1. Introduction
This Privacy Policy explains how Farspeak Labs LLC (d/b/a RoastConsole) ("RoastConsole," "we," "us") collects, uses, and shares personal information in connection with the RoastConsole platform, websites, APIs, and mobile apps (the "Service").
Two roles.RoastConsole serves coffee roasters ("Roasteries"). Our role depends on the data:
- For information about a Roastery's own account and team members, and for operating the Service, we act as a controller.
- For information a Roastery enters about its own customers, suppliers, and contacts("Roastery Customer Data"), the Roastery is the controller and we act as a processor/service provider that handles the data on the Roastery's behalf and under its instructions.
If you are a customer or contact of a Roastery and have questions about how your information is used, please contact that Roastery directly; they control that data.
2. Who we are
Farspeak Labs LLC (d/b/a RoastConsole), 205 County Rd E, Ripon, WI 54971, operator of RoastConsole (roastconsole.com). Privacy contact: privacy@roastconsole.com.
3. Information we collect
a. Account and profile data. Name, email address, phone, password (managed by our authentication provider), business/Roastery name, role, time zone, and preferences.
b. Roastery business content. The operational data you put into the Service: green coffee lots and inventory, roast batches and profiles, production and packing orders, sales orders, partners/customers and suppliers, invoices and financial records, cupping/QC records, and notes. This may include personal information about your customers, suppliers, and contacts (names, email addresses, phone numbers, billing/shipping addresses, order history).
c. Billing data. Subscription plan, billing contact, and payment status. Card payments for your subscription are processed by our payment processor (Stripe); we do not store full card numbers.
d. Connected-service data. When you connect a third-party platform (e.g. Shopify, WooCommerce, Squarespace, Stripe, Square, or accounting software), we receive and store data from that service that you authorize, such as orders, customers, products, and the access tokens needed to maintain the connection (stored encrypted).
e. Communications. Emails, support requests, and in-app messages, and our records of transactional messages we send (invites, password resets, billing and dunning notices, invoices, and, where enabled, SMS notifications).
f. Usage and technical data. IP address, device/browser type, pages and features used, log and diagnostic data, and error reports, used to operate, secure, and improve the Service.
g. Local storage / cookies. We use browser local storage and essential cookies to keep you signed in and remember preferences (see Section 12).
4. How we use information
We use information to: (a) provide, operate, and maintain the Service; (b) authenticate users and secure accounts; (c) process subscriptions and billing; (d) provide AI-assisted features such as forecasting and production suggestions (see Section 6); (e) provide support and respond to requests; (f) send transactional and service communications; (g) monitor, troubleshoot, and improve the Service and develop new features; (h) detect, prevent, and address fraud, abuse, and security incidents; and (i) comply with legal obligations and enforce our agreements.
We do not sell personal information, and we do not use Roastery Customer Data for our own marketing.
5. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies and we act as a controller, we rely on: contract (to provide the Service you signed up for), legitimate interests (to secure, operate, and improve the Service, in a way balanced against your rights), consent (where required, e.g. certain communications), and legal obligation (e.g. tax/accounting). Where we process Roastery Customer Data as a processor, the Roastery is responsible for the legal basis and required notices/consents.
6. AI-assisted features
Some features use automated computation and/or third-party AI providers to generate forecasts, suggestions, and assistant responses. To produce these results we may transmit relevant portions of your business content to an AI subprocessor (see Section 7). These outputs are informational aids and may be inaccurate. Our AI subprocessors process the data to return results and, under their terms, do not use your data to train their models except as disclosed. These features do not make legal or similarly significant decisions about individuals.
7. How we share information
We share information only as needed to run the Service:
- Subprocessors / service providers that host and support the Service under contract and confidentiality obligations. Current categories and providers:
| Purpose | Provider | Notes |
|---|---|---|
| Cloud hosting, database, storage, email | Amazon Web Services (AWS) | US region (us-east-1) |
| Authentication | AWS Cognito | |
| Subscription payments | Stripe | Card data handled by Stripe |
| Roastery→customer payments | Stripe Connect, Square | Roastery is merchant of record |
| AI features | Anthropic (and/or AWS Bedrock) | Forecasting/assistant |
| Transactional email / SMS | AWS SES | |
| E-commerce / accounting connectors | Shopify, WooCommerce, Squarespace | Only what you connect |
- Connected services you authorize, to exchange the data you direct.
- Legal and safety: to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Service.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
8. International data transfers
We host and process data in the United States (AWS). If you or your contacts are in the EEA, UK, or other regions, your information will be transferred to and processed in the US and other countries that may have different data-protection laws. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Data retention
We retain account and business data for as long as your account is active and as needed to provide the Service. After account closure, we retain data for a limited period to allow export and to meet legal, tax, accounting, security, and dispute-resolution needs, after which we delete or de-identify it in the ordinary course, subject to backup cycles. As a processor, we delete or return Roastery Customer Data on the Roastery's instruction, subject to legal retention requirements.
10. Security
We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest, encryption of stored third-party access tokens, logical isolation of each tenant's data, role-based access controls, and managed authentication. No system is perfectly secure; we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by law.
11. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, export (port), or restrict/object to processing of your personal information, and to withdraw consent. Under US state laws such as the CCPA/CPRA, you may have rights to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising your rights.
To exercise rights regarding data we control, contact privacy@roastconsole.com; we will verify and respond within the time required by law. If your data was provided to us by a Roastery (i.e., you are that Roastery's customer/contact), please contact the Roastery, the controller of that data; we will assist them as their processor.
12. Cookies and local storage
We use strictly necessary cookies and browser local storage to keep you signed in, maintain your session, and remember preferences. We use first-party diagnostic/ usage data to operate and improve the Service.
13. Children's privacy
The Service is for businesses and is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child provided us information, contact us and we will delete it.
14. Changes to this Policy
We may update this Policy. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice (e.g. in-app or by email). Your continued use after the effective date constitutes acceptance.
15. Contact us
Privacy: privacy@roastconsole.com
Farspeak Labs LLC (d/b/a RoastConsole), 205 County Rd E, Ripon, WI 54971