Privacy Policy

The short version

Let's Get Coffee makes thoughtful 1:1 introductions inside organizations, schools, communities, and events. To do that well, we need a little information about you: your interests, who you'd like to meet, and how often. We use it to make good matches, and for almost nothing else.

We do not sell your personal data. We do not run third-party advertising trackers. Participation is opt-in, and you can edit or delete your information at any time.

What we collect

We collect only what the product needs to introduce you to the right people:

• Account details: your email address. You sign in with a one-time email code or with Google, Microsoft, or Slack. In that case, that provider shares your name, email, and profile photo to create your account. We never see or store your password.
• Profile information you choose to share: your name, interests, what you're hoping for, how often you'd like to meet, your general location or team, and an optional profile photo.
• Membership: the organization, community, or event you've joined, and any groups within it.
• Activity: the matches you're offered, meetings you schedule, and the quick feedback you leave afterward (which makes your next match smarter).
• Calendar availability (only if you connect a calendar): we read free/busy times to suggest meeting slots. We don't read the contents of your events.
• Basic technical data: standard logs your browser sends, used to keep the service running and secure.
• Usage analytics: which pages you visit, for how long, what you click, and how fast pages load, so we can see what works and fix what doesn't. See "Usage analytics" below.

How we use it

Your information is used to run the product you signed up for:

• To make matches and explain why two people were paired.
• To schedule meetings and send the introductions, reminders, and notifications you've asked for.
• To improve our matching over time and keep the service reliable and secure.

Usage analytics

We measure how people use Let's Get Coffee with our own first-party analytics, not a third-party tracker. It tells us which pages help, where people get stuck, and what is slow, so we know what to improve.

If you're signed in, your visits are linked to your account so we can understand how members use the product. Only a small number of Let's Get Coffee staff can see this, and viewing it is logged.

Your organization's organizers see anonymous totals about their members, for example how many were active this month or used Discover. These totals count how members use Let's Get Coffee as a whole, so if you belong to more than one community, your activity can be part of each one's totals. Organizers never see who did what, and any number that covers fewer than 5 people is hidden so no one can be singled out.

• What's recorded: the pages you visit (never the contents of your messages or profile), time on each page, how far you scroll, clicks on buttons and links, forms started and sent, errors, page speed, and your device and browser type.
• Location: your approximate location (country, region, city) from your connection. We keep only a shortened network prefix of your IP address, never the full address.
• Privacy signals: if your browser sends Global Privacy Control or Do Not Track, your visits are counted anonymously, never linked to your account, and never located below country.
• Retention: analytics older than 180 days is deleted automatically.

Who can see your information

Within your organization, the people you're being introduced to can see the profile details you've chosen to share. That's the whole point of an introduction. Visibility is deny-by-default: nothing is shown unless it's meant to be.

A profile photo, if you add one, is for recognition only. It's shown on an introduction or your own profile so people can find each other. It is never used as a matching signal, and never appears on the screen where someone chooses whether to meet you.

Organizers of your organization can see your name, email, role and department, and how you're taking part, including your status, whether you're paused, and how many introductions you've had, so they can run the program. For your regular introductions, that is all they see. They do not see who you were introduced to, the content of your conversations, or the feedback you leave. Those coffee chats stay between you and the person you meet.

Events are the one exception, because someone has to arrange the room. If you join an event, the person running it can see who was seated together in each round, including your name and the people you were paired with, since they built the seating chart. Even then, they never see how the coffee went: your conversation and the feedback you leave stay yours.

Service providers we rely on

We use a small set of trusted providers to operate the service. They process data on our behalf, under agreements that limit them to that purpose:

• Supabase: secure hosting of our database, authentication, and file storage.
• Resend: delivery of transactional email (sign-in codes, invitations, reminders).
• Google, Microsoft, and Slack: if you sign in with them (they confirm your identity and share your name, email, and photo) or connect a Google/Outlook calendar (to read your availability).
• Anthropic, in two cases. If you choose to fill in your profile from a LinkedIn PDF or résumé, the file is sent to Anthropic's Claude once to suggest profile fields, which you review before anything is saved, and we never store the file. If you report a bug or an account problem through Report a problem or concern, a copy with your contact details and names removed may be sent to Claude once to write a short summary for our engineers; reports about a person or a privacy concern are never sent. In both cases Anthropic processes the text under its commercial terms, which don't allow using it to train its models.

Your choices and rights

You stay in control of your information:

• Edit or remove your profile details at any time from your profile.
• Disconnect a connected calendar whenever you like; access is revoked immediately.
• Ask us to delete your account and associated personal data.
• Adjust how often you participate, or pause entirely.

Data retention

We keep your information for as long as your account is active, and remove personal data when you delete your account or ask us to, except where we're required to retain limited records for legal or security reasons.

Cookies and local storage

We use the minimum necessary: a session cookie to keep you signed in, a small browser preference (for example, your light/dark theme choice), and a random visit identifier in your browser's local storage for usage analytics, which you can turn off above. We do not use third-party advertising or cross-site tracking cookies.

Security

We protect your data with encryption in transit, scoped access controls, and least-privilege practices. You can read more on our Security page. No system is perfectly secure, but we work to keep your information safe and to be honest about how.

Children

Let's Get Coffee is intended for adults and is not directed at children. We don't knowingly collect personal information from anyone under the age required by law in their region.

Changes to this policy

If we make a material change, we'll update the date at the top of this page and, where appropriate, let you know directly. Continuing to use the service after a change means you accept the updated policy.

Contact us

Questions about your privacy, or want to exercise any of the rights above? Email hello@letsgetcoffee.app and we'll help.