surf.coffee - ваша собственная цифровая экосистема (MVP готов)

Привет, команда Surf Coffee! 🏄‍♂️

Я Раиль, Senior Fullstack разработчик и ваш постоянный гость. Мы с командой единомышленников создали прототип того, как может выглядеть цифровое будущее Surf, и закрепили за ним идеальное доменное имя - surf.coffee.

Прототип уже работает, вы можете оценить его прямо сейчас: surf.coffee

Что это и зачем?

Мы разработали платформу, которая даёт Surf Coffee собственный цифровой канал - прямой контакт с гостями без зависимости от внешних соцсетей:

Своя соцсеть: Лента коротких сообщений (постов) для гостей. Это независимость от внешних платформ и прямой контакт с аудиторией в вашем фирменном стиле.
Заказы и еда: Возможность оформлять заказы прямо внутри интерфейса.
Скорость: Мы использовали технологии последнего поколения, чтобы интерфейс работал мгновенно даже при слабом интернете.

Почему мы это сделали?

Мы не типичное агентство с горой бюрократии. Мы - ваши лояльные клиенты, которые умеют быстро превращать идеи в работающий код. Нам важен вайб Surf, поэтому мы создали этот проект по собственной инициативе.

Наша главная цель - найти точки соприкосновения. Соцсеть - это только начало. Мы можем реализовать для вас любое решение:

Системы лояльности нового поколения (web/mobile).
Профессиональный софт для бариста и внутреннего управления.
Геймификация: игры и интерактив внутри ваших приложений.

Мы готовы гибко подстраиваться под ваши задачи, быстро получать фидбек и внедрять изменения. Это тот случай, когда подрядчик не просто «делает за деньги», а живет продуктом.

Если вам откликается наш подход - будем рады обсудить, как мы можем быть полезны сети Surf Coffee. Буду рад короткому ответу в любом случае, чтобы понимать, что письмо дошло.

Surfing never alone! Раиль и команда.

Privacy Policy for surf.coffee

This Privacy Policy describes how surf.coffee ("we," "us," or "our") collects, uses, and discloses your information when you visit and use our website, surf.coffee.

1. Information We Collect

We collect certain information when you interact with our website:

Email Address: In some cases, we collect your email address if you choose to register for an account.
Authentication Data: When you use third-party services for authentication (such as Google), we receive information necessary to facilitate your login.
Cookies: We use cookies solely for authentication purposes to keep you logged into our service.

2. How We Collect Your Information

We collect information through the following methods:

Directly from You: When you manually provide your email address for registration.
Through Third-Party Authentication Services: When you choose to log in using your Google or Telegram accounts.

3. How We Use Your Information

We use the information we collect for the following purposes:

Authentication: To allow you to log in and access our services.
Security: To maintain the security and integrity of our website and your account.

We do not share your personal data with any third parties.

5. Data Retention

We retain your personal data until you request its deletion.

6. Your Rights and Choices

You have the right to manage or delete your data. You can typically do this through your account settings on our website.

7. Cookies

As mentioned, we use cookies exclusively for authentication purposes to provide you with a seamless login experience.

8. Data Security

We are committed to protecting your data. We use server-side encryption to secure your information and do not transfer your data to third parties.

9. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under the age of 13, we will take steps to delete such information from our records.

We recognize that we may have users from the European Union (EU) and California (USA). This Privacy Policy is intended to comply with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) where applicable.

11. International Data Transfers

We do not engage in international data transfers of your personal information.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: security@surf.coffee

Terms of Service for surf.coffee

These Terms of Service ("Terms") govern your access to and use of the surf.coffee website and its services ("Service"). By accessing or using the Service, you agree to be bound by these Terms.

1. Acceptance of Terms

By accessing or using the surf.coffee website, you confirm your agreement to be bound by these Terms and all terms incorporated by reference. If you do not agree to all of these Terms, do not access or use the Service.

2. Description of Service

TBD

3. User Accounts

To access certain features of the Service, you may be required to register for an account.
You are responsible for maintaining the confidentiality of your account login information and are fully responsible for all activities that occur under your account.
You agree to notify surf.coffee immediately of any unauthorized use of your account.

4. User Conduct and Responsibilities

You agree to use the Service in compliance with all applicable laws and regulations, including local government rules of the jurisdiction where you are located. You agree not to, and will not permit any third party to:

Upload, post, transmit, or otherwise make available any content that is unlawful, harmful, threatening, abusive, harassing, tortious, defamatory, vulgar, obscene, libelous, invasive of another's privacy, hateful, or racially, ethnically, or otherwise objectionable.
Engage in spamming, phishing, or any form of unsolicited advertising.
Impersonate any person or entity, or falsely state or otherwise misrepresent your affiliation with a person or entity.
Interfere with or disrupt the Service or servers or networks connected to the Service.
Violate any intellectual property rights, including copyrights, trademarks, or patents, of surf.coffee or third parties.
Engage in fraudulent activities.
Upload or transmit any content that contains viruses or any other harmful code, files, or programs.

5. User-Generated Content

Content Types: Users may upload text and images. All user-generated content must comply with Section 4 ("User Conduct and Responsibilities").
License to surf.coffee: By uploading, posting, or submitting content to surf.coffee, you grant surf.coffee a worldwide, non-exclusive, royalty-free, sublicensable, and transferable license to use, reproduce, distribute, prepare derivative works of, display, and perform your content in connection with the Service and surf.coffee's (and its successors' and affiliates') business, including without limitation for promoting and redistributing part or all of the Service (and derivative works thereof) in any media formats and through any media channels. This license will terminate when you delete your content from the Service.

6. Intellectual Property Rights

All rights, title, and interest in and to the Service (excluding content provided by users), including its design, code, logos, trademarks, and all other proprietary rights, are and will remain the exclusive property of surf.coffee and its licensors. The Service is protected by copyright, trademark, and other laws of both the United States and foreign countries. Nothing in the Terms gives you a right to use the surf.coffee name or any of the surf.coffee trademarks, logos, domain names, and other distinctive brand features.

7. Paid Services

Paid Usernames and Tariffs: surf.coffee offers paid usernames and various service tariffs.
Cancellations: You can cancel your paid subscription at any time.
No Refunds: Payments for paid services are non-refundable.

8. Termination

By User: You may terminate your account at any time through your account settings.
By surf.coffee: We may suspend or terminate your access to the Service at any time, with or without cause, with or without notice, effective immediately, for any reason, including, but not limited to, your breach of these Terms.

9. Disclaimer of Warranties

The Service is provided "AS IS" and "AS AVAILABLE" without any warranties of any kind, either express or implied, including, but not limited to, implied warranties of merchantability, fitness for a particular purpose, non-infringement, or course of performance. surf.coffee does not warrant that the Service will be uninterrupted, secure, or error-free.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, surf.coffee SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM (A) YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICE; (B) ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE SERVICE, INCLUDING WITHOUT LIMITATION, ANY DEFAMATORY, OFFENSIVE OR ILLEGAL CONDUCT OF OTHER USERS OR THIRD PARTIES; (C) ANY CONTENT OBTAINED FROM THE SERVICE; OR (D) UNAUTHORIZED ACCESS, USE OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT.

IN NO EVENT SHALL THE AGGREGATE LIABILITY OF surf.coffee EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS (U.S. $100.00) OR THE AMOUNT YOU PAID surf.coffee, IF ANY, IN THE PAST SIX MONTHS FOR THE SERVICE GIVING RISE TO THE CLAIM.

11. Governing Law and Dispute Resolution

These Terms shall be governed and construed in accordance with the laws of the State of California, without regard to its conflict of law provisions.

Any dispute arising from or relating to the subject matter of these Terms shall be finally settled by binding arbitration in San Francisco County, California, under the Rules of the American Arbitration Association then in effect. Judgment upon the award rendered by the arbitrator may be entered in any court of competent jurisdiction. The prevailing party in any action or proceeding to enforce these Terms shall be entitled to costs and attorneys' fees.

12. Changes to Terms

We reserve the right, at our sole discretion, to modify or replace these Terms at any time. If a revision is material, we will provide at least 30 days' notice prior to any new terms taking effect. What constitutes a material change will be determined at our sole discretion. We will notify you of any such changes by posting them on the surf.coffee blog. By continuing to access or use our Service after those revisions become effective, you agree to be bound by the revised terms.

13. Contact Us

If you have any questions about these Terms, please contact us at:

Email: security@surf.coffee

Security Policy for surf.coffee

This Security Policy outlines the measures taken by surf.coffee ("we," "us," or "our") to protect your information and our systems from unauthorized access, use, disclosure, alteration, or destruction.

1. Purpose and Scope

The primary goals of this Security Policy are to:

Protect User Data: Safeguard the personal and generated content of our users.
Ensure Service Availability: Maintain the uninterrupted operation and accessibility of the surf.coffee website.
Comply with Regulations: Adhere to relevant data protection and security standards.

This policy applies to all systems, data, and personnel associated with the surf.coffee website.

2. Responsibilities

The surf.coffee Team is responsible for the implementation, maintenance, and oversight of this Security Policy.

3. Data We Protect

We are committed to protecting the following categories of data:

User Personal Data: Including email addresses collected during registration.
Authentication Data: Such as password hashes or authentication tokens.
User-Generated Content: All content uploaded or created by users on our platform.
Operational Data: Any data related to the functioning and performance of our services.

4. Security Measures

We employ a variety of security measures to protect your data and our systems:

Secure Communication: All data transmission to and from surf.coffee is secured using HTTPS/SSL encryption.
Authentication: We offer robust authentication methods, including:
- Passkeys: For strong, phishing-resistant authentication.
- Key Pairs: For secure access.
- Third-Party Authentication: Secure integration with trusted services like Google for user login.
Data Encryption: Sensitive data is protected through server-side encryption.
Access Control: Access to our systems and data is strictly controlled on a "need-to-know" basis, ensuring that only authorized personnel can access critical resources.
Regular Backups: Daily backups of all critical data are performed to ensure data recovery in case of loss or corruption.
Monitoring and Logging: We actively monitor system activity and collect logs to detect and respond to suspicious behavior or potential security incidents.
Patch Management: Our systems and software are regularly updated, with security patches applied every two weeks to address known vulnerabilities.
Personnel Training: Our team members receive ongoing training on security best practices and awareness.

5. Incident Response

In the event of a security incident, our process involves:

Investigation: Thoroughly studying the incident to understand its scope and impact.
Remediation: Taking immediate action to contain the incident and rectify any vulnerabilities that contributed to it.
Prevention: Implementing measures to prevent similar incidents from occurring in the future.

surf.coffee docs