Privacy Policy

This Privacy Policy describes how Coffr, LLC ("Coffr," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit getcoffr.com and related research pages (the "Site"), subscribe to The Trust Layer Briefing, join the Coffr Research Panel, or use the Coffr product at https://app.getcoffr.com and related app hosts (the "Services"). By using the Site or Services, you understand that we will process personal information as described here. This Policy does not apply to third-party sites we link to.

You provide: name, work email, company, role, phone number, password or SSO identity, profile photo, support messages, newsletter and research-panel signup details, and billing details for paid plans.

When you use the Services you also provide: bank account and routing numbers, account holder name, bank name, IBAN or SWIFT when used, identity-verification documents and selfies processed by our identity-verification provider, and the email or phone of people you share with or request details from.

We collect automatically: IP address, device and browser type, operating system, pages viewed, timestamps, approximate location from IP, and security signals such as device intelligence used to detect suspicious logins.

Spam check: Site forms use Google reCAPTCHA, the "I'm not a robot" checkbox, to tell human submissions apart from automated ones. When a form with the check loads, Google receives your IP address, device and browser information, and reCAPTCHA session data, and returns a result to us. We use that result only to decide whether to accept the submission. Google's Privacy Policy and Terms apply to the data reCAPTCHA processes.

We collect from others: identity and bank-verification results from our identity and bank-verification providers; payment status from our billing provider; delivery status from our messaging and email providers; and, on the Site only, audience and advertising signals from partners as described in Cookies.

We use personal information to operate the Site and Services; create and secure accounts; verify identity and bank-account ownership; let you share or request bank details through time-limited links; send transactional email, and SMS or RCS notifications about bank detail requests and shares to mobile numbers that opted in (never marketing); send research you asked for; detect fraud and abuse and spam-check form submissions; process subscriptions; comply with law; and improve the product. We do not sell personal information. We do not put routing numbers, account numbers, or other raw bank details in SMS, RCS, or email bodies. Those messages carry a branded notice and a secure link only.

Where a lawful basis is required, we rely on: performing a contract with you; legitimate interests in operating, securing, and improving the Services and Site; consent where required (marketing email, certain cookies, research-panel surveys); and legal obligation (tax, accounting, fraud, and identity-verification records).

We share information with service providers bound to use it only for our instructions: authentication, hosting and data storage, bank connectivity and verification, identity verification, SMS, RCS and phone verification, billing, public ledger anchoring of cryptographic hashes, Google reCAPTCHA (spam checks on Site forms), Floqer (visitor identification on the Site, described in Cookies), email delivery, and product analytics (with input and text masking on sensitive surfaces).

We share bank details only with counterparties you authorize through a share or request.

We may disclose information to comply with law, protect rights and safety, or in a merger or sale of the business, with notice where required.

On the Site, advertising and identification partners may receive limited browsing and email-association data as described in Cookies. You can opt out through the links in that section. Mobile numbers and text-message opt-in data and consent are excluded from this sharing.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

Bank account numbers and routing numbers are encrypted at rest. Access is limited. Recipients view details through a secure, time-limited link. SMS, RCS, and email never include the raw numbers. Verified account fingerprints (one-way hashes, not raw numbers) may be anchored to a public ledger and cannot be reversed to recover the account.

A cryptographic hash of a verification event may be written to a public ledger, with a timestamp and topic identifier. The hash cannot be turned back into your account number. The fact that a verification occurred is public and immutable. We cannot delete a ledger record once written.

Transactional messages: login and phone verification codes; share and request notices; viewed, declined, revoked, fulfilled, and rejected updates; and reminders. Email goes to the address on the account or on the transfer. Text alerts go only to a mobile number that opted in to Coffr alerts.

Marketing email: The Trust Layer Briefing and related research, only if you subscribe. Unsubscribe from any email footer.

Purpose of SMS and RCS: Coffr alerts are text messages about bank detail requests and shares made through Coffr, including notices, reminders, status updates, and security alerts. We never use SMS or RCS for marketing.

Consent: You opt in yourself by entering your mobile number and checking the text message consent box on the secure Coffr page you open from a request or share link. A Coffr subscriber cannot opt you in. If a subscriber sends you a request or share, we notify you by email and send text alerts only after you opt in. You don’t have to agree to receive texts to make a purchase or use Coffr.

Frequency and costs: Message frequency varies with the requests and shares you send or receive. Message and data rates may apply.

Opt-out and help: You can cancel Coffr alerts any time. The steps to stop, restart, or get help are in the SMS and RCS messaging terms. For help, reply HELP or contact support@getcoffr.com or 888.867.2740. Opting out of Coffr alerts doesn’t close your account or stop email.

Verification codes: One-time login and phone verification codes are sent through our phone-verification provider when you sign in or verify your phone. They are separate from Coffr alerts.

Visitor identification (Floqer): Coffr uses Floqer, a third-party visitor-identification service, on getcoffr.com. When you visit, Floqer collects your IP address, device and browser details, pages viewed, referring URL and time of visit. Floqer and its data partners compare this information with business and contact records they hold, and may match your visit to a company and, in some cases, to a named person and their professional contact details. Coffr uses these matches for business-to-business sales and marketing outreach. This tool can load before you respond to the cookie banner. To opt out, decline Advertisement cookies through "Your privacy choices", turn on Global Privacy Control in your browser, or email support@getcoffr.com to request an opt-out or deletion.

We use cookies and similar tools to keep you signed in, prevent abuse, and understand Site usage. The Google reCAPTCHA spam check on Site forms sets its own cookies when the widget loads. On getcoffr.com, online data partners or vendors may associate Site activity with other personal information they hold, including email, and may send marketing. Opt out of that advertising at the Retention.com advertising opt out page. GDPR opt-out for RB2B: the RB2B GDPR opt out page. Disabling cookies may limit some features. We do not use third-party advertising cookies inside the authenticated product.

We keep account and transfer records while your account is active and as needed to provide the Services. After account closure we delete or anonymize personal data within 90 days, except where law requires longer retention (tax, fraud, identity verification, up to 7 years where applicable). Blockchain hashes persist indefinitely. We keep the minimum data needed to honor an SMS or email opt-out.

You may update profile details in the product, unsubscribe from marketing email, reply STOP to any Coffr SMS or RCS message, refuse optional cookies, and request access, correction, or deletion at privacy@getcoffr.com. Some records cannot be deleted (legal holds, blockchain hashes). Closing an account may end access to the Services.

Depending on your jurisdiction you may request access, correction, deletion, restriction, objection, or portability, and you may withdraw consent where we rely on it. We will need to verify your identity. We respond within 30 days, or sooner if law requires. You may complain to your data protection authority. Email privacy@getcoffr.com with the subject Privacy Request.

We collect identifiers, commercial information, internet activity, approximate geolocation, customer-support content, and professional information, plus sensitive information such as account credentials and financial account numbers, for the purposes above. We do not sell personal information for money. Site advertising cookies may be treated as a "sale" or "share" under the CCPA. Mobile numbers and text-message opt-in data and consent are excluded from this sale or sharing and will not be shared with third parties or affiliates for marketing or promotional purposes. Use the Retention.com and RB2B opt-out links, or email privacy@getcoffr.com. We do not sell or share the personal information of minors under 16. We will not discriminate against you for exercising CCPA rights.

The Site and Services are for people 18 and older. We do not knowingly collect information from children. If you believe we have, write to privacy@getcoffr.com and we will delete it.

We use encryption in transit (TLS) and at rest for sensitive bank fields, access controls, mandatory phone verification on the product, audit logging, and vendor contracts. No method of transmission or storage is perfectly secure.

We will update the date at the top of this page. For material changes we will also email the address on your account or post a notice in the Services. Continued use after the effective date means you accept the revised Policy.

Coffr, LLC
7415 Southwest Parkway, Building 5, Suite 500-670
Austin, TX 78735

• hello@getcoffr.com (general)
• privacy@getcoffr.com (privacy requests)
• support@getcoffr.com (product support)
• 888.867.2740