Privacy Policy

Who we are

BrewReturn is a proof-of-concept service run by Intense Coffee (Perseus Computer Services Pty Ltd), Queensland, Australia. In this policy, “we” and “us” mean Intense Coffee. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

Everyone

• Your email address and password, to create and secure your login. Passwords are handled by our sign-in provider, and we cannot see them.
• Which kind of account you have: café or candidate.
• Basic technical data needed to run the site, such as a sign-in session cookie and standard server logs kept by our hosting providers.

Candidates

• The name or alias you choose to show on your profile.
• Your capability ratings, each saved as a dated review, and any evidence notes and links you add.
• Tools and equipment you say you have used.
• Which cafés and roles you have chosen to share your profile with, and whether you agreed to share your email.

Cafés

• Your café's name, the roles you create, the capabilities and categories you add, and any training links you add.
• Suggestions you send for the shared capability register or training library.

Reports (PDFs) are created when you click the button and sent straight to your browser. We do not email them or keep a copy.

How we use it

• To run BrewReturn: build profiles, create roles, compare candidates with roles, suggest training and produce reports.
• To send emails you need, such as confirming your email address or resetting your password.
• To keep the service secure, fix problems and improve it.

We do not sell your information, we do not show advertising, and we do not use it to build profiles for anyone other than the people you choose to share with. Scores and match percentages are a guide. A café makes its own hiring decisions, and no decision is made automatically.

Who can see a candidate's profile

• A candidate's profile is private by default. A café sees it only after the candidate chooses to share it for a particular role.
• Once shared with a café, that café can also compare the candidate against its other roles, in case they suit a different one. Other cafés cannot see it.
• Sharing lasts until the candidate or the café withdraws it, and either can do so at any time. When it is withdrawn, the café can no longer see the profile.
• A candidate's email address is shared only if the candidate chooses to. A café can ask once, and the candidate decides.
• A café's own capabilities and training links are visible to that café, and to candidates only while they have shared a profile with it.
• Reports a café downloads are the café's copy. Reports never include a candidate's email address.
• As the operator, we can access the database for support, security and maintenance. We do this only when needed.

Evidence notes and links

Evidence notes are written by candidates and are not checked by us. Please don't put sensitive details such as health information, or other people's personal details, in them. Links open through a page that shows the full address and any cautions first. That page cannot guarantee a link is safe, so check where a link leads before you continue.

Suggestions to the shared set

A café can suggest a capability or training link for everyone. If we accept it, the wording or link becomes visible to every café and candidate, and we may edit it. Don't include your café's name or anything private in a suggestion.

Service providers and where data is held

We use trusted providers to run BrewReturn: Supabase for the database and sign-in (our database is hosted in Tokyo, Japan), Vercel for website hosting (the app runs from Tokyo, and pages may be delivered through Vercel's global network), and Resend to send the emails described above (such as sign-in confirmations and password resets), which can involve servers in other countries. Your information is therefore held and processed outside Australia. We choose providers that protect data to a reasonable standard, and we give them only what they need to do their job.

Keeping and deleting your information

• Candidates can delete their profile, or their whole account, at any time from My Profile. This removes their ratings, evidence, tools, review history and sharing links.
• Cafés can delete their account at any time, which removes the café's roles, capabilities, training links and sharing links.
• While a profile exists, its review history is kept as a permanent record and can't be edited.
• Wording or links that were accepted into the shared set stay there, as they belong to the shared set once accepted.
• Copies in provider backups can take a short time to clear after deletion.

Security

Information is sent over encrypted connections. Email addresses are encrypted when stored, and access rules in the database stop one café from seeing another's data, or a candidate's profile before it is shared. No online service is completely secure. If a data breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

Cookies

We use only the cookies needed to keep you signed in. We don't use advertising or tracking cookies.

Your choices and rights

You can see and change your information in the app. You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email graham@intensecoffee.com.au and we will respond within a reasonable time, usually 30 days. If you are not happy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Age

BrewReturn is not designed for children under 16. If you think a child has set up an account, please contact us.

Changes

We may update this policy as BrewReturn grows. The date at the top shows the latest version, and we will take reasonable steps to let users know about important changes.

Contact

Questions or requests: Graham Kennedy, Intense Coffee, graham@intensecoffee.com.au.