Privacy Policy
GridMast and Bake Balance
Last updated: 9 November 2026
This is an English translation provided for convenience. The Spanish version is the binding one; if the two differ, the Spanish version prevails.
1. Who is responsible for your data
GridMast is the trade name of Eibar Alexander Morillo Meléndez, an individual registered as a business owner in Peru, taxpayer number (RUC) 15604060955, domiciled in the district of Cerro Colorado, province of Arequipa, Arequipa region, Peru. He owns the databases and is the controller of the personal data collected on gridmast.com and in the Bake Balance app (bakebalance.gridmast.com).
For any question about your data, write to [email protected]. If you need the full address for a formal procedure, request it at that email and we will provide it.
This policy is governed by Peruvian Law No. 29733, the Personal Data Protection Law, and its Regulations, approved by Supreme Decree No. 016-2024-JUS.
2. What data we process and why
| Where | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact and email forms on gridmast.com | Name (if you give it), email and message | Answer your inquiry | Your consent when you submit the form |
| Bake Balance account | Email, password (stored encrypted), business name, phone (optional) | Create and protect your account, provide the service and give you support | Performance of the contract (Terms and Conditions) |
| Use of Bake Balance | Ingredients, recipes, costs and quotes you enter | Calculate costs and create quotes | Performance of the contract |
| Bake Balance license control | Device fingerprint (an identifier generated from the browser, operating system and screen), IP address, time zone and access date | Limit the number of devices of your plan, prevent fraud and keep the service secure | Performance of the contract |
| Purchases through Hotmart | Email, name and billing details | Process the payment and activate your plan | Performance of the contract and legal obligation |
| Purchases with Yape | Name, date, amount and transaction number, kept in an internal administrative record; the phone number stays in the WhatsApp conversation | Confirm the payment, activate or renew your plan and meet tax obligations | Performance of the contract and legal obligation |
| News and promotions by email | Email and name | Send you product news, promotions and useful content | Your express consent (unchecked box) |
| Browsing gridmast.com | Online identifiers and Google Analytics 4 usage data (pages viewed, clicks, device, approximate country) | Measure which content works and improve the site | Your consent (see section 5) |
We do not process sensitive data. We do not make automated decisions or build profiles that have effects on you. We do not sell or rent your data.
The fields marked as required in each form are necessary for the stated purpose; without them we cannot answer you or create your account. The rest are optional.
We will only send you news or promotions if you expressly agree. You can unsubscribe at any time with the link included in every email or by writing to [email protected]; it does not affect your account.
3. Who else accesses your data (processors)
We use providers that process data only on our behalf and to provide their service:
| Provider | Service | Data | Server location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting and security of gridmast.com and the Bake Balance app | IP address and technical data of the visit | Global network; headquartered in the US |
| Google LLC (Google Analytics 4) | Site usage measurement | Online identifiers and usage data | US and other countries |
| Web3Forms | Delivery of the contact form to our email | Name, email and message | Not specified by the provider |
| Supabase, Inc. | Bake Balance database and authentication; record of emails sent through the forms | Account and app usage data | US (Oregon) |
| Hotmart | Payment processing outside Peru | Email, name and billing details. Card details are handled by Hotmart; we never see them | Brazil and other countries |
| Yape (Banco de Crédito del Perú) and WhatsApp (Meta) | Payment and activation in Peru | Name, phone number and proof of payment | Peru (Yape); US and other countries (WhatsApp) |
When we start sending news emails, we will add the email provider here before using it.
We may also disclose data to authorities when a law or a court order requires it.
4. International transfers
Several of these providers store data outside Peru, mainly in the United States and Brazil. We only work with providers that offer contractual data protection safeguards, and the transfer is necessary to provide the service you request. By using the site or the app, you are informed of these transfers in accordance with Law No. 29733 and its Regulations.
5. Cookies and similar technologies
| Type | Purpose | Does it need your permission? |
|---|---|---|
| Technical (session, localStorage, sessionStorage) in Bake Balance, and the cookie preference stored on gridmast.com | Keep your session, language and preferences, and remember whether you accepted or rejected analytics | No; the site and the app do not work without them |
Analytics: Google Analytics 4 on gridmast.com (cookies _ga and _ga_*, lasting up to 2 years) |
Count visits and measure site usage | Yes. They are only set if you accept them in the cookie notice |
We do not use advertising or remarketing cookies.
The cookie notice appears on your first visit, with two buttons of the same size: “Accept” and “Reject”. If you reject, Google Analytics is not loaded. Your choice is stored in your browser for 12 months. You can change it at any time from the “Cookies” link at the bottom of every page or with this button:
6. How long we keep your data
- Form inquiries: up to 12 months after the last communication.
- Bake Balance account: while the account is active. If you ask us to delete it, we erase the account and app data within 30 days at most.
- Payment data and receipts: for the period required by tax rules.
- Google Analytics 4: event data is kept for 2 months and user data for 14 months; this period restarts with each new visit.
7. Security
We apply technical and organizational measures proportionate to our size: encrypted connections (HTTPS), hashed passwords, data access limited to the owner, and providers with their own security controls.
If a security incident affects your data, we will report it to Peru's National Personal Data Protection Authority within 48 hours of becoming aware of it. If it may affect your rights, we will also notify you within the same period and in plain language.
8. Your rights
You can exercise at any time your rights of access, rectification, cancellation (erasure), objection and portability, and withdraw your consent. You can also ask for information about how we process your data.
How to do it:
- Write to [email protected] with the subject “Datos personales” (Personal data).
- Include your name, your registered email (if you have an account) and the right you want to exercise.
- If we need to verify your identity, we will ask you for an additional detail.
We will reply within the time limits set by Law No. 29733 and its Regulations. If you withdraw your consent, we will stop processing that data within 10 business days at most.
If you are not satisfied with our answer, you can contact Peru's National Personal Data Protection Authority (Autoridad Nacional de Protección de Datos Personales) of the Ministry of Justice and Human Rights: gob.pe/anpd.
9. Minors
GridMast and Bake Balance are intended for people aged 18 or over. We do not knowingly collect data from minors; if we find that we have, we will delete it.
10. Users outside Peru
Bake Balance is used in several countries. If you live outside Peru, your local law may give you additional rights; write to us and we will honor them.
11. Changes to this policy
If we change this policy, we will update the date above. If the change is important, we will announce it inside Bake Balance or by email to registered users.