Privacy Policy

Origins Coffee ("we," "us," "our") respects your privacy and wants you to understand exactly what we do with any information you share with us. This page explains it in plain English. If anything's unclear, email us — we'll answer.

1. What we collect

The short version: we collect the bare minimum we need to run the business and stay in touch with you. Specifically:

• Email address — only when you give it to us, either by signing up for our newsletter on the website or by joining the launch waitlist in our mobile app.
• Order information — if you place an order through our point-of-sale system or (when available) our mobile app, we keep a record of what you ordered, when, the total, and the payment method (cash or card). We do not store full card numbers — those are handled by our payment processor, Stripe, never by us.
• Basic site analytics — anonymized data about which pages people visit, served by Amazon CloudFront. We don't run third-party tracking pixels, ad networks, or social-media trackers.

We don't collect your physical address, phone number, or any other personal identifier unless you specifically choose to share it with us (for example, in a contact form message).

2. How we use it

• Email: we email you about the things you signed up for — newsletter updates, the day the app goes live, occasional shop news. Every email has an unsubscribe link.
• Orders: we use order history to run the business, ring up totals, print receipts, and improve our menu over time.
• Analytics: we look at aggregate site traffic so we know which pages are useful and which need work.

3. Who we share it with

No one. We don't sell your information. We don't trade it. We don't share it with advertisers, data brokers, marketing companies, or anyone else.

The only exceptions are the small set of service providers we need to actually run the business:

• Amazon Web Services (AWS) hosts our website, our database, and our backend. Your email and order history live in an AWS DynamoDB database under our control.
• Stripe processes card payments. When you pay by card, your card information goes directly to Stripe, encrypted in transit. We see only the last four digits of your card and the amount you paid.
• Apple and Google — if you download our mobile app from the App Store or Google Play, those platforms have their own privacy policies covering how they handle the download and any in-app purchases.

Each of these companies has agreed to keep your data confidential and use it only for the purpose we've engaged them for.

4. Cookies and tracking

Our website uses minimal cookies — essentially just the ones needed to remember whether you've seen the intro video and to keep you logged in to the admin panel if you're a staff member. We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking.

5. Data security

Your data is stored on AWS infrastructure with industry-standard encryption (TLS in transit, AES-256 at rest). Our admin panel is protected by a PIN. Card payments never touch our servers — they go directly to Stripe over an encrypted channel.

That said, no system is 100% secure. If we ever discover a breach affecting your data, we'll notify you within 72 hours and tell you what was exposed and what we're doing about it.

6. Children's privacy

Our services aren't directed at children under 13. We don't knowingly collect information from children under 13. If you believe we have, please email us and we'll delete it immediately.

7. Your rights

You can:

• See what we have on you — email us and we'll send you everything tied to your address.
• Delete it — email us and we'll wipe your record from our database within 7 days.
• Unsubscribe — every email has a one-click unsubscribe. Or just email us, we'll handle it.
• Correct mistakes — if any data we have on you is wrong, email us and we'll fix it.

California, Virginia, and Colorado residents have additional rights under their state privacy laws — we honor those same rights for everyone, regardless of where you live.

8. Mobile app permissions

When you install our mobile app from the App Store or Google Play, it may request the following permissions:

• Internet access — to talk to our servers
• Notifications (optional) — only if you opt in, used to tell you when your order is ready

We do not request access to your location, contacts, photos, or microphone.

9. Changes to this policy

If we ever update this policy, we'll post the new version here and update the "last updated" date below. Material changes will also be communicated by email to anyone on our list.

10. How to reach us

Privacy questions, deletion requests, or anything that doesn't make sense above:

Email: Info@OriginsCoffee.org
Mail: Origins Coffee · 2890 S Main St · Middletown, Ohio 45044