Privacy Policy

This Privacy Policy explains how iJAVA Cafe LLC(“iJava,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit https://ijava-website.vercel.app, sign up for the iJava Coffee Club, submit a catering inquiry, or otherwise interact with our services. By using the Site or our services, you agree to the practices described here.

Information you provide. When you sign up for the Coffee Club we collect your full name, email address, phone number, and mailing address. When you submit a catering inquiry we collect your name, email, phone, event details, and any information you include in the request. When you contact us we collect whatever you send.

Payment information.If you join the Coffee Club, your payment card information is submitted directly to Stripe over an encrypted connection. We do not see, receive, or store your full card number, CVC, or expiration date. We receive only a Stripe customer ID, the last four digits of the card, the card brand, and Stripe’s confirmation that the charge succeeded or failed.

Information collected automatically. When you visit the Site we automatically receive limited technical information, including IP address (which we store in a one-way hashed form for anti-abuse purposes), user-agent string, referring URL, and pages viewed. We may use cookies or similar technologies for session management, anti-fraud, and basic analytics.

We use the information we collect to:

• provide and fulfill the services you request, including issuing and emailing your member QR card and processing your subscription;
• send transactional and service messages, such as receipts, renewal and payment notices, cancellation confirmations, and replies to inquiries;
• respond to catering inquiries and prepare quotes or invoices;
• detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms;
• operate, maintain, and improve the Site and our services; and
• comply with legal obligations, enforce our Terms, and protect the rights, property, or safety of iJava, our customers, or others.

We share information only as needed to operate our services. We do not sell your personal information. Our current service providers include:

• Stripe— payment processing for the Coffee Club. Stripe is PCI-DSS Level 1 certified and is responsible for the security of card data submitted through its forms. Stripe’s use of your information is governed by Stripe’s own privacy notice at stripe.com.
• Supabase — secure database and storage for membership records and catering inquiries.
• Resend — transactional email delivery for welcome messages, receipts, and inquiry replies.
• Vercel — web hosting and serverless function execution for the Site.
• Analytics— we may use privacy-respecting analytics services to understand aggregate Site usage. Where Google Analytics is enabled, your visit may be subject to Google’s privacy practices.

Each provider is contractually limited to using your information only to perform services for us. We may also disclose information when required by law, to respond to lawful requests from public authorities, to enforce our Terms, or to protect the rights, property, or safety of iJava, our customers, or others.

The Site uses a small number of cookies and similar technologies for: session handling (so the Site works correctly), anti-fraud and rate-limiting on forms, and optional analytics. We do not use cross-site advertising cookies. Most browsers let you control cookies through their settings; disabling cookies may prevent some features from working.

By providing your email address or phone number, you consent to receive transactional and service-related messages from us, including your welcome email, member QR card, receipts, renewal and payment notices, cancellation confirmations, and replies to your inquiries. We may also send occasional service updates about your membership. You can ask us to stop sending non-essential messages at any time by emailing info@ijavacafe.com; we may still send transactional messages necessary to operate your membership or fulfill a request.

We retain personal information for as long as we need it to provide the services, comply with our legal obligations, resolve disputes, and enforce our agreements. For Coffee Club members, we keep your membership record for the lifetime of your subscription and for a reasonable period afterwards for accounting and dispute resolution. You can request earlier deletion by emailing us; we will honor the request to the extent consistent with our legal and operational obligations.

Depending on where you live, you may have rights to: access the personal information we hold about you; request that we correct inaccurate information; request that we delete your information; or object to or limit certain uses. To exercise these rights, email info@ijavacafe.com. We may need to verify your identity before responding. We will not discriminate against you for exercising these rights.

California residents: you have rights under the California Consumer Privacy Act (CCPA), including the right to know what we collect, the right to request deletion, and the right to opt out of any sale of personal information (we do not sell personal information).

We take reasonable administrative, technical, and physical safeguards to protect your information. All traffic to the Site is encrypted in transit (HTTPS). Card data is handled by Stripe under PCI-DSS Level 1 certification and never touches our servers. No system is perfectly secure, however, and we cannot guarantee absolute security; you provide information at your own risk.

The Site and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email. Your continued use of the Site after the changes take effect constitutes acceptance of the updated policy.

Questions about this Privacy Policy, or want to exercise a privacy right? Email info@ijavacafe.com or call (415) 374-3059. You can also write to iJAVA Cafe LLC, 387 Delmas Ave, San Jose, CA 95126.