Privacy Policy

Users receive operational email notifications by default, including:

• • Order confirmations
• • Service request confirmations
• • Status updates
• • Order reminders

Users may manage notification preferences within the App.

We do not send marketing emails through the App.

The App connects to QuickBooks Online via Intuit's API to create invoices corresponding to orders placed in the App.

Information shared with QuickBooks is limited to invoice-related data necessary for accounting purposes. QuickBooks Online is governed by Intuit's own privacy policy and terms.

The App is hosted on Google Cloud infrastructure.

We implement commercially reasonable security measures to protect information, including:

• Authentication controls
• Restricted administrative access
• Secure cloud infrastructure

No system can be guaranteed 100% secure.

Fazenda retains business and service records indefinitely, including after a wholesale relationship ends, for:

• • Accounting compliance
• • Operational records
• • Warranty and service documentation
• • Legal compliance

We do not sell personal information.

We may share information only:

• • With QuickBooks Online for invoicing
• • With Google Cloud as hosting provider
• • If required by law
• • To protect legal rights or prevent fraud

As this App is for business customers only, individual consumer privacy laws may not apply.

You may request:

• • Correction of inaccurate information
• • Deactivation of user accounts

Requests may be sent to: info@fazendacoffee.com

If you are located in the European Economic Area (EEA) or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR may apply to your personal data.

You have the following rights with respect to your personal data:

• •Access — request a copy of the personal data we hold about you
• •Rectification — request correction of inaccurate data
• •Erasure (right to be forgotten) — request deletion of your account and associated personal data. Logged-in users may submit a deletion request from their account settings. Business records (order history) are retained as required by law.
• •Restriction & Objection — request that we restrict or cease processing your data
• •Portability — request a machine-readable copy of data you provided to us

Legal basis: We process data on the basis of legitimate interests in providing our B2B wholesale service and fulfilling contractual obligations with business customers.

Data transfers: Data is stored in the United States (Google Cloud). If your data is transferred outside the EEA, we rely on Standard Contractual Clauses as the legal transfer mechanism.

To exercise any of these rights, contact us at: info@fazendacoffee.com. You also have the right to lodge a complaint with your local supervisory authority.

We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and access controls to protect your data.

In the event of a data breach affecting Massachusetts residents, we will notify affected individuals and the Massachusetts Attorney General as required by M.G.L. chapter 93H (without unreasonable delay). If EU/UK residents are affected, we will notify the relevant supervisory authority within 72 hours as required by GDPR.

To report a security concern, email us at: info@fazendacoffee.com with the subject line [SECURITY].

The Fazenda mobile app uses the same accounts and service as the web App, and this Privacy Policy applies to it. What the mobile app handles depends on the kind of account you sign in with:

• •Location, for delivery drivers only — only accounts set up as delivery drivers share location. While a driver is signed in and the app is running, the phone sends its position to Fazenda about every 30 seconds while the truck is moving and every two minutes while it is parked, including when the screen is off or another app is in front. The app asks for location only "while using the app", the phone shows that location is in use the whole time, and sharing stops when the driver signs out. If the app is closed or the phone restarts, sharing pauses until the driver opens the app again. We keep only each driver's most recent position: the owner sees it on the delivery map, and a customer sees the truck's position only while their own order is on it that day. A GPS fix is also recorded when a delivery is confirmed or a delivery problem is reported, as part of the proof of delivery.
• •Customer and office accounts — the app never asks customer, admin or owner accounts for location and never collects it from them.
• •Camera — used for proof-of-delivery photos, recipient signatures, and service-request photos. Images are stored in a private bucket and shared only with the customer of that order.
• •Push notifications — operational only (order, delivery, and service updates), controlled by your device's notification settings. No marketing pushes. To deliver them we store a notification token issued by Apple (iPhone) or Google Firebase Cloud Messaging (Android), linked to your account; the app removes it from our servers when you sign out.
• •Services from Google on Android — notifications are delivered through Firebase Cloud Messaging, the delivery-tracking map is drawn with Google Maps, and delivery-label scanning uses Google ML Kit, which reads the label on the phone itself. Google may receive device and diagnostic information from these services under its own privacy policy.

The mobile app contains no advertising or analytics SDKs, and we do not sell your data or use it for advertising.