Privacy Policy
Last updated: August 24, 2026
This Privacy Policy explains what information Coffee Collector collects, why, and how it's handled. It's operated by Ryan, a sole proprietor doing business as "Coffee Collector" ("we," "us," "our").
1. Information we collect
From shop owners
- Shop name, address, phone number, contact name, and email address, provided at signup
- Payment information — handled entirely by Stripe. We never see or store your card number.
- Your login password (stored securely, never in plain text)
From customers
- A random, meaningless token identifying their card — no personal info required to generate this
- Their stamp count and reward history at that specific shop
- Optional: name, email, and birthdate — only if they or shop staff choose to add it, for example so they can recover their card if they lose their phone, or receive a birthday reward
2. How we use this information
| Information | Used for |
|---|---|
| Shop contact details | Running your account, sending you important service emails, billing |
| Customer stamp/reward data | Making your loyalty card actually work — that's the whole product |
| Customer email (if given) | Card recovery if they lose their phone, and reward/birthday notifications, if you enable them |
We do not sell personal information to anyone, and we don't use customer data for advertising.
3. Who we share information with
We work with a small number of trusted service providers to actually run Coffee Collector. Each only receives what it needs to do its job:
| Service | What it's for | What it sees |
|---|---|---|
| Stripe | Payment processing | Shop billing/payment details |
| Resend | Sending emails (signup confirmation, card recovery) | Whatever email address the message is going to |
| Apple Wallet / Google Wallet | Displaying the actual loyalty card on a customer's phone | Stamp count, shop name/branding — no customer personal info unless they chose to share it |
| Square (Insight/V2 shops only) | Verifying real purchases for fraud-proofing | Order data from your connected POS account |
We don't share information with anyone else, except if required by law.
4. How long we keep information
- An active shop's data is kept for as long as the shop is active.
- If a shop is removed or cancelled, its data is kept for 90 days (in case you want it restored), then permanently deleted.
5. Data security
We take reasonable technical measures to protect information, including encrypting sensitive credentials and using industry-standard authentication practices. No system is perfectly secure, but we treat this seriously and design with it in mind from the start, not as an afterthought.
6. Your choices
- Customers: joining a card requires no personal information at all. If you've shared an email or name with a shop and want it removed, contact the shop directly, or reach out to us at the email below.
- Shop owners: you can update your account details any time from your dashboard, or contact us to close your account entirely.
7. Children's privacy
Coffee Collector isn't directed at children, and we don't knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we'll remove it.
8. Changes to this policy
We may update this policy as the Service changes. We'll post the updated version here with a new "last updated" date.
9. Contact
Questions about this policy, or a request about your data: hello@coffeecollector.coffee
Mailing address: 4 Long Shoals Rd #B441, Arden, NC 28704, USA