Privacy notice

• We collect what you type into our forms so we can service your equipment. That is the whole purpose.
• We count visits to the public pages with a tool that uses no cookies and cannot identify you. You can switch it off on this page.
• No advertising trackers, no social media pixels, no profiles built about you.
• One essential sign-in cookie, and only if you use the customer portal. That is why there is no cookie banner.
• We do not sell personal information or share it for advertising.
• You can ask for a copy of your data, or ask us to delete it, with one email.

North Texas Espresso Co. is a commercial coffee equipment service business in Dallas-Fort Worth, Texas. This notice covers this website, the customer portal and the emails the site sends.

When you request service, book a visit, send an enquiry or use the customer portal, the forms ask for the following. We use it to provide service: triage the request, schedule the visit, quote and invoice the work, and keep a service history for your equipment. We do not use it for anything else.

Name and business name

So we know who we are working for and whose machine it is.

Email address and phone number

To reply, confirm a visit, send a quote or a sign-in code, and reach you on the day.

ZIP code and service address

To check that you are inside the service area and to find the machine. The ZIP checker on the home page runs in your browser, so a ZIP typed there is not sent to us.

Equipment details

Category, make, model and serial number, so the request can be triaged and the right parts are on the truck.

A description of the problem

The symptom is what the pre-visit triage is built on.

Photos, if you choose to add them

A picture of the machine, the leak or the error code often settles the diagnosis before we drive. Photos are shrunk in your browser before upload.

Messages and notes

Anything you write in the contact form, a booking note or a note about a visit, so the conversation stays with the job.

Portal account details

Your sign-in email, the people you invite to your team and their roles, your equipment list, and which email notifications you want.

Fields marked optional can be left blank. After a visit we add our own records to your account: what was found, the work done, parts fitted and readings taken.

We count visits to the public pages so we can see which pages are useful and how people find us. The counting is done by Vercel Web Analytics, which was built to work without cookies and without identifying anyone. We see totals, such as how many people opened the services page this week. We never see a list of individuals.

To tell one visitor from another within a day, Vercel makes a scrambled value from the incoming request. It is discarded after 24 hours, so we cannot recognize you when you come back tomorrow, and it cannot be used to follow you to other websites.

If your browser sends a Global Privacy Control or Do Not Track signal, we do not count its visits at all. You can also switch counting off for this browser here:

Other things that happen automatically

Our hosting provider keeps short-lived server logs of each request (IP address, browser type, page and time), as every web host does. We use them only to fix errors and to investigate abuse.

When you ask for a portal sign-in code, we store a one-way fingerprint of your email address and of your network address. It lets us stop someone from requesting codes over and over. The fingerprint cannot be turned back into the original, and it is cleared out after a day.

If you only browse the public pages, this site sets no cookies at all. The customer portal signs you in with a code sent to your email, so there is no password for us to store, and once you are signed in it sets an essential cookie to keep you signed in.

sb-…-auth-tokenEssential cookie

Set only when you sign in to the customer portal. It keeps you signed in. Without it the portal cannot work.Lasts Until you sign out, or up to 400 days

sb-…-auth-token-code-verifierEssential cookie

Occasionally set for a few minutes while a sign-in link is being confirmed, then removed.Lasts Minutes

nte-analytics-offBrowser storage

Saved only if you press the switch above to stop visit counting. It holds the number 1 and nothing else.Lasts Until you clear it

There are no advertising cookies, no social media pixels and no embedded content from other sites. Fonts and icons are served from this site too, not from a third party.

Why there is no cookie banner. Banners exist to ask permission for cookies that are not needed to run a site. We do not use any, so there is nothing to ask. If that ever changes, a consent prompt will come first and this page will say so.

We run this site on a small number of service providers. Here is what each one does for us and what it handles along the way. They work under their own contracts and privacy terms, and we give them only what the job needs.

SupabaseDatabase and file storage

Form submissions, portal accounts, equipment records, service history and uploaded photos are stored with Supabase, in a United States region.

VercelWebsite hosting and visit counting

The site is served by Vercel. Like any web host, it handles the technical details of each request, such as IP address and browser type, in order to deliver pages and keep short-lived server logs. Vercel also runs the cookieless visit counting described above.

ResendTransactional email

Confirmations, sign-in codes, quotes and status updates are sent through Resend. It handles the address an email goes to, the content of that email, and whether it was delivered or bounced.

StripeOnline payments

Only when you choose to pay online. You pay on a page hosted by Stripe, which sets its own cookies there, and card numbers never touch this site.

AnthropicPre-visit triage, when enabled

When automated triage is switched on, the equipment category, make, model, urgency and your written description of the problem are sent to Anthropic's API so a model can suggest likely causes before the visit. Your name, contact details, address and photos are not part of that request.

Google WorkspaceBusiness email

Emails you send to us, and our replies, sit in a Google Workspace mailbox.

We do not sell personal information, and we do not share it for advertising.

Beyond the providers above, we would only pass information on if the law required it, such as a court order, or to protect the business and its customers from fraud. If the business were ever sold or merged, customer records would move to the new owner under the terms of this notice.

A service history is only useful if it is still there when the machine acts up again, so we keep working records for as long as they serve you. Here is how that breaks down.

Service history, quotes and invoices

For as long as you are a customer, and afterwards for as long as tax and warranty records have to be kept.

Requests, bookings and enquiries

Kept with your account so the history of a machine stays in one place. Ones that never became a job are deleted when you ask.

Photos

Kept with the request they belong to. If you ask us to delete a request, its photos are deleted as well.

Sign-in attempt fingerprints

Used for one hour, then cleared out once they are a day old, the next time the sign-in system runs.

Visit totals

Anonymous totals only. The value that tells one visitor from another is discarded after 24 hours.

Hosting and email delivery logs

Kept for a short period set by each provider, then deleted by them.

You can ask us to delete something sooner. We will, unless we are required to keep it. An invoice is the usual example.

• Every page is served over an encrypted connection.
• Portal sign-in uses a one-time code sent to your email. There is no password to leak or reuse.
• The database enforces that each business sees only its own records, and staff notes are kept where customers cannot read them.
• Photos sit in private storage. Staff view them through links that expire after an hour.
• Card payments are handled entirely by Stripe.

Tracking links, quote links and the QR tags on your machines use long random addresses instead of a sign-in. Anyone holding the link can open that one page, so forward them with the same care as the email they arrived in. A tracking page shows progress and never shows your contact details.

No system is perfectly secure. If a breach ever affected your information, we would tell you promptly, as Texas law requires.

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it, by emailing service@northtexasespresso.com. Send it from the address you used with us so we can match the request to your records. We answer within 30 days, and usually much sooner.

In the customer portal you can edit your business details and equipment, remove people from your team, and choose which emails you get under Settings. Emails about a job in progress, such as a sign-in code or a visit confirmation, are part of the service and cannot be switched off.

To stop visit counting, use the switch above or turn on Global Privacy Control in your browser.

Anything else about how your information is handled, ask the same way or use the contact page. A technician replies, not a call center.