Privacy Policy

1. Introduction

Piece Of Cake is the name of our app and public website at https://www.itspieceofcake.com. The website is operated by LEARNING PATHS TECHNOLOGIES LLP, a limited liability partnership incorporated in India (“we”, “us”, “our”).

Registered office: D.No.1-5-432/25, Street No.3, Near ST.MICHALE SCHOOL, Sneha Colony, Alwal, Hyderabad, Tirumalagiri, Telangana 500010, India.

This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our site and when you submit information through our contact form.

This policy is not legal advice. For questions, use the contact details in Section 14.

2. Personal Data We Collect

We collect personal data in two main ways: (1) information you provide to us, and (2) information collected automatically when you use our website.

2.1 Information you provide

Contact form submissions (from contact.html):

• Name
• Email
• Subject (e.g., General Inquiry, Support)
• Message

Security and abuse-prevention signals:

• We may use a hidden “honeypot” field and rate-limiting checks to reduce spam submissions.
• We also use CSRF protection during form submissions.

2.2 Information collected automatically

When you visit our website, our hosting and infrastructure providers may automatically process technical data needed to deliver the site and keep it secure, such as:

• IP address
• Browser type, device type, and operating system
• Date/time of requests and general request metadata (e.g., URLs requested)

We use Google Analytics 4 to understand, in aggregate, how visitors use our website so we can improve it; Google acts as our service provider for this. We do not use third-party advertising or ad-retargeting trackers. See our Cookie Policy for the specific cookies and how to opt out.

3. How We Use Your Personal Data

We use personal data for the following purposes:

• Responding to requests and providing support (e.g., replying to your contact form message).
• Sending transactional emails related to your inquiry (for example, confirming that we received your message).
• Operating and improving our website (e.g., troubleshooting, security, and quality of service).
• Security: preventing abuse, spam, and protecting the website.

4. AI and Automated Processing

Piece of Cake is an AI-assisted product. Inside the app, our AI assistant "CakeBot" helps plan and run your events — for example, generating task lists, drafting messages and invitations, suggesting vendors, and tracking RSVPs and budgets. To do this, CakeBot processes the event information you and your guests provide.

• You stay in control. Anything that reaches your guests or moves money — sending messages or invites, contacting vendors, or making a payment — waits for your explicit approval. Lower- stakes, reversible steps may happen automatically, and every action is recorded in an activity log you can review and undo. See how CakeBot decides.
• AI can be imperfect. AI-generated suggestions and drafts can contain mistakes, so you should review them before relying on or sending them.
• AI providers do not train on your data. CakeBot is powered by third-party AI model providers that act as our processors. Event information is sent to them only to generate your plan and suggestions, and under our agreements with them your data is not used to train their models and is not retained by them beyond serving your request. We do not sell your personal data, and we do not use it to train AI models ourselves.
• Assistive, and labelled. CakeBot is an assistive tool that helps you plan — it does not make binding automated decisions about you, and where the law requires it we make clear when AI is being used. You stay in control and should review AI-generated content before relying on or sending it.
• This website. The public marketing website you are reading does not feed your browsing into any AI system. The interactive prompt on the home page simply opens the app so you can start planning there.

Automated processing here does not produce legal or similarly significant decisions about you; it assists with planning tasks that you review and control.

5. Cookies and Similar Technologies

We use strictly necessary cookies for basic site operation and security (for example, session or CSRF-related values used when you submit a form), and Google Analytics 4 to understand website usage in aggregate. We do not use advertising or ad-retargeting cookies.

Full details of the specific cookies, their durations, and how to control or opt out of them are in our Cookie Policy. You can also control cookies through your browser settings; blocking strictly necessary cookies may affect form submission.

6. Email Delivery and Form Processing

When you submit the contact form, your submission is processed on the server side and delivered to our team by email. We also send a confirmation email back to you.

• Email service provider: Resend
• Processing: submissions are handled by a server-side function on our hosting provider and emailed to us; we do not store them in a separate third-party database.

7. Legal Basis for Processing

Piece of Cake is available to people in many countries, so the data-protection law that applies to you depends on where you are. We aim to handle personal data in line with applicable laws, which may include the EU/UK General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act, 2023 (DPDP Act), the California Consumer Privacy Act as amended (CCPA/CPRA), and other regional laws, as and when they apply to you.

Where a legal basis is required (for example under the GDPR), we rely on one or more of the following:

• Consent — for example, when you submit the contact form or accept analytics cookies. You can withdraw consent at any time.
• Performance of a contract — to provide the service you have requested and respond to your enquiries.
• Legitimate interests — to operate, secure and improve our website and prevent abuse, where these interests are not overridden by your rights and freedoms.
• Legal obligation — to comply with applicable law.

8. Who We Share Your Data With

We do not sell your personal data.

We may share personal data with service providers who help us operate and improve the website (processors), including:

• Resend for sending transactional emails
• Vercel to host the website and run server-side API handlers
• Google Analytics for aggregate website analytics (see our Cookie Policy)
• AI model providers that power CakeBot's assistance inside the app, as described in Section 4

A current list of our subprocessors is on our Subprocessors page. Business customers who process personal data through Piece of Cake can request a Data Processing Addendum.

9. Data Retention

We retain personal data only for as long as needed for the purposes in this policy, unless a longer period is required by applicable law.

Typical practice (industry-aligned):

• Contact records (in our email inbox): usually kept while we need them to respond and maintain a reasonable business record—often on the order of 12–24 months after your last interaction, unless we must keep them longer for legal, regulatory, or dispute-resolution reasons.
• Server / security logs (via hosting providers): often retained for a short period (commonly roughly 30–90 days) for security and operations, depending on the provider’s defaults and our configuration.
• Transactional emails (via Resend): message metadata may be retained by the provider according to their policies and our settings.

You may request deletion or correction of your personal data as described in Section 10; we will comply where required by law.

10. Your Rights

Depending on where you live and subject to the law that applies to you (such as the GDPR, the DPDP Act, or the CCPA/CPRA), you may have some or all of the following rights over your personal data:

• Access — request a copy or summary of the personal data we hold about you
• Correction — ask us to fix inaccurate or incomplete data
• Deletion — ask us to erase data that is no longer necessary for the stated purpose
• Objection or restriction — object to, or ask us to limit, certain processing
• Portability — receive certain data in a portable format, where applicable
• Withdraw consent — where we rely on consent, withdraw it at any time
• Complain — lodge a complaint with your local data-protection authority, or raise a grievance with us

To exercise any of these, contact us at hello@itspieceofcake.com. We will respond within the timeframe required by the law that applies to you. We do not sell your personal data, nor "share" it for cross-context behavioural advertising as defined under the CCPA/CPRA.

11. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data, including encryption of data in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a personal data breach that affects your information, we will notify affected users and, where required, the relevant supervisory authority without undue delay — and, where feasible, within 72 hours of becoming aware — in line with applicable law.

12. International Data Transfers

We and our service providers (such as hosting, email, analytics and AI providers) may process and store personal data in countries other than the one you live in, including India and the United States. Where required by applicable law, we use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) so that your data stays protected when it is transferred internationally.

13. Children's Data

Our services are intended for a general audience. We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data to us, please contact us so we can review and take appropriate action.

14. Contact Us

Data controller: LEARNING PATHS TECHNOLOGIES LLP

Product: Piece Of Cake (www.itspieceofcake.com)

Email: hello@itspieceofcake.com

Postal address: D.No.1-5-432/25, Street No.3, Near ST.MICHALE SCHOOL, Sneha Colony, Alwal, Hyderabad, Tirumalagiri, Telangana 500010, India

15. Changes to This Policy

We may update this Privacy Policy from time to time. The updated “Last updated” date will appear at the top of this page. If we make material changes, we will take reasonable steps to let you know.