Privacy Policy
Last updated June 30, 2026
This Privacy Policy explains how Herb's House Coffee (“Herb's House Coffee,” “we,” “us”), the data controller, collects, uses, shares, and protects your personal information. If you have any questions or want to exercise your privacy rights, contact us at sales@herbshousecoffee.com.
1. Scope
This policy applies to the Herb's House Coffee app and to “Herb's at the Curb,” our members-only, subscription-based mobile coffee service. It covers the information we handle when you create an account, join a membership, place orders, receive delivery, and contact support.
2. Information we collect
We collect the following categories of data:
- Account identity — your phone number, email, and name. We use phone-based one-time passcodes (OTP) to sign you in.
- Order & delivery data — your delivery address, order history, and the phone number attached to an order.
- Payment data — handled by our payment processor. We never receive or store your full card number.
- Precise location — used on your device only, to check how close you are for pickup and proximity. Your coordinates are not stored on or transmitted to our servers.
- Device & push data — your push notification subscription keys and browser user-agent, stored per device so we can send order and service notifications.
- Support-chat content — the messages you send our support assistant, which may be processed by our AI provider.
- Diagnostics & usage — error and performance data, which we configure not to include personal information (see “Diagnostics” below).
3. Service providers and sub-processors
We rely on the following third-party service providers to operate the app. Each receives only the data needed for its purpose, and is bound to protect it.
| Provider | Purpose | Data it receives or holds |
|---|---|---|
| Clerk | Identity & authentication | Phone number, email, name, and membership/role. |
| Supabase | Primary data hosting (all app data) | Orders, delivery addresses, chat, membership cache, and push subscriptions. |
| Stripe | Payments, subscriptions, tips, and sales tax | Card and financial data (Stripe holds the card number — we never receive it), subscription state, tips, and tax. |
| Sentry | Error & performance diagnostics, masked session replay | Crash, error, and performance diagnostics. We configure Sentry not to send personal information (though limited data could incidentally appear in an error report). |
| Web push (VAPID) | Browser and device push notifications | Push endpoint, subscription keys, and browser user-agent, per device. |
| Vercel | Hosting, logs, and cookieless analytics & speed insights | Request and log metadata (such as IP address and user-agent) and aggregate usage metrics. |
| UploadThing | Image hosting for staff-uploaded menu and hero images | Uploaded image content (not customer personal information). |
| Google Maps | Geocoding delivery addresses | Your delivery address, converted to map coordinates for delivery and proximity. |
| Anthropic (via Vercel AI Gateway) | Support-chat AI assistant | The support-chat message content you type. |
4. How we use your information
We use your information to:
- Provide and operate the app and the Herb's at the Curb service.
- Process your orders, payments, subscriptions, and tips.
- Schedule, dispatch, and deliver your orders.
- Send you order updates and service notifications.
- Provide customer support.
- Diagnose problems, maintain security, and prevent abuse.
- Comply with our legal, accounting, and tax obligations.
5. Precise location
When you allow it, the app uses your device's precise location to verify how close you are for pickup and proximity. This check happens entirely on your device — your precise coordinates are not stored on or transmitted to our servers. This is different from your delivery address, which you provide to us: we do store your delivery address and send it to Google Maps to convert it into map coordinates for delivery.
6. Diagnostics
To keep the app reliable, we collect error and performance diagnostics through Sentry. We configure these diagnostics not to include personal information such as your phone number, email, or address. Because diagnostics capture the technical context of an error, limited personal information could still appear incidentally, and we take steps to minimize it.
7. How long we keep your information
We keep your information while your account is active and for as long as required to meet our legal, accounting, and tax obligations. Some specific examples: certain payment event logs are minimized after roughly 30 days, and tip records are retained for approximately three years to satisfy wage-and-hour recordkeeping requirements. When information is no longer needed, we take steps to delete or de-identify it.
8. Your privacy rights
Depending on where you live (including under the GDPR and the CCPA), you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.
- Access & correction — request a copy of your data or ask us to correct it.
- Deletion / erasure — you can delete your account from within the app, which begins the removal of your personal data; see our Terms for how membership and benefits are affected.
- Portability — request a copy of your data in a portable form.
- No sale of personal data — we do not sell your personal information.
- Non-discrimination — we will not discriminate against you for exercising your rights.
To exercise any of these rights, use the account controls in the app or contact us at sales@herbshousecoffee.com or through our Support page.
9. Cookies & analytics
We use Vercel Analytics and Speed Insights to understand how the app performs and is used. These are cookieless and do not track you across other websites.
10. Children
The app is not directed to children under 13 (or under 16 where a higher age applies), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will remove it.
11. International data transfers
We and our service providers may process and store your information in the United States and other countries. Where required, we rely on appropriate safeguards for these transfers.
12. Changes & contact
We may update this policy from time to time. When we do, we will revise the “Last updated” date above and post the new version here. For any privacy questions or requests, contact us at sales@herbshousecoffee.com.