Privacy Policy

Public lead-generation, careers, event-registration and public-submission forms are currently disabled. We may handle:

• information you voluntarily send by email or WhatsApp, including your name, contact details, message and attachments;
• technical information generated during a visit, including IP address, browser/device information, requested page, date/time, referring page and security/server logs;
• if you accept optional analytics, page views, approximate location, device/browser category, referral source and measured interactions; and
• records needed to handle privacy, grievance, correction, copyright or legal requests.

Please do not send passwords, payment details, government identifiers, health information or other sensitive information unless we specifically request it through an appropriate secure process.

The following forms are disabled. They will not reopen until the form itself displays the applicable notice, recipient and retention period and the required safeguards are active:

• B2B enquiry: required name, email, phone, business type and equipment interest; optional brand and budget. Used by SimplifyCoffee and an identified or suitable equipment partner to answer the request. Intended retention: 12 months after the last meaningful interaction, subject to an absolute 24-month review cap.
• Event registration: required name, email and phone plus the event/city. Stored in Supabase and Google Sheets and shared with the named organiser only to administer the event. Intended retention: 90 days after the event.
• Event submission: required submitter name/email and public event details; phone, date, URL and notes may be optional. Private contacts are used for review and are not published. Rejected submissions are intended to be removed within 90 days; contact data for published events within 12 months after the event or last interaction.
• Employer listing: the employer contact email and optional phone stay private for verification. Approved role, employer, location, description and apply-link details may be public for 30 days. Private verification contacts are intended to be removed within 12 months after expiry or rejection.
• Talent Network: required name, email and phone; optional city, role, job type, experience and summary. Stored privately in Supabase and Google Sheets for six months. A profile is shared with a specific employer only after separate candidate approval.

When a form is enabled, we also create one-way hashes of the IP address, email and, where provided, phone and event identifier to prevent duplicate or abusive submissions. Those hashes are retained for seven days. Form intake is restricted to adults unless a separate guardian process is introduced.

• Operate, secure, troubleshoot and improve the website.
• Understand aggregated website usage using consent-respecting analytics signals.
• Respond to messages, corrections, complaints, privacy and partnership enquiries.
• Prevent abuse, fraud and security incidents.
• Maintain affiliate, editorial and legal records and comply with valid legal process.

We do not enrol people who contact us into newsletters or unrelated promotional campaigns without separate permission.

Vercel Web Analytics provides aggregated, cookie-free counts of page views and daily visitors without persistent visitor identifiers. It runs independently of the optional Google Analytics choice, and query strings and fragments are removed before page-view events are sent.

Google Analytics runs in consent mode with analytics and advertising storage denied by default. Before acceptance, Google may receive limited cookieless measurement signals. If accepted, Google may also use analytics cookies and receive online identifiers, IP-derived information, page paths and device/browser information. Our page-view implementation sends the page path without query strings or fragments and keeps Google Signals and advertising-personalisation signals disabled. Do not include personal information in URLs or searches.

The site may request resources from Google Fonts, YouTube, image hosts, sellers and event organisers. Those third parties may receive technical request information under their own privacy terms. See our Analytics and Cookies Notice.

Some links lead to independent seller, organiser or partner websites and may be affiliate links. The destination handles information under its own policy. SimplifyCoffee does not control its checkout, payment, delivery, warranty or support practices and does not send your private messages to a seller merely because you click a link.

We may disclose limited information:

• to providers that host, secure or operate the site, including Vercel for website hosting, logs and anonymous Web Analytics, Supabase for database and administrator-authentication services, Google Analytics after analytics consent, and Google Sheets or Google Drive only for a form whose collection notice expressly identifies that destination;
• where you ask us to communicate with another person;
• to professional advisers where reasonably necessary and confidential;
• to protect users, the website or legal rights; or
• where required by applicable law, court order or valid government request.

We do not sell personal information.

Some service providers may process information outside India. We use established providers and will comply with applicable Indian restrictions on cross-border processing. Internet transmission and overseas processing cannot be guaranteed risk-free.

• Ordinary contact messages: intended maximum of 12 months after the last meaningful interaction.
• Security and ordinary server logs: intended maximum of 30 days, unless an incident requires longer preservation.
• Google Analytics data: controlled through Google Analytics settings; the intended maximum is 14 months.
• Privacy, grievance and takedown records: intended maximum of three years after closure.
• Tax, contractual, dispute, fraud-prevention or legally required records: for the applicable required period.

We are implementing the controls needed to enforce this schedule and will update this Policy if actual provider settings differ. We may retain anonymised or aggregated information that no longer identifies a person. Before any public form reopens, this Policy and its form notice will state the specific retention period.

We use measures proportionate to the information handled, including access restrictions, managed hosting, secret management, software updates and backups where appropriate. No website, email service or internet transmission is completely secure.

If we become aware of unauthorised access, loss, disclosure or misuse involving personal information, we will act to contain and assess it, preserve an appropriate incident record, correct the cause and obtain legal advice where needed. We will notify affected people and the relevant authority when applicable law or a defensible risk assessment requires it. Reports can be sent to the privacy and grievance email below with “Security Report” in the subject.

You may ask us to confirm, correct or delete information you provided, withdraw a previous consent, or raise a privacy grievance. Email letssimplifycoffee@gmail.com with “Privacy Request” in the subject. We may use limited information to verify the request but will not ask for your password. See the request process.

The site is a general coffee-information resource. A person under 18 should not send personal information without a parent or lawful guardian. We do not knowingly profile children or direct behavioural advertising to them.

We may update this Policy when services or legal obligations change and will publish the revised date. Material changes affecting existing information will be handled as required by law.

Operator: Vivek Vishwanathan, operating SimplifyCoffee personally in India
Privacy and grievance email: letssimplifycoffee@gmail.com
WhatsApp: +91 9353610563
Security reports: use the subject “Security Report” without exploit code or personal data in the first message.