Privacy Policy

Last Updated: June 7, 2026.

This Privacy Policy explains how Coffee and Contracts, LLC ("Coffee and Contracts," "we," "us," "our," or "Company") collects, uses, discloses, and safeguards personal information when you access or use our website www.coffeecontracts.com ("Site") and the services provided through our Site (the "Services"). By accessing the Site and/or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our Services. The Site and Services are intended for users who are eighteen (18) years of age and older, and we do not knowingly collect personal information from individuals under such age.

1. KEY TERMS

Personal Information: Information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Sensitive Personal Information: Personal information that reveals a consumer's social security number, driver's license number, state identification card, passport number, financial account information, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, genetic data, biometric data, health information, or information concerning a consumer's sex life or sexual orientation.

Business Purpose: The use of personal information for operational purposes, or other notified purposes, provided the use is reasonably necessary and proportionate to achieve the purpose for which the personal information was collected.

2. INFORMATION WE COLLECT

Personal Information We Collect

We collect the personal information you provide directly to us. For example, we collect personal information when you use our Site and Services; create an account; participate in a contest, promotion, or survey; communicate with us via third-party social media sites; request customer support; or otherwise communicate with us.

The types of personal information we may collect include your name, email address, zip or postal code, billing address, shipping address, phone number, last four digits of the payment card, demographic information, and any other personal information you choose to provide. These categories include the following:

Identifiers

Examples include name, postal address, email address, phone number, IP address, and account username.

Purpose includes account creation, event registration, and communications.

Commercial Information

Examples include purchase history, ticket selections, vendor enrollment details, and payment information.

Purpose includes processing transactions and event administration.

Internet/Electronic Activity

Examples include browsing history, search history, and interactions with our website and apps.

Purpose includes improving user experience and analytics.

Geolocation Data

Examples include approximate location, such as city, state, or region inferred from IP address.

Purpose includes analytics, security, personalization, and improving user experience.

Professional Information

Examples include company name, job title, and professional qualifications for vendors.

Purpose includes vendor verification and business relationships.

Inferences

Examples include preferences, characteristics, behaviors, and attitudes.

Purpose includes personalization and marketing.

Sensitive Personal Information

We limit our collection of sensitive personal information to what is strictly necessary. When we do collect such information, we implement enhanced security measures.

Financial Information: We collect payment card information to process transactions but do not store complete payment card details on our servers.

Demographic Information: We may collect demographic information, such as age or gender, for analytics and reporting purposes, but this information is maintained in aggregated or de-identified form whenever possible.

Information We Collect Automatically

We automatically collect certain personal information about you when you access or use our Services, including the following:

Log Information: We collect information about your use of our Site and Services, such as the type of browser you use, access times, pages viewed, your IP address, and the referring link through which you accessed our Site or Services

Device Information: We collect information about the device you use to access our online Services, including the hardware model and operating system and version.

Transaction Information: When you purchase a subscription or other product or service, we collect information about the transaction, such as subscription plan, purchase details, transaction date, and billing status.

Information Collected by Cookies and Similar Tracking Technologies: We and our service providers use cookies, web beacons, also known as tracking pixels, and similar tracking technologies to collect information about you when you interact with our Site, Services, or emails, including information about your browsing and purchasing behavior. We may combine this information with other information we collect about you and use it for various purposes, such as improving our Site, Services, and your online experience; understanding which areas and features of our sites are popular; counting visits; understanding campaign effectiveness; tailoring our communications with you; determining whether an email has been opened and links within the email have been clicked; and other internal business purposes. For more information about cookies and how to disable them, please see the "Cookies" section below.

Personal Information We Collect from Our Partners and Other Sources

We may obtain personal information about you from other sources and combine that with information we collect about you. For example, we collect personal information from the local postal services' national change of address databases to verify and update mailing addresses. If you interact with us on social media, we will also collect personal information about those interactions.

Information We Receive from Instagram

If you choose to connect your Instagram Business account to our Services, we may access certain information from your Instagram account through the Instagram Graph API after you authorize the connection through Instagram/Facebook Login.

This information may include your Instagram account ID, username, profile picture, account metadata associated with your Instagram Business account, Instagram analytics, and post performance information.

We use this information to connect your Instagram Business account to your Coffee & Contracts account, display basic account information, provide analytics, insights, recommendations, and features that rely on Instagram account data.

We do not sell Instagram data or use Instagram data for advertising purposes.

We may share Instagram-related information with trusted service providers who process information on our behalf, or with third-party services you authorize, such as AI assistants or MCP connectors, where necessary to provide the requested functionality.

We retain Instagram account data only as long as necessary to provide the Services requested by you. If you disconnect your Instagram account or delete your Coffee & Contracts account, associated Instagram data will be deleted or anonymized within a reasonable time period.

To request deletion of data associated with your Instagram account, you may remove the app from your Facebook/Instagram account settings or contact us at [email protected].

We implement reasonable administrative, technical, and organizational measures to protect information collected through Instagram APIs. Our use of Instagram data complies with the Meta Platform Terms and Developer Policies.

Personal Information We Derive

We may derive personal information or draw inferences about you based on the other types of personal information we collect. For example, we may infer your location based on your IP address, or that you are interested in purchasing a certain product based on your browsing behavior on our Services.

3. HOW WE USE YOUR INFORMATION

We use personal information to provide and improve the Site and Services, process transactions and payments, maintain and update accounts, communicate with you, including service-related announcements, respond to inquiries and support requests, provide technical support and troubleshooting, analyze usage patterns, conduct research and development, test new features, measure effectiveness, create aggregated or de-identified data sets, prevent fraud and enhance security, enforce this Privacy Policy and our Terms of Use, and comply with legal obligations. We also use personal information for internal purposes such as tracking orders, analyzing preferences, noting trends and statistics, internal accounting and administration, administering sales records, and enhancing customer service and product options.

We may also use personal information to enable user-authorized integrations, connectors, AI-powered features, and third-party tools that you choose to connect to the Services.

Use of AI-Powered Features

We may offer features that use artificial intelligence to generate content, recommendations, captions, or other outputs based on information you provide.

When you use these features, we may process inputs you provide, such as prompts, preferences, content, profile information, or related context, to generate outputs within the Services.

We may use trusted third-party service providers to support these features. These providers process information on our behalf to provide the requested functionality.

We do not use your prompts, inputs, or generated outputs to train our own proprietary AI models, and we do not sell your AI inputs or outputs for advertising purposes.

4. CONSENT AND YOUR CHOICES

We collect personal information with your consent in connection with activities such as opening an account, purchasing and delivering products, and receiving special offers, and by communicating with us, including by email, and completing online forms. You consent to the collection of the personal information you provide.

5. MARKETING COMMUNICATIONS AND PROMOTIONAL MATERIALS

Opt-In Consent for Marketing

We will only send you advertising, promotional materials, newsletters, and other marketing communications if you opt in to receive such materials through a clear affirmative mechanism, such as checking a box.

SMS/Text Messages/Email

By providing your mobile phone number or email address and opting in where required, you consent to receive informational, transactional, marketing, and other communications from us, including SMS/text messages and emails. Consent to marketing communications is not required to purchase or use the Services.

Managing Marketing Preferences

You may opt out of marketing communications at any time by using the unsubscribe or manage-preferences link in a marketing email, contacting us at [email protected], or replying stop to a text message, if applicable, and we will process requests promptly, which may take up to 10 business days to fully implement across our systems. We do not sell personal information to third parties for their direct marketing purposes, but we may share information with service providers who help deliver marketing campaigns and analyze effectiveness, subject to contractual restrictions.

6. COOKIES AND TRACKING TECHNOLOGIES

What Cookies Are and How We Use Them

We use cookies, web beacons, pixel tags, and other tracking technologies, collectively called cookies, to recognize your browser, remember information you access, simplify interactions, streamline transactions, improve functionality and user experience, increase security, and analyze Site and Services usage. Cookies may be session cookies, lasting only for one browser session, or persistent cookies, remaining until deleted.

Types of Cookies We Use

We may use the following categories of cookies:

Necessary Cookies: These are essential cookies necessary for Site and Services functionality and cannot be disabled.

Analytics Cookies: These help us understand how you use our Site and Services so we can improve your experience.

Advertising Cookies: These are used to show you relevant ads and measure their effectiveness.

Personalization Cookies: These are used to remember your preferences and provide personalized content.

Information Collected Through Cookies

Information collected through cookies may include IP address and device information, browser type and settings, operating system, referring website, date and time of visits, pages viewed and features used, links clicked and actions taken, geographic location at the city/state level, search terms used to reach our website, and interaction with advertisements.

7. PURPOSES FOR USING TRACKING TECHNOLOGIES

We use tracking technologies for essential purposes, such as authentication, preferences, security, fraud prevention, processing transactions, and maintaining functionality; analytical and performance purposes, such as analytics, debugging, testing, internal research, and statistics; personalization purposes, such as customizing content and recommendations; and marketing and advertising purposes, such as delivering and measuring ads and building interest profiles.

8. THIRD-PARTY TRACKING TECHNOLOGIES

We may allow third parties, such as analytics providers, advertising networks, social media platforms, payment processors, customer support providers, content delivery networks, and anti-fraud/security providers, to place cookies and use tracking technologies to collect information about online activities over time and across different websites, apps, and devices. The information collected by these third parties may include device information, usage data, location information, demographic information, technical information, and advertising identifiers, such as Apple's IDFA or Google's Advertising ID.

9. YOUR CHOICES AND CONTROLS

You can manage cookies through your browser settings, including deleting cookies, blocking cookies, and receiving notifications when cookies are set, but blocking or deleting cookies may impair Site or Services functionality.

Our systems do not currently recognize do not track signals, but we honor opt-out preference signals sent via Global Privacy Control (GPC) as a request to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information as defined under applicable privacy laws.

10. SHARING AND DISCLOSURE OF INFORMATION

Service Providers and Transactional Disclosures

We may share personal information with third parties that provide services on our behalf, including payment processing and shipping, and such third parties have limited access to personal information to help complete transactions and are not authorized to use it for their own promotional purposes. We may also share personal information with service providers for hosting, data analysis, email delivery, customer service, and marketing assistance.

Other Categories of Third Parties

We may share personal information with affiliates and subsidiaries, business partners, advertising partners, analytics providers, and social media platforms, for purposes described in this Privacy Policy, including providing and maintaining services, personalizing experiences, analyzing and improving services, communicating with you, and advertising and marketing.

Third-Party AI Connectors and MCP Integrations

We may allow you to connect your Coffee & Contracts account to third-party AI assistants, tools, or services, including through Model Context Protocol (MCP) integrations, such as Claude.

If you choose to connect a third-party AI assistant or connector, we may share certain information from your Coffee & Contracts account with that third-party service at your direction and with your authorization.

Depending on the features you use, this information may include:

- Your Coffee & Contracts profile information.

- Content library items, captions, templates, and related metadata.

- Your content calendar, scheduled content, content drops, events, and daily tasks.

- Instagram analytics and performance data, if you have connected your Instagram account.

- Other information necessary to respond to your request through the connected service.

Unless otherwise disclosed at the time of authorization, these integrations are read-only and do not allow the third-party AI assistant to create, update, delete, publish, or send content through Coffee & Contracts.

Your use of third-party AI assistants or connectors is subject to the applicable third party's terms and privacy policy. We do not control how third-party services process information after it is shared with them at your direction.

You may disconnect or revoke access to these integrations through your Coffee & Contracts account settings, the applicable third-party service, or by contacting [email protected].

Legal Disclosures

We may disclose personal information when required by law or when pertinent to judicial or government investigations or proceedings, including in response to a court order, subpoena, or judicial proceeding, as we deem necessary and appropriate.

Business Transfers

In the event of a sale, merger, transfer of assets, dissolution, bankruptcy, acquisition, reorganization, or similar event, personal information may be transferred to a successor or unaffiliated third party as part of the transaction, as permitted by applicable law. Where our information practices change as a result of a transfer of assets or change in ownership, we will notify users by a notice on the home page.

11. SALE OR SHARING OF PERSONAL INFORMATION

We do not sell personal information to third parties for monetary consideration. We may share personal information as described in this Privacy Policy, including in the California Privacy Rights section below.

12. USER-GENERATED CONTENT

Any personal information or image content you voluntarily disclose in a manner that other users can view, including product reviews, comments, and posts on social media pages, becomes publicly available and may be read, collected, and used by others, and your name, email, or other information may be displayed when you post comments or upload images.

13. LINKS TO THIRD-PARTY SITES

The Site may contain links to other sites, and we do not endorse or accept responsibility for the content or privacy policies of those sites.

14. ACCESSING, CORRECTING, AND MANAGING YOUR INFORMATION

You have the right to access the personal information you have provided to us, and we may verify your identity before processing your request within a reasonable time. If you find that information we hold about you is inaccurate or out of date, we will promptly correct it upon receipt of changes from you.

15. DATA RETENTION

We retain personal information for as long as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce agreements, and retention periods depend on the type of information, the purpose for collection, legal requirements, and operational necessity. When we no longer need personal information, we will securely delete or anonymize it, or if deletion is not possible, for example, in backups, we will securely store and isolate it from further processing until deletion is possible.

16. SECURITY

We take reasonable steps to keep personal information secure and to protect it from misuse, loss, unauthorized access, modification, or disclosure, but we do not represent, warrant, or guarantee that personal information will remain secure. We implement measures designed to secure personal information, including storing information on secure servers behind firewalls, and payment transactions are processed by a third-party payment processor and we do not store credit card information. You are responsible for keeping your password confidential, and information shared in public areas may be viewed by any user.

The safety and security of your information also depends on you. Where we have given you, or where you have chosen, a password for access to certain parts of our website and/or Service, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

We urge you to be careful about giving out information in public areas of the website and/or Service like message boards.

Unfortunately, transmission over the internet is not completely secure. Any transmission of personal information is at your own risk.

We are not responsible for circumvention of any privacy settings or security measures contained on the website and/or Service.

Your Role in Information Security

While we implement security measures to protect your information, no security system is impenetrable. We encourage you to take steps to protect your personal information, such as:

- Using strong, unique passwords for your accounts.

- Not sharing your account credentials with others.

- Logging out of your account after using shared computers.

- Keeping your devices and software updated.

- Being cautious about clicking on links or downloading attachments from unknown sources.

- Reviewing your account activity regularly for any unauthorized actions.

17. DATA BREACH COMMUNICATIONS

If there is a breach of security resulting in the disclosure of your personal information, we will take measures to communicate these issues to you so that you can take steps to protect yourself.

18. YOUR PRIVACY RIGHTS

Global Privacy Rights (All Users)

Regardless of location, we provide users with rights to request access, correction, and deletion of personal information in certain circumstances, and to opt out of marketing communications.

California Privacy Rights

Consumers residing in California are afforded certain additional rights with respect to their personal information under the California Consumer Privacy Act or "CCPA" (California Civil Code Section 1798.100 et seq). If you are a California resident, this section applies to you.

Collection and Use of Personal Information

In the preceding 12 months, we have collected the following categories of personal information: identifiers, information subject to Cal. Civ. Code section 1798.80(e), characteristics of protected classifications under California or U.S. law, commercial information, Internet or other electronic network activity information, geolocation data, professional or employment-related information, audio, electronic, visual or similar information, inferences drawn about you, and other categories of personal information that relate to, describe, or are reasonably capable of being associated with you.

For examples of the precise data points we collect and the sources from which we collect this personal information, please see "Information We Collect" above. We collect personal information for the business and commercial purposes described in "How We Use Your Information" above.

Categories of Information Sold to or Shared with Third Parties

We do not sell personal information for monetary consideration.

In the preceding 12 months, we may have shared personal information with the following categories of third parties for advertising, analytics, marketing, measurement, social media integration, and other business or commercial purposes:

Advertising Networks and Advertising Technology Providers

Categories of personal information may include identifiers; commercial information; internet or other electronic network activity information; approximate geolocation information; and inferences.

Analytics Providers

Categories of personal information may include identifiers; internet or other electronic network activity information; device information; approximate geolocation information; and inferences.

Marketing and Communications Providers

Categories of personal information may include identifiers; commercial information; internet or other electronic network activity information; preferences; and inferences.

Social Media Platforms and Social Networking Services

Categories of personal information may include identifiers; internet or other electronic network activity information; commercial information; approximate geolocation information; inferences; and, where authorized by the user, social media account information or analytics.

Third-Party Services Authorized by the User

Categories of personal information may include account profile information; user content or content-related information; content calendar information; and, where authorized by the user, Instagram analytics or performance information.

Categories of Information Disclosed for a Business Purpose

In the preceding 12 months, we may have disclosed the following categories of personal information to service providers, contractors, or other third parties for business purposes as described below.

Payment Processors and Billing Service Providers

Business purpose: To process subscriptions, payments, refunds, billing, fraud prevention, and transaction records.

Categories of personal information may include identifiers; commercial information; billing and transaction information; limited payment card information; and internet or electronic activity information.

Hosting, Cloud Infrastructure, Security, and Technology Service Providers

Business purpose: To host and operate the Site and Services, secure accounts, maintain platform functionality, debug issues, and prevent fraud or abuse.

Categories of personal information may include identifiers; account information; internet or electronic activity information; device information; approximate geolocation information; user content; and inferences.

Customer Support, Email, SMS, and Communications Providers

Business purpose: To provide customer support, send service-related communications, respond to inquiries, and manage user communications.

Categories of personal information may include identifiers; account information; commercial information; communication preferences; and customer support communications.

Analytics and Product Improvement Providers

Business purpose: To understand how users interact with the Site and Services, improve product performance, measure engagement, and troubleshoot issues.

Categories of personal information may include identifiers; internet or electronic activity information; device information; approximate geolocation information; content interaction data; and inferences.

Marketing and Advertising Service Providers

Business purpose: To deliver, personalize, measure, and improve marketing campaigns and communications.

Categories of personal information may include identifiers; commercial information; internet or electronic activity information; approximate geolocation information; preferences; and inferences.

Social Media Platforms and Third-Party Services Authorized by You

Business purpose: To support integrations you choose to connect, including Instagram/Facebook features, analytics, or other account-connected services.

Categories of personal information may include identifiers; account information; social media account information; Instagram analytics or performance information, where authorized; content-related information; and internet or electronic activity information.

AI, Automation, MCP Connector, and Third-Party Services Authorized by You or Used to Provide the Services

Business purpose: To support AI-powered features, content generation, recommendations, third-party connectors, or integrations requested by you, including connecting Coffee & Contracts to tools such as Claude.

Categories of personal information may include identifiers; profile information; account information; prompts or inputs you provide; generated outputs; content calendar information; content-related information; and, where authorized, Instagram analytics or performance information.

Professional Advisors, Legal, Compliance, and Business Operations Providers

Business purpose: To support legal compliance, accounting, business operations, dispute resolution, audits, and enforcement of our agreements.

Categories of personal information may include identifiers; commercial information; account information; transaction information; communications; and other information reasonably necessary for the applicable business purpose.

Sale or Sharing of Personal Information

California law requires that we provide transparency about the personal information we "sell" or "share." We do not sell personal information for monetary consideration. However, we may share certain categories of personal information with advertising partners, advertising networks, analytics providers, and social media platforms for targeted advertising, retargeting, measurement, attribution, or similar purposes.

The categories of personal information we may sell or share are described in the "Categories of Information Sold to or Shared with Third Parties" section above.

You may opt out of the sale or sharing of your personal information by contacting us at [email protected] or by using available cookie or privacy controls where provided. We also honor opt-out preference signals sent via Global Privacy Control (GPC) as required by applicable law.

Your Rights

Subject to certain limitations, if you are a California resident, you have the following rights under the CCPA:

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected the information, our purposes for collecting the information, and the categories of third parties with whom we share the information.

Right to Access: You have the right to request a copy of the specific personal information we have collected about you.

Right to Deletion: You have the right to request the deletion of your personal information that we have collected from you, subject to certain exceptions.

Right to Correction: You have the right to request that we correct inaccurate personal information that we maintain about you.

Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information to third parties.

Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information to certain business purposes.

Right to Non-Discrimination: You have the right not to be discriminated against for exercising your CCPA/CPRA rights.

California residents may also request information once per year about any personal information shared with third parties for our direct marketing purposes. We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices or rates for goods or services, provide you with a different level or quality of goods or services, or suggest that you may receive different prices, rates, or quality of goods or services.

You may make these requests by emailing [email protected]. Once we receive your request, we will verify it by asking you to provide certain information, such as identifiers like your email address and phone number. If you would like to use an authorized agent registered with the California Secretary of State to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests on your behalf. We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 calendar days, or as required by applicable state law. If we need additional time, we will inform you of the reason and extension period.

We may deny your request if:

- It is manifestly unfounded or excessive, or we may charge a reasonable fee to cover the administrative costs to comply with such request.

- We cannot verify your identity.

- We are unable to locate your personal information in our systems after a diligent search.

- Legal exemptions apply to your specific request.

- Your request falls outside the scope of applicable law.

- The request would compromise the privacy or other rights of other individuals.

If we deny your request, we will explain the reasons for the denial and provide information about how to appeal the decision. You may submit an appeal to us within 60 days of receiving our decision, and your appeal must include:

- Your full name and contact information used in the original request.

- Any reference or identifying number provided in your denial notice.

- A clear statement that you are appealing the denial.

- Any additional information that may help us reconsider your request.

You may submit your appeal to [email protected]. We will acknowledge receipt of your appeal within 10 business days and will provide a written response within 45 calendar days of receipt, which may be extended by an additional 45 days when reasonably necessary, provided we notify you of the extension within the first 45-day period. If we grant your appeal, we will promptly process your original request and provide you with written confirmation when completed. If we deny your appeal, we will provide you with a written explanation for the denial. You may have other rights and remedies under California law and/or through the California Privacy Protection Agency found at www.cppa.ca.gov.

Other State Privacy Rights

Residents of certain U.S. states may have additional privacy rights and choices under applicable state privacy laws. We will honor applicable rights requests as required by law.

19. NOTICE OF FINANCIAL INCENTIVES

We may offer various financial incentives. For example, we may provide discounts, coupons, and other benefits for customers who sign up to receive our marketing emails or join our loyalty program. When you participate in a financial incentive, we collect personal information from you, such as identifiers like your name and email address, and commercial information like your purchase history. You can opt into a financial incentive by following the sign-up or participation instructions provided, and you have the ability to opt out of the financial incentive, or our subsequent use of your personal information in connection with a financial incentive, at any time by contacting us at [email protected]. In some cases, we may provide additional terms and conditions for a financial incentive, which we will present to you when you sign up. The value of your personal information is reasonably related to the value of the offer or discount presented to you.

20. HOW TO EXERCISE YOUR RIGHTS

To exercise privacy rights, you may contact us as indicated in the Contact Us section, and we may need to verify your identity before processing requests. You may designate an authorized agent to submit requests on your behalf, subject to verification of the agent's authority. We will respond within the timeframe required by applicable law, generally 45 days for most jurisdictions, and we will not discriminate against you for exercising your rights.

21. CHILDREN'S PRIVACY

We do not knowingly collect personal information from individuals under 18, and if we become aware that we have collected personal information from such individuals, we will take steps to delete such information as soon as possible.

22. CHANGES TO THIS PRIVACY POLICY

We may modify or update this Privacy Policy from time to time, and material changes will be reflected by posting an updated policy with a new effective date.

Your continued use of the Site and/or Services after the effective date of an updated Privacy Policy constitutes acceptance of the updated terms, and if you do not agree you must stop using the Site and Services.

23. CONTACT US

If you have questions, comments, concerns, complaints, or requests regarding this Privacy Policy or our privacy practices, you may contact us at: [email protected].

We are committed to working with you to resolve complaints, and if you are not satisfied with our response you may have the right to lodge a complaint with your data protection authority or privacy commissioner as described in our policy.