Last updated: August 9, 2026
Who we are and how to contact us
RoastEval is responsible for the personal information it handles through this website and its coffee-evaluation service. For privacy questions or requests, email hello@roasteval.com or use the request form below.
Information we collect
We collect the information needed to operate the service: account and contact details, roastery and coffee-submission information, shipment tracking details, payment and transaction references, support messages, and the content of evaluations. Payment-card details are processed by Stripe and are not stored by RoastEval.
Our website and service providers may also process limited technical information needed for security and service delivery, such as IP address, device/browser details, log information, and cookies or similar technologies where used.
Why we use information
We use personal information to create and secure accounts; process payments; manage submissions, shipping, reports, and customer support; publish public reports you choose to make public; prevent fraud and misuse; meet legal and accounting obligations; and improve and protect the service.
Where the GDPR applies, we process information as needed to perform our contract with you, comply with legal obligations, pursue legitimate interests such as service security and improvement, or with your consent where required.
Sharing and international processing
We share information only as needed with providers that help us run the service, including Supabase for authentication and data storage, Stripe for payments, and Resend for transactional email. We may also disclose information when required by law or to protect rights, safety, and security. These providers may process information outside your province, country, or the European Economic Area; where required, we use appropriate contractual or other legal safeguards for those transfers.
Retention and security
We keep information only as long as reasonably needed for the purposes described here, including operational, dispute-resolution, legal, and tax obligations. Payment and transaction records are generally retained for up to seven years after the relevant transaction. Public reports may remain published until removed or anonymized where appropriate. We use reasonable administrative, technical, and organizational safeguards, but no online service can promise absolute security.
Your privacy rights
Depending on where you live and applicable law, you may ask us to access or receive a copy of your personal information; correct incomplete or inaccurate information; delete information; restrict or object to some processing; withdraw consent; or receive portable information. You may also complain to your local privacy regulator. We may need to verify your identity and may retain or decline to delete limited information where law or a legitimate exception requires it.
We aim to respond within 30 days under Canadian privacy law and within one month where the GDPR applies, subject to permitted extensions or exceptions. RoastEval does not make decisions about you solely through automated processing that produces legal or similarly significant effects.
Children and policy updates
RoastEval is not directed to children, and you should not use the service if you are under the age required to form a contract where you live. We may update this policy as our practices or legal obligations change. The current version will always be posted on this page.