy details, handoff PIN, inspiration photo or staff notes. Scheduled pickup reminders use the agreed pickup time. At handoff, staff can confirm the items, full amount paid and receipt email; the website sends that customer a PDF receipt containing those recorded items and payment amount. Staff must check the recipient and avoid unnecessary private information in receipt items. Receipts can be saved for download without email if no email address is available. Gmail processes the recipient email and message content. Sending an acknowledgment does not verify ownership of the recipient mailbox. Staff can review send status and retry failed messages; no marketing mailing list is created. Text and email buttons separately prepare a draft using your request details; you choose whether to send those drafts in your own app. Sending, payment and Instagram activity are then handled by your chosen providers and Chef Rissa. Direct payments are arranged through Venmo, Cash App or Zelle; this site does not process them.

The website is hosted through ChatGPT Sites using Cloudflare infrastructure for server, database and private object-storage services. The platform may process technical connection/session information and manage necessary sign-in cookies. Staff access requires the authorized ChatGPT owner identity plus the website’s separate staff sign-in. Passwords are stored as salted, peppered verification hashes. Authenticator secrets are encrypted server-side, recovery codes are one-use hashes, and passkey private keys and biometrics stay with the device or its passkey provider. Necessary staff session cookies are HttpOnly and expire after eight hours. Staff may explicitly remember verification on a device for up to 30 days while its network public address matches; a keyed fingerprint is stored rather than the raw network address. A new network or device prompts for authenticator verification. Staff can revoke sessions, trusted devices and registered passkeys. Customer pages can be accessed without staff sign-in; staff records still require an authorized account. Platform cookie names, durations and platform log-retention settings are outside these website controls. See OpenAI’s privacy notice and Cloudflare’s privacy notice for their practices. See Google’s privacy notice for Gmail and Calendar’s practices. The availability page links to Chef Rissa’s existing Google Calendar appointment schedule. Google handles the appointment details you enter there. For cakes and catering, the Google Calendar appointment is part of the booking-request steps. Appointment times are separate from the food-order date and confirmation. The website’s date grid combines staff settings and confirmed website reservations with optional Google Calendar busy-time checks. When authorized and enabled by staff, a separate calendar for catering or cakes can mark busy dates unavailable for that service. A catering event does not automatically close cake requests. The primary discussion calendar is not used to block whole service dates. The connection reads busy times only; it does not request event titles, guests, contact details, addresses or descriptions. The website privately stores the selected service calendar IDs, a cache of busy dates and check times. Customers see date availability, not the underlying calendar or events. Checks refresh about once a minute while availability is viewed; if Google cannot be checked, affected open dates ask customers to confirm with Chef Rissa. Website requests are not automatically written back as Google events.

Promotions & coupon codes

When you check or submit a coupon code, the website processes it to check the published offer, eligible service, validity period and usage limit. Staff privately manage offer drafts and codes. Private coupon codes are not automatically listed with public offers. A saved order records the verified offer details, including its title, terms, amount or offer type, eligible services and validity period, along with a code-verification reference and use time. Authorized staff and the customer holding that order’s private number can see its saved offer; family status links do not include it. Later promotion changes do not rewrite the offer recorded on the order.

Coupon-use records are retained even if an unconfirmed draft order is deleted, so deletion cannot reset a usage limit. These records do not add a marketing mailing list or cause an automatic charge. Chef Rissa confirms the eligible items and final quote.

Cookies, local preferences & tracking

No optional analytics, advertising pixels, marketing embeds or Instagram embeds are installed. Photos and fonts are served by this site. External links do not import social content. The site does not implement advertising sale/sharing features. This statement covers the website implementation; it does not describe every separate activity of the business or external providers.

Necessary functionality uses browser storage for selected idea IDs/counts, accessibility/effects settings, document acknowledgment versions/timestamps and cookie choices. No customer identity or PIN is placed in the consent preference. Optional categories default off. Accept optional and Reject optional are separate choices from agreeing to Terms. Cookie Settings lets you change the choice. Global Privacy Control keeps optional categories off. With no optional trackers installed, choosing Accept does not add trackers or remove necessary sign-in/security storage.

If an update is available, choosing “Refresh and keep my draft” temporarily stores your unfinished form or receipt in this tab’s session storage, including details you entered (excluding handoff PINs and file inputs), so it can be restored after refresh. It is removed after restoration or expires after 30 minutes. Refreshing normally or closing the tab may lose unsent answers. Tracking credentials stay in the tracking link’s fragment and are checked through a private, non-cacheable request.

Delivery estimates

Deliveries start from San Francisco ZIP 94124. Delivery costs extra and is available only in San Francisco and Daly City. A ZIP estimate does not extend that service area. Authorized staff configure typical travel-time ranges for destination ZIP codes. These are business estimates rather than automatic distance, route, traffic or live-location calculations. Your destination ZIP is used privately to select the range and is not returned in the shared tracker. Once staff marks an order out for delivery, its saved window starts from dispatch. Changes to the ZIP defaults do not silently move an order already on the road. Staff may enter an estimated delivery-by time or revise an individual window, with a customer-facing history entry. The tracker counts down to that estimate and displays a delay notice if it passes without a recorded handoff. The countdown does not mark an order delivered. Unconfigured areas show that timing needs confirmation.

Security & retention

The site validates and bounds inputs, checks staff authorization on private records, limits submission attempts and separates private tracking from staff access. Submitted content is displayed as text. Application code does not intentionally log full request details or private tracking tokens; hosting infrastructure has separate technical logs. No system can promise perfect security.

No automatic deletion schedule for saved business requests has been configured. A fixed business retention period has not been supplied. Contact Chef Rissa to ask to review, correct or delete order information, including a ticket reference when available; avoid sending a private tracking link unnecessarily. Website-support record questions can be raised through MAXX FORGE STUDIO’s help form. Requests must be reviewed by the responsible business; this website does not promise a fixed response period or automatically erase records.

Questions, changes & browser signals

Order/privacy questions: catering@chefrissakitchen.com or (415) 271-3197. Website/accessibility questions: website-help form or MAXX FORGE STUDIO. A revised notice will show a new version. This site does not use cross-site tracking and does not change its behavior based on the older Do Not Track header; Global Privacy Control is honored for optional preferences. This notice is readable without agreeing to it.