Privacy Policy

Scope and contact

This policy explains information handled when you visit solution.coffee, take our coffee quiz, place an order, contact us or use Brew Lab. The responsible operator is Third Fold LLC, an Illinois limited liability company. Contact support@solution.coffee for privacy questions or requests.

Information we handle

• Orders and delivery: name, email, shipping details, purchased products, quantities, prices, taxes, shipping charges, payment status, order references and correspondence needed to fulfill and support your order.
• Payments: Stripe collects payment credentials through its hosted checkout. Our application receives payment/order references and transaction information; it does not collect full card numbers through its own forms. Stripe and optional services such as Link have their own information practices.
• Support: information you choose to send us and records of our responses. Please do not email payment credentials or unnecessary sensitive information.
• Website operations: technical request and security information, which may include IP addresses, browser/device details, timestamps and error records processed by our hosting and service providers.
• Quiz and cart: quiz answers are used in your browser to suggest coffees. The cart stores selected coffee identifiers and quantities in browser storage. When you proceed to checkout, we receive the selected products and purchase source needed to create the order.
• Optional Brew Lab features: analytics consent choices, permitted analytics events, and AI questions/history as explained below, if those features are enabled and you choose to use them.

Test checkout may still receive real names, email addresses or shipping details that a tester enters. A “test store” label does not mean no personal information is processed.

Why we use information

We use information to operate the store and brewing tools, process payments, calculate applicable tax, arrange roaster fulfillment, send transactional messages, resolve order problems, detect misuse and maintain appropriate business records. Optional analytics helps us understand use of brewing tools after consent. The optional coach uses submitted context to answer a brewing question.

We do not enroll you in recurring charges through one-time purchases. Marketing enrollment, if introduced, will be described separately from order communications.

Where data protection law requires a legal basis, we rely on performing our contract with you for purchases, compliance with legal obligations, legitimate interests in securing and supporting the service where those interests do not override your rights, and consent for optional analytics. You may withdraw optional consent through Privacy choices.

Information shared to provide the service

We share information with the parties needed for the relevant service:

• Stripe for checkout, payment processing, applicable tax functions and related transaction operations. See Stripe's Privacy Policy (https://stripe.com/privacy).
• The roaster fulfilling your items for the products, recipient and delivery instructions needed for its shipment. A mixed-roaster order is divided by roaster; each receives the instructions for its own items. Roasters may use their fulfillment providers and carriers to complete delivery.
• Google Cloud and Google Workspace for hosting, order records, operational processing, logs and transactional/support email. Authorized operations staff may receive internal copies of fulfillment correspondence.
• Google Analytics or Google Gemini, only as described in the optional-feature sections below when enabled and used.
• Authorities, professional advisers or other recipients where reasonably necessary for legal obligations, resolving disputes or protecting people and the service, subject to applicable law.

Browser storage and optional analytics

Browser storage helps retain your cart and privacy choices. You can clear that storage through your browser; doing so may remove your cart and saved preferences.

If Brew Lab analytics is enabled, Google Analytics loads only after you accept analytics in Privacy choices. Declining leaves the brewing tools available. You can reopen Privacy choices to withdraw consent and stop future analytics collection through that integration.

The integration sends allowlisted brewing actions, recipe identifiers, methods and canonical Brew Lab page paths. It is designed to exclude raw search text, AI chat text, email addresses and checkout session URLs from analytics events. Google may also process technical information associated with analytics requests. Advertising features are not enabled in this integration.

Withdrawing consent does not erase information already processed by a provider. Clearing browser storage can also reset the remembered consent choice. Stripe checkout and its optional services operate separately under their own notices.

Optional AI brewing coach and chat history

If the coach is enabled and you submit a question, the current reviewed recipe, your message and up to three recent exchanges are sent through our server to Google Gemini. This is needed to answer in the context of your conversation. Avoid personal, confidential or payment information. The pilot does not browse the web or process orders for you.

Conversation history stays in the current page session unless you choose Remember on this device. That option stores up to 12 recent exchanges in this browser, with a 14-day expiry refreshed when the saved conversation is loaded or updated. It does not synchronize across devices. Clear conversation removes the browser copy. Closing or clearing the panel cannot recall a request already sent to Google.

The application does not deliberately save chat transcripts in its server database or application logs. It keeps a signed browser identifier and daily usage counters to enforce limits. Provider processing, operational records and retention are governed by the configured service and applicable terms; local history deletion does not delete those records. See Google's Gemini API terms (https://ai.google.dev/gemini-api/terms).

Retention and security

We keep personal information only as long as needed for fulfillment, support, security, accounting, legal obligations and resolving disputes. The period depends on the record and its purpose. Information that is no longer needed is deleted or anonymized, subject to applicable legal requirements and backup handling.

Access restrictions and other safeguards are used to protect information. No website, transmission method or storage system can guarantee absolute security.

Your choices and requests

You can decline optional analytics, clear browser storage, choose not to use AI, and avoid including unnecessary personal information in support messages.

Depending on applicable law, you may have rights to request access, correction, deletion or other handling of personal information. Email support@solution.coffee. Our support process will target a response within one month of receiving a privacy request. If applicable law permits an extension, we will explain the reason and expected response date within the initial response period. We may need proportionate information to verify a request. Some records may need to be retained for transactions, legal obligations or dispute resolution. Where required, we will explain a refusal and any available appeal process.

Where applicable law provides these rights, you may also request restriction of processing or a portable copy of your information, object to processing, withdraw consent without affecting earlier lawful processing, or complain to your data protection authority. We assess requests under the law that applies to you.

Children, locations and updates

Our store and brewing services are not directed to young children. Contact us if you believe a child has provided information that we should address. AI access must satisfy the provider's applicable age and region restrictions before it is enabled; an ordinary store visit does not establish AI eligibility.

Our service providers may process information in the United States and other locations where they operate, subject to applicable arrangements and law.

This policy takes effect when published. We will update the date above when practices change and provide any notice required by applicable law.