Privacy Policy

What this is

RoasterBridge is inventory and production software for coffee roasteries. This page explains what the service stores on your behalf and what you can do about it.

What we store

• Account details — the email address you sign in with, your display name, and an optional profile photo.
• Shop data — everything you enter to run the loop: coffees, recipes, products, roast and packaging entries, inventory counts, costs and prices, orders, and the customer names and delivery details you type or dictate onto order slips.
• Operational records — timestamps and the user who logged each entry, so the ledger can be audited and corrected.

Who can see it

Your shop's data is visible only to people you have invited to your shop. Every record is tagged with your shop and the database refuses reads and writes across shops. Nobody at another roastery using RoasterBridge can see your coffees, costs, or customers.

Operators of the service can access data only when necessary to fix a fault or when required by law.

What we do not do

• We do not sell your data, and we do not share it with advertisers.
• We do not use your shop's data to train models for anyone else.
• We do not send marketing email to your customers.

Shopify connections

If you connect your Shopify store, RoasterBridge receives only what it needs to turn paid Shopify orders into Order Slips: your store's address, Shopify order numbers and identifiers, the product and variant names and identifiers on each order line, quantities, payment/cancellation/refund state, and synchronization timestamps.

We do not request, require, or intentionally store Shopify shopper names, emails, phone numbers, or billing or shipping addresses. Imported orders sit under one generic "Shopify Online Orders" customer in your shop. Shopify data is used only to create and keep Order Slips, production demand, product matching, and the connection's health in sync — never for advertising, profiling, analytics about your shoppers, or anything else. We never sell Shopify data.

Your Shopify access keys are encrypted before they are stored, are used only by our servers, and are deleted the moment you disconnect or remove the app from Shopify.

Third parties

RoasterBridge runs on managed hosting and a managed cloud database. Data travels over encrypted connections (HTTPS/TLS); Shopify access keys are additionally encrypted with AES-GCM before storage; the managed database encrypts data on disk; and every record is tagged with your shop so the database itself refuses reads and writes across shops. If you switch on optional features — assistant dictation, push notifications — the relevant data is passed to those providers only to perform that task. Order slips are not archived to any outside cloud drive; they leave the app only when you download them as PDF or CSV.

Keeping and deleting

We keep your data only as long as it serves you:

• Your shop's data — kept while your shop exists. You can download everything as CSV at any time from Records → Export, and an admin can permanently delete the entire shop from the same page. Deletion is immediate and includes all Shopify integration data.
• Shopify connection — access and refresh keys are deleted immediately when you disconnect or the app is removed from Shopify. Shopify-only sync metadata (product matches and order sync records) is removed 30 days after that. The Order Slips, inventory, and delivery history created while connected stay in your shop as your business records.
• Operational logs — Shopify connection attempts and notification records are kept 90 days; abandoned connection attempts are deleted after one day.

Contact

Questions about privacy, export, or deletion: support@roasterbridge.com