Privacy Policy

1. Who We Are

CoffeeMatch ("we", "us", "our") is a tool for team connection matching. Our contact email is hello@coffeematch.co.

2. What Data We Collect

• Account data: your name, email address, job title, organisation, and optional bio, provided when you register.
• Group data: group names, descriptions, member lists, and match history.
• Usage data: basic logs of actions (e.g. group created, match run) for debugging and abuse prevention. We do not use third-party analytics trackers.
• Payment data: if you subscribe to a Pro plan, your payment is handled by Stripe. We store only your Stripe customer ID and subscription status — we never see or store your card details.

3. How We Use Your Data

• To operate the matching service and send match notification emails.
• To manage your account and subscription.
• To prevent abuse and investigate security incidents.
• We do not sell your data or use it for advertising.

4. Legal Basis (UK/EU Users)

We process your data on the basis of contract (to deliver the service you signed up for) and legitimate interests (security, preventing abuse). Where we require your consent (e.g. marketing emails), we will ask for it separately.

5. Who We Share Data With

We share data only as necessary to operate the service:

• Email delivery provider — to send match notification emails to group members.
• Stripe — to process Pro plan payments. Stripe's privacy policy applies to data they handle.
• We do not share your data with any other third parties.

6. Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Match history may be retained in anonymised form for longer.

7. Your Rights

Under UK GDPR and equivalent laws, you have the right to:

• Access a copy of the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, email hello@coffeematch.co. We will respond within 30 days.

8. Cookies

We use a single session cookie to keep you logged in. We do not use tracking or advertising cookies.

9. LinkedIn and Public Network Data

If you use the LinkedIn OAuth login option, we receive your name and email address from LinkedIn. We do not access your LinkedIn connections, messages, or any other LinkedIn data beyond what is needed to create your account.

Public discover groups list only the group name, description, and approximate member count — never individual member names or email addresses.

10. Changes to This Policy

We may update this policy. We will notify you by email of material changes at least 14 days before they take effect.

11. Contact and Complaints

For privacy questions, email hello@coffeematch.co. If you are unhappy with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.