Your Privacy
Matters

1. Introduction

Roastr Inc. ("we," "us," or "our") operates the Roastr coffee management platform (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy complies with the California Consumer Privacy Act (CCPA) and other applicable privacy laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password when you create an account
• Profile Information: Additional details you choose to add to your profile
• Coffee Data: Roasting profiles, brewing recipes, tasting notes, and other coffee-related data you input
• Payment Information: Billing information processed securely through Stripe (we do not store credit card details)
• Communications: Messages you send to us through support channels

2.2 Information We Collect Automatically

• Usage Data: How you interact with our Service, features used, and time spent
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, and referring URLs
• Cookies and Tracking: We use essential cookies for functionality and analytics cookies with your consent

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our coffee management platform
• Account Management: To create and manage your account, process payments, and provide customer support
• Analytics: To understand how users interact with our Service and improve user experience
• Communications: To send important updates, security alerts, and respond to your inquiries
• Legal Compliance: To comply with applicable laws and protect our rights and users' safety
• Product Development: To develop new features and improve existing functionality

4. Information Sharing and Disclosure

We may share your information only in the following circumstances:

• Service Providers: With trusted third-party providers who assist in operating our Service (e.g., Stripe for payment processing)
• Legal Requirements: When required by law, court order, or to protect our rights and users' safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
• With Your Consent: When you explicitly consent to sharing your information
• Team Members: Within your organization for Commercial Roaster accounts with proper access controls
• Analytics: With analytics providers to help us understand how our Service is used (in aggregated or anonymized form)

5. Third-Party Services

5.1 Stripe

We use Stripe, Inc. for payment processing. Stripe processes your payment information according to their own Privacy Policy. We do not store your credit card information on our servers.

5.2 Analytics and Cookies

We may use analytics services to help us understand how our Service is used. These services may collect information about your use of our Service and other websites.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure hosting infrastructure
• Regular backups and disaster recovery procedures

7. Data Retention

We retain your personal information for as long as necessary to provide our Service and comply with legal obligations. Specifically:

• Account Data: Retained while your account is active and for a reasonable period after cancellation
• Coffee Data: Retained according to your account type and usage patterns
• Payment Data: Retained as required for tax and legal compliance
• Communications: Retained for customer service and legal purposes

8. Your Rights and Choices

You have the following rights regarding your personal information:

8.1 California Consumer Privacy Act (CCPA) Rights

• Right to Know: Request information about the personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale of personal information (note: we do not sell personal information)
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights

8.2 General Rights

• Access and Portability: Request a copy of your personal information in a portable format
• Account Management: Update, correct, or delete your account information at any time
• Marketing Communications: Opt out of marketing emails (service-related emails will continue)
• Cookie Preferences: Manage cookie settings through your browser

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable privacy laws and implement appropriate safeguards to protect your personal information.

10. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your personal information, please contact us:

Response Time: We will respond to your privacy requests within 45 days as required by California law.

13. California Residents - Additional Information

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Categories of Personal Information We Collect:

• Identifiers (name, email, account ID)
• Commercial information (subscription details, payment history)
• Internet activity (usage data, log files)
• Professional information (for business accounts)

Sources of Personal Information:

• Directly from you (account registration, profile updates)
• Automatically through your use of our Service
• From third-party payment processors (transaction confirmations)

Business Purposes for Collection:

• Providing and maintaining our Service
• Processing payments and managing accounts
• Customer support and communications
• Security and fraud prevention
• Legal compliance and protecting rights