Privacy Policy
Last updated: March 18, 2026
1. Overview
Value Way Inc. ("Value Way," "we," "us," or "our") operates the Value Way platform at app.valueway.coffee. This privacy policy describes how we collect, use, store, and protect your personal information when you use our services.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Display name (optional)
- Profile photo (optional)
- Role selection (e.g., Farmer, Exporter, Roaster, Importer)
2.2 Contact Form Submissions
When you submit our contact form, we collect:
- Name, email address, and company name
- Your role in the coffee supply chain
- Your message and project timeline
2.3 Application Data
When you use our platform, we collect data you provide about your coffee lots, including:
- Lot identifiers, origin, producer, and processing details
- Carbon footprint calculation inputs and results
- Traceability and compliance documentation
2.4 Payment Information
Payment processing is handled by Stripe, Inc. We do not store credit card numbers or bank account details on our servers. Stripe collects and processes payment information in accordance with their privacy policy.
2.5 Automatically Collected Information
We automatically collect certain technical information:
- Authentication session tokens (via cookies)
- Internal analytics events (e.g., feature usage for product improvement)
We do not use third-party analytics services such as Google Analytics.
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve our platform and services
- Authenticate your identity and manage your account
- Process payments and manage subscriptions
- Respond to your inquiries and support requests
- Calculate and display carbon footprint data for your coffee lots
- Generate compliance reports (e.g., EUDR)
- Send service-related notifications
4. Third-Party Services
We share data with the following third-party service providers:
Firebase (Google)
Authentication and user identity management. Processes email addresses and authentication tokens.
Stripe
Payment processing and subscription management. Processes payment details, user identifiers, and purchase metadata.
Vercel
Application hosting and deployment. Processes HTTP requests and server logs.
Neon (PostgreSQL)
Database hosting. Stores application data including user profiles, lot data, and contact submissions.
Cloudflare, Inc.
Website hosting (Cloudflare Pages) and contact form processing (Cloudflare Workers).
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
5. Cookies and Local Storage
We use the following cookies and browser storage:
| Name | Purpose | Duration |
|---|---|---|
__session | Authentication session token | 1 hour |
NEXT_LOCALE | Language preference | 1 year |
__stripe_mid | Stripe fraud prevention | 1 year |
__stripe_sid | Stripe session fraud prevention | 30 minutes |
cookie-consent (localStorage) | Cookie notice acknowledgement | Persistent |
We do not use advertising cookies or third-party tracking cookies.
6. Data Retention
- Account data: Retained while your account is active and for 30 days after deletion request.
- Contact submissions: Retained for 2 years, then archived or deleted.
- Payment records: Retained as required by applicable tax and financial regulations.
- Lot and CFP data: Retained while your account is active. Exported upon request.
7. Your Rights
You have the right to:
- Access your personal data we hold
- Correct inaccurate or incomplete data
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent for optional data processing
To exercise these rights, contact us at privacy@valueway.coffee.
8. Data Security
We implement industry-standard security measures to protect your data, including:
- HTTPS encryption for all data in transit
- Encrypted database connections
- HTTP-only, secure cookies for authentication
- Role-based access controls
- Regular security audits
9. International Data Transfers
Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for cross-border data transfers in compliance with applicable data protection laws.
10. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
12. Contact Us
If you have questions about this privacy policy or our data practices, please contact us: