Privacy Policy
Product and business privacy draft · 22 August 2026
This draft must receive final Norwegian privacy review before paid campaigns are enabled.
Vantabean is a coffee journal and community. This policy explains what we collect, why we use it, and the choices available to you.
Who is responsible for your data
Vantabean is operated by VEDØY VENTURES, Norwegian organisation number 933 383 571. VEDØY VENTURES is the data controller for personal data processed through Vantabean.
Information we store
When you create an account, we store your email address and authentication records. If you complete your profile or use the product, we store profile details, coffee preferences, follows, notifications, comments, kudos, saved items, beans, recipes, brew logs, visibility choices and safety preferences such as blocked or muted accounts.
Images uploaded to Vantabean are stored in managed storage. Submission images remain private until they have been approved for public use.
If you claim or manage a business, we store the organisation, your role, business contact details, verification evidence, team invitations, profile revisions and an audit history. For Business Pro we store Stripe customer and subscription identifiers, entitlement status and billing-period information, but not complete payment-card details.
For promoted placements we store the creative, coarse targeting choices, budget, review decision and aggregated counts such as impressions, profile opens, saves and website clicks. Advertisers do not receive private user-level brew histories.
How we use information
We use this information to perform the service you request, authenticate you, sync your journal, publish content you choose to share, verify business authority, administer subscriptions, deliver notifications and respond to support. We also use limited information for legitimate interests in security, fraud prevention, moderation, service reliability and aggregate product measurement. Where consent is legally required, we ask before that processing. We do not sell personal data.
Public content
Profile information and brew logs marked public can be viewed by other visitors. Do not publish information you want to keep private.
Third-party services
Vantabean uses Supabase for authentication, database and storage; Vercel for hosting, web analytics and performance measurement; and Stripe for Business Pro checkout and subscription management. Optional map or scan providers receive only the information required when those features are used. Some providers may process information outside Norway or the EEA under an applicable transfer mechanism.
Advertising and personalisation
Organic recommendations use coffee relevance, recency, follows, saves, explicit filters and content diversity. Sponsored placement is handled separately. Vantabean does not use sensitive personal data for ad targeting and does not target advertising through profiling where we know with reasonable certainty that the recipient is a minor. “Why this ad?” explains the business and the coarse context used for a placement.
Who can see information
Public profiles and public brews can be seen by visitors. Followers-only brews are limited by the selected visibility and private brews remain account-only. Verified business profile facts and approved promotions are public. Organisation members see only the workspace information allowed by their owner, admin, editor or analyst role. Moderators can access reports and evidence needed to make and audit a decision.
Retention and deletion
You can export your data or request permanent account deletion through Manage account. Active account content is retained while the account exists. Deleted production content is removed or de-identified, with residual encrypted backups expiring on their normal cycle. Support requests are normally retained for up to 24 months and moderation records for up to three years where needed for safety and appeals. Business verification and payment records may be retained longer where required to establish authority, prevent fraud, resolve disputes or meet bookkeeping and legal duties.
Your choices
You can edit your profile, choose post visibility, change notifications, hide posts, mute or block people, clear those safety lists, export your data, reset your password or delete your account. Subject to legal conditions, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. Contact us through in-product support. You may also complain to Datatilsynet.
Security
Vantabean uses access controls, row-level database policies, private storage, audit logs and role checks. No online service can promise absolute security. Please report suspected account misuse through support and keep your login method secure.
Changes
We may update this policy as the service changes. The date above shows when the current version took effect.