Privacy notice

Effective July 30, 2026. BaristaUp is a California-based service for personal, noncommercial home-coffee ordering.

We collect an owner's name, email address, sign-in method, legal acceptance, sessions, security events, bar settings, menu, invitations, and orders. Email sign-in also uses a salted password verifier, verification status, short-lived signup or recovery records, and pseudonymous rate-limit keys. We receive a password over encrypted HTTPS only long enough to derive or check its verifier. We never store the plaintext password.

Guests do not need accounts. We collect their drink selections, order number, status, optional alert details, and limited device and network security data. We do not request guest names, addresses, or payment information. The invited owner receives the order details.

We use data to create and secure accounts, verify email control, authenticate owners, recover access, operate private ordering, prevent abuse, enforce beta limits, troubleshoot, measure aggregate service health, and deliver essential account or security messages.

Google or BaristaUp handles new sign-in. ChatGPT may continue to authenticate an existing linked session while the legacy compatibility path remains active. OpenAI Sites and Cloudflare provide hosting and database infrastructure. Cloudflare Turnstile helps detect automated signup activity. Resend delivers verification and recovery email and normally retains email data for 30 days. Grafana receives bounded operational telemetry without passwords, codes, tokens, or raw email addresses. Optional notification providers deliver guest alerts.

Unverified signup data normally expires within 15 minutes. Verification records and pseudonymous abuse controls remain briefly for replay protection, usually no more than 24 and 48 hours respectively. Orders are normally removed from the active database after 30 days. Sessions last up to 30 days. Active account records remain until deletion. Cloudflare recovery history can retain an earlier database state for its Time Travel window. Independent mailbox copies and provider backups follow their own schedules.

We do not sell personal information, use targeted advertising, send marketing through verification email, or enable email open or click tracking. Owners can download their data, change account information, reset a password, sign out, or permanently delete the active account in Settings. Deletion revokes sessions and removes tenant and authentication records from the active database.

BaristaUp is not directed to children under 13, and owner accounts are for adults 18 or older. We will post material changes here and update the effective date. Contact support@baristaup.com for access, correction, deletion, or provider-erasure questions not available in Settings.