Legal
Privacy Policy
coffeeDB (“we”, “us”, “our”) operates the website coffeedb.pro and the coffeeDB Shopify application. This policy explains what data we collect, how we use it, and your rights.
1. Data we collect
Website visitors
The coffeeDB website is a public, read-only directory. We do not require registration or collect personal data from visitors browsing roaster profiles or coffee lots. We use Cabin for privacy-preserving analytics — no cookies, no cross-site tracking, no personal data stored.
Shopify merchants (the coffeeDB app)
When a merchant installs the coffeeDB app, we collect and store:
- Shop domain — e.g.
yourstore.myshopify.com - Access token — an offline OAuth token to read and receive webhooks for your products. Stored encrypted in Redis.
- Product data — title, description, price, images, and product ID for products in your Shopify store. Used to create and update coffee lot entries in the coffeeDB catalogue.
- Roaster profile fields — name, city, country, website, Instagram, and description that you optionally fill in within the app.
We do not collect customer data, order data, or payment information from your Shopify store.
2. How we use your data
- Syncing your Shopify products to the coffeeDB public catalogue at coffeedb.pro
- Displaying your roaster profile and coffee lots to visitors of coffeedb.pro
- Maintaining the integrity of the catalogue when products are updated or deleted
We do not sell, rent, or share your data with third parties for marketing purposes.
3. Data storage and security
Product and roaster data is stored in a Supabase (PostgreSQL) database hosted on AWS infrastructure in the EU region. Shopify access tokens are stored in a Redis instance with TLS encryption in transit. All data is accessible only to authorised coffeeDB services and administrators.
4. Data retention
When you uninstall the coffeeDB app, your Shopify access token is immediately deleted and your coffee lots are archived (hidden from the public catalogue). Your roaster profile and coffee lot records are retained in our database to preserve catalogue history, but are no longer publicly visible.
To request complete deletion of all data associated with your store, contact us at hello@coffeedb.pro.
5. GDPR — your rights
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
- Access — request a copy of the data we hold about you or your store
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to our processing of your data
To exercise any of these rights, email hello@coffeedb.pro with your store domain and request. We will respond within 30 days.
We also comply with Shopify’s mandatory GDPR webhooks: customer data requests, customer data erasure, and shop data erasure are handled automatically on receipt.
6. Third-party services
| Service | Purpose | Privacy policy |
|---|---|---|
| Shopify | E-commerce platform and app distribution | shopify.com/legal/privacy |
| Supabase | Database hosting (roaster and coffee lot data) | supabase.com/privacy |
| Google Cloud Run | App hosting (Shopify integration server) | cloud.google.com |
| Upstash Redis | Session token storage | upstash.com |
| Cabin | Privacy-preserving website analytics | withcabin.com/privacy |
7. Cookies
The coffeeDB website does not use tracking cookies. The coffeeDB Shopify app uses session cookies required by the Shopify OAuth flow — these are strictly necessary for authentication and are not used for tracking.
8. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of the coffeeDB app or website after changes constitutes acceptance of the updated policy.
9. Contact
Questions about this policy or requests regarding your data:
coffeeDB
hello@coffeedb.pro
coffeedb.pro