Privacy Notice

The Overflow Coffee Co. app is operated by Occasio & Co Roasters (“Overflow,” “we,” “us”), based in Montville, New Jersey. You can reach us any time at privacy@occasioroasters.com.

•Account details you give us: your email address and mobile phone number, and optionally your name.

•Rewards activity: your Flow Points balance and the in-store purchases that earn or redeem them, processed through our payments provider, Square.

•An email address you give us at checkout, if you ask us to email you about your order — including on guest orders where you don’t have an account.

•A mobile number you optionally add at checkout as a guest. Giving it creates an Overflow account for you and connects your Flow Points, so the cups you buy in store count too; we email you a sign-in link with your receipt. Leave it blank and nothing is created.

•Your preferences: such as your favorite drink, so we can personalize the app.

•Device and usage basics: standard technical data your browser sends (like general region and which screens you open) used to keep the app working and secure.

•A random app ID stored on your device, so we can count returning visits and see which parts of the app people use. It isn’t linked to your name or email unless you sign in, we don’t share it with anyone, and it isn’t used for advertising.

We do not collect or store your full payment card numbers. Card payments happen in store or on Square’s own secure checkout pages.

•To sign you in with email magic links and keep you signed in.

•To run the Flow Points rewards program and show your balance.

•To link your phone number to your rewards account at the register so your purchases earn Points. We ask for it when you join, rather than as a separate step later, so your Points start on your first visit.

•To send you a receipt when you order and to tell you when it’s ready for pickup, if you asked us to. We don’t use that address for anything else.

•To personalize the app (for example, your usual order) and to operate, secure, and improve the service.

We do not sell your personal information.

We share information only with service providers who help us run the app, and only as needed:

•Square — for customer accounts, the loyalty program, gift cards, and payment processing.

•Our email provider (Resend) — to send your sign-in links and order emails.

•Our hosting provider (Vercel) — to serve the app.

We may also disclose information if required by law or to protect the rights, safety, and security of our customers and business. Your data is handled under each provider’s own privacy and security terms.

•You can use the app as a guest, without an account and without giving us a phone number.

•A rewards account needs a mobile number, because that’s what the register looks up to find your Points. You can change it, or ask us to remove it, at any time from Account → Rewards connection.

•You can ask us to access, correct, or delete your account information by emailing privacy@occasioroasters.com. We’ll respond within a reasonable time and as required by applicable law.

•Sign-in links expire automatically, and you can sign out at any time from the Account screen.

We keep your information for as long as your account is active or as needed to provide the service and meet legal obligations, then delete or de-identify it. We use industry-standard safeguards — including signed, encrypted sign-in tokens and secure connections — but no method of transmission or storage is completely secure.

The app is intended for adults and is not directed to children under 13. We do not knowingly collect information from children under 13.

We may update this notice as the app evolves; we’ll revise the effective date above when we do. Questions or requests? Email privacy@occasioroasters.com.