Effective date: March 2, 2026 Last updated: October 11, 2026
Roast Local LLC ("we," "us," "our") operates the roastlocal.com website. This policy explains what data we collect, why, and how we handle it.
What we collect
Account information: If you create an account, we collect your email address. You sign in with a one-time code sent to your email, or with Google, so we never store passwords.
Usage data: We use PostHog in cookieless mode to understand how people use the site. This includes pages visited, referral sources, general location (country-level, not precise), which features get used, and page performance (how quickly pages load and respond). It does not set cookies, does not record sessions, and we do not use it for advertising. We do not sell this data or share it with advertisers.
Roaster profile data: If you claim a roaster profile, we collect the information you provide: business name, description, website, photos, and contact details. This information is displayed publicly on your profile.
Favorites and ratings: If you save favorites or leave ratings, we store that data in your account.
Payment information: Everything on Roast Local is currently free until further notice, so we collect no payment information today. If paid plans are introduced and you subscribe, payment would be processed by Stripe. We would never see or store your full credit card number: Stripe would provide us with a customer ID, subscription status, and billing email for account management.
Lead form submissions: If you contact a roaster through their profile, we collect your email address, name, and message. This information is shared with the roaster who owns that profile so they can respond to your inquiry.
Roast Local Ops data: If your roastery uses Roast Local Ops, the back office tab in your dashboard, we store what you enter there: green coffee lots, roasts, stock, orders, prices, your costs (including labor rates, rent and fees) and the profit figures Ops calculates from them. See "Roast Local Ops" below for how we handle it.
Outbound click data: When you click a "Buy this coffee" link on a roaster profile, we log basic click data (which roaster, which coffee, referring page, and browser type) to help roasters understand interest in their products. We do not track you across other websites.
What we don't collect
- We don't use invasive tracking or fingerprinting.
- We don't sell personal data to third parties.
- We don't run targeted advertising.
- We don't use tracking cookies or advertising cookies.
How we use your data
- To operate the platform and display roaster profiles.
- To send sign-in codes for authentication.
- To understand how people use the site so we can improve it.
- To send you newsletters and product updates if you've subscribed (you can unsubscribe anytime).
- To share lead form submissions with the roaster you contacted.
- To provide roasters with aggregate analytics about their profile (views, clicks, ratings).
Roast Local Ops
Roast Local Ops is private to your roastery. Specifically:
- It is yours. Your roastery owns the data you put into Ops. We use it only to run Ops for you: to show your roast list, stock, costs, margins and P&L.
- It is not public and it does not affect your listing. Ops data never appears on your public profile and never affects your ranking, placement or anything else in the directory.
- We don't share or sell it. We don't share Ops data with other roasters, advertisers or anyone else, apart from the service providers below that store and run the platform for us.
- No pooled benchmarks without your say-so. We will not combine your Ops data with other roasters' data, even anonymously, unless you opt in to that first.
- Who on your team sees it. Only the owner of the roastery's account can see Ops at first. The owner can give individual team members access, and take it away again.
- Who at Roast Local sees it. Nobody at Roast Local looks at your Ops data unless you ask us for help with something specific in Ops, and then only to help with that. Automated checks run over it to keep Ops working.
- If the business changes hands. Access to Ops belongs to the owner who turned it on. If someone else later claims the roastery, they don't see the previous owner's Ops data unless that owner agrees.
- Your customers' details. Ops orders have a customer field. A first name, business name or nickname is enough. Please don't enter addresses, phone numbers or payment details there. Anything you do enter is handled under this policy, and we act only on your instructions for it.
- Leaving. You can download your monthly P&L as a CSV at any time. Email hello@roastlocal.com and we'll send you an export of all your Ops data, or delete it, within 30 days.
- Where it lives. Ops data is stored with Supabase in the United States, like the rest of Roast Local. If your roastery is in Canada, this means your data is stored and processed in the US.
Third-party services
We use a small number of third-party services to operate:
- Supabase: Database and authentication (data stored in the United States)
- Vercel: Hosting
- Mapbox: Map rendering
- PostHog: Product analytics, in cookieless mode
- Stripe: Payment processing
- Resend: Transactional email delivery
- Beehiiv: Newsletter distribution (if you subscribe to our newsletter, your email is shared with Beehiiv for delivery)
These services have their own privacy policies. We've chosen them for their track records on data handling.
Paid features and commercial relationships
Some features on Roast Local, like the "Buy this coffee" button, are part of our Pro feature set for claimed roaster profiles. Currently, all Pro features are free until further notice, so no roaster pays for placement or features. If paid subscriptions are introduced later, those features would become paid placements as part of a subscription. Either way, we do not receive commissions on purchases you make from roasters.
Cookies
We use essential cookies only, for authentication and session management. We don't use tracking cookies, advertising cookies, or third-party cookies.
Data retention
- Account data is retained for as long as your account is active. If you delete your account, we remove your personal data within 30 days.
- Analytics data (via PostHog, in cookieless mode) is not tied to an account and contains no personal information.
- Click logs (outbound link clicks) are retained for up to 12 months, then deleted.
- Newsletter subscriber data is retained until you unsubscribe.
- Lead form submissions are retained for the roaster's use. If you want a submission removed, contact us.
- Roast Local Ops data is kept for as long as your roastery uses Ops. If you ask us to delete it, we remove it within 30 days. Backups that still hold it age out shortly after.
Your rights
You can request to see, update, or delete your personal data at any time by emailing us at hello@roastlocal.com. If you're a roaster with a claimed profile, you can edit or unclaim your profile directly from your dashboard.
Specifically, you have the right to:
- Access your personal data we hold.
- Correct inaccurate personal data.
- Delete your account and associated personal data.
- Opt out of marketing emails at any time via the unsubscribe link in every email.
We aim to respond to all requests within 30 days.
California residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). While Roast Local currently operates below CCPA thresholds, we voluntarily extend these protections to all users:
- Right to know what personal information we collect and how we use it (described in this policy).
- Right to delete your personal information by contacting us.
- Right to non-discrimination; we will not treat you differently for exercising your privacy rights.
- We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Changes
We'll update this policy as the platform evolves and post the changes here. For significant changes, we'll notify registered users by email.
Contact
Questions about privacy? Email us at hello@roastlocal.com.