coffee-on.mecoffee-on.me

DRAFT — PENDING LEGAL REVIEW. This document is a first-pass working draft prepared for internal review only. It has not been reviewed or approved by a qualified lawyer, has not been published or made binding on any user, and must not be treated as a final or enforceable Terms of Service. It contains bracketed placeholders and explicit "Notes for Legal Review" (see the end of this document) marking every point where the underlying facts were not available at drafting time. Do not publish, link to, or rely on this document until it has cleared legal review.

Draft date: 9 September 2026. Prepared against coffee-on-me-legal branch legal/2026-09-pages, commit 64b23f8.


Terms of Service

coffee-on.me

These Terms of Service ("Terms") govern access to and use of coffee-on.me (the "Service"), provided by the Company (as defined below). By creating an account, accessing a Workspace, or otherwise using the Service, you agree to be bound by these Terms. If you are using the Service on behalf of an organisation, you confirm that you have authority to bind that organisation, and "you" refers to both you and that organisation.

If you do not agree to these Terms, do not use the Service.

Table of contents

  1. Definitions
  2. About the Company and These Terms
  3. The Service
  4. Eligibility and Accounts
  5. Your Responsibilities as a Data Controller
  6. Acceptable Use
  7. Candidate and Client Consent
  8. Data Protection and Security
  9. Intellectual Property
  10. Confidentiality
  11. Fees and Payment
  12. Term, Suspension, and Termination
  13. Disclaimers
  14. Limitation of Liability
  15. Indemnification
  16. Changes to the Service and These Terms
  17. Governing Law and Dispute Resolution
  18. General Provisions
  19. Contact

1. Definitions

2. About the Company and These Terms

2.1 coffee-on.me is operated by the Company. [The Company's registered name, company number, registered office address, and jurisdiction of incorporation are placeholders pending confirmation — see Section 20.]

2.2 These Terms, together with our Privacy Policy and any order form or plan description agreed between you and the Company (each incorporated by reference), form the entire agreement governing your use of the Service. Where a companion Privacy Policy, Cookie Policy, or Data Processing Addendum is referenced in these Terms, that document is intended to be published separately and is not part of this draft.

2.3 The Service is provided for use by businesses and individuals acting in a professional or trade capacity for the purpose of hiring-related outreach. It is not directed at consumers acting for purposes outside a trade, business, craft, or profession.

3. The Service

3.1 What coffee-on.me is — and is not

coffee-on.me is a tool for founders and recruiters to reach and converse with candidates and clients through consented, AI-agent-mediated conversations, initiated primarily via a Share Link sent by the Recruiter. coffee-on.me is not a job board and is not an applicant-tracking system. It does not publish job listings for candidates to browse, and it is not designed as a system of record for a formal, high-volume recruitment pipeline. Its purpose is deliberately narrower: to help a Recruiter have a small number of genuine, individually-initiated conversations, not to enable mass or automated outreach at scale (see Section 6).

3.2 Core features

Depending on your plan, the Service may provide:

3.3 AI-assisted processing

3.3.1 The Service is built around AI agents that read and generate the content of conversations, extract structured facts from uploaded documents and call transcripts, and, where a conversation references a publicly accessible web page (for example, a Candidate's public LinkedIn profile), retrieve and read that page automatically. You acknowledge that AI-generated content and AI-extracted facts may be incomplete, out of date, or inaccurate, and that you remain responsible for reviewing and verifying any information you rely on before making a recruiting or hiring-related decision. The Service is a communication and information-management aid; it does not make hiring decisions and must not be treated as a substitute for your own professional judgment or for any legally required human review of recruitment decisions.

3.3.2 Where a plain server-side web fetch of a referenced page is blocked by bot detection, the Service may route that single URL — and only that URL and the resulting public page content — to automated rendering infrastructure to retrieve it (see Section 8.2). This does not involve sending any of your Workspace's stored Candidate, Client, or conversation data to that infrastructure.

3.4 Voice calling (optional feature)

Voice bridging between a Recruiter and a Candidate or Client, live call transcription, and post-call audio recording are optional capabilities that the Company may enable for your Workspace or plan; they are not active for every account by default. Where enabled, calls are subject to the dual-consent requirement in Section 7.3, and call recordings and transcripts are processed and retained as described in Section 8.4. Do not assume voice calling is available for your account unless the Company has confirmed it is enabled.

3.5 Beta and experimental features

From time to time the Company may make beta, preview, or experimental features available. These are provided "as is", may be changed or withdrawn at any time without notice, and are excluded from any service-level commitment the Company otherwise makes.

4. Eligibility and Accounts

4.1 You must be at least 18 years old and capable of forming a binding contract to create an account.

4.2 You are responsible for the accuracy of the information you provide when creating an account and for keeping your login credentials confidential. You must notify the Company promptly of any unauthorised use of your account.

4.3 A Workspace may have multiple members. The Recruiter or administrator who controls a Workspace is responsible for the actions of every member of that Workspace under these Terms, and for that Workspace's compliance with Sections 5, 6, and 7.

4.4 The Company may decline to open, or may suspend, an account where it reasonably believes these Terms have been or are likely to be breached, consistent with Section 12.

5. Your Responsibilities as a Data Controller

5.1 When you use the Service to collect, store, or process Personal Data about Candidates or Clients, you — not the Company — act as the Controller of that Personal Data in the great majority of cases, and the Company acts as your Processor, processing that data only on your instructions and for the purpose of providing the Service. This allocation of roles will be set out in more detail in the Company's Data Processing Addendum (to be provided separately).

5.2 As Controller, you are responsible for:

(a) having a valid lawful basis under applicable data protection law for every piece of Candidate or Client Personal Data you enter into the Service, and for every message, call, or document exchange the Service carries out on your behalf;

(b) providing any privacy notice required to a Candidate or Client before or at the point you first process their data through the Service;

(c) obtaining and recording, through the Service's consent mechanisms described in Section 7, any consent the Service requires before it will perform a given action (for example, re-contacting a Candidate about a future role, sharing a Candidate's profile with a Client, or recording a call) — and for not attempting to bypass, falsify, or coerce that consent;

(d) honouring a Candidate's or Client's exercise of their data protection rights (including withdrawal of consent, access, correction, or erasure) promptly, using the export and erasure tools the Service provides or by contacting the Company where a request falls outside those tools;

(e) only uploading documents, contact details, or other Personal Data that you are lawfully entitled to hold and to submit to the Service; and

(f) complying with all applicable law governing recruitment, direct marketing, and electronic communications (including, in the UK, rules on unsolicited electronic communications) in the way you use the Service to contact Candidates and Clients.

5.3 The Company processes Recruiter account data (for example, your own name, email, and phone number as a Workspace member) as an independent Controller for account administration, security, billing, and legal-compliance purposes, as described in the Privacy Policy.

6. Acceptable Use

6.1 No spam or mass outreach. The Service exists to support genuine, individually-initiated conversations, not volume outreach. You must not use the Service to:

(a) send unsolicited, templated, or bulk messages to Candidates or Clients with whom you have no genuine, individualised basis for outreach;

(b) contact a Candidate or Client at a scale, frequency, or in a manner inconsistent with the consent actually captured for that Contact (see Section 7), including re-contacting a Candidate for future roles without the required follow-up consent;

(c) circumvent, disable, or attempt to manipulate the Service's consent gates, quiet-hours settings, or cross-Workspace matching controls; or

(d) use the Service as a channel for marketing, advertising, or any purpose other than founder-led recruiting conversations, without the Company's prior written consent.

6.2 You must not:

(a) upload any document or enter any data you do not have the right to submit, including a Candidate's CV or a Client's job description obtained without their knowledge or in breach of a confidentiality obligation to a third party;

(b) use the Service to discriminate unlawfully against any Candidate on any protected ground, or to build or apply any automated scoring or filtering that has that effect;

(c) attempt to extract, scrape, or reconstruct the underlying AI models, training data, or system prompts used by the Service, or use outputs of the Service to build a competing product;

(d) probe, scan, or attempt to circumvent any security control of the Service or of any third-party infrastructure the Service relies on, including the URL-fetching tooling described in Section 8.2;

(e) use the Service's SMS or voice-calling functionality to make unsolicited or automated calls or texts otherwise than in compliance with applicable telecommunications and electronic-marketing law, or in a manner that would place the Company in breach of its own obligations to its telephony and messaging providers; or

(f) reverse-engineer, resell, sublicense, or provide access to the Service to any third party except as expressly permitted under your plan.

6.3 The Company may investigate suspected breaches of this Section and take proportionate action, including suspension or termination under Section 12.

7. Candidate and Client Consent

7.1 The Service captures certain consents from Candidates and Clients directly, as a matter of product design, and gates specific actions on those consents being present and not withdrawn. As of this draft, the tracked consent purposes are:

PurposeWhat it gates
Follow-upRe-contacting a Candidate or Client about future roles after the current conversation ends.
Profile shareSharing a Candidate's profile with a specific Client for a specific role.
Call transcriptionRecording and transcribing a call. Required from both the Recruiter and the call recipient before any call the Service bridges can be transcribed.
Audio trainingA separate, optional, opt-in consent for a call recording to be retained beyond the ordinary temporary retention window as part of a training corpus.

7.2 A withdrawal of any of these consents by a Candidate or Client takes effect within the Service going forward; you must not attempt to act as though a withdrawn consent were still in force.

7.3 Calls cannot be transcribed without both parties' consent. The Service is designed so that a call cannot be bridged for transcription unless the Recruiter's standing transcription consent and the recipient's own transcription consent, captured at the point of the call, are both present. You must not attempt to record or transcribe a call by any means outside the Service's own consent-gated call flow.

7.4 Identity is not recorded before verification. Where a Candidate or Client is invited via a Share Link and has not previously interacted with the Service, no persistent record of their contact details is created until they verify a one-time passcode sent to that contact address. You must not attempt to work around this design to record a person's details before they have verified their own identity.

7.5 Cross-Workspace sharing gate. A Candidate's profile can only be introduced to a Workspace other than the one that originally captured it where a defined set of consent and eligibility conditions are all independently satisfied, including the Candidate's own introduction permission. You acknowledge that, subject to this gate, a Candidate's canonical profile may be surfaced to a Workspace other than your own, and that you must reflect this possibility in whatever privacy information you give a Candidate.

7.6 Further detail on how these consents are captured, recorded, and can be withdrawn will be set out in the Company's Privacy Policy (to be provided separately).

8. Data Protection and Security

8.1 Roles and this Section's scope

This Section summarises, at a contractual level, how the Service processes Personal Data. It does not replace the Company's Privacy Policy or any Data Processing Addendum, each to be published separately, which will contain the full, current detail (including the current sub-processor list, retention schedule, and international-transfer safeguards).

8.2 Sub-processors

The Company uses the following categories of third-party service provider to operate the Service. This list reflects the sub-processors identified as of the date of this draft and is not exhaustive of every provider the Company may use in future; the current list will be maintained in the Privacy Policy or a dedicated sub-processor page.

ProviderRole
AnthropicProvides the AI models and managed-agent infrastructure that power conversations, document-extraction, call-transcript extraction (where voice calling is enabled), and image/vision processing. Certain conversations run as provider-side persistent sessions, meaning Anthropic retains a copy of the relevant transcript on its own infrastructure, independent of the Company's own database.
Supabase (rows)Hosts the Service's primary application database (people, relationships, documents metadata, chat messages, consents, call sessions, and related records), hosted in the UK.
Supabase (storage)Hosts binary file storage only (CVs, job descriptions, extracted-text companions, call audio, share-link media, and recruiter avatar images), on a separate project from the rows database, hosted outside the UK (see Section 8.3).
SendGridSends transactional email notifications (for example, recruiter alerts and callback requests).
TelnyxSends SMS notifications and, where voice calling is enabled, provides call bridging, live transcription, and call-recording retrieval. Telnyx's own transcription integration uses Deepgram as a sub-sub-processor for speech-to-text; the Company does not hold a direct relationship with Deepgram.
VercelHosts the application and its scheduled background jobs.
Google Cloud Run (two services)Automated web-page rendering used only when a conversation references a public URL (for example, a Candidate's public LinkedIn page) that a plain fetch cannot retrieve, as described in Section 3.3.2. These services receive the referenced URL and the resulting public page content only — not your Workspace's stored data.

8.3 International transfers

The Service's own infrastructure already spans more than one region: the primary application database is hosted in the UK, while file storage is hosted outside the UK and outside the EU. Additional sub-processors listed in Section 8.2 may process data in locations not pinned down in this draft (see Section 20). Where Personal Data originating in the UK or EEA is transferred to a country that does not benefit from an applicable adequacy decision, the Company will put in place an appropriate transfer mechanism (such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses) before or as part of that transfer. The full, current statement of transfer locations and safeguards will be set out in the Privacy Policy.

8.4 Retention

Different categories of data are retained for different periods, reflecting their purpose:

The exact production values behind these retention periods should be confirmed before this Section is finalised (see Section 20).

8.5 Data subject rights: export and erasure

8.5.1 The Service provides built-in mechanisms for a Candidate, Client, or Connected Individual to request export or erasure of their data, reachable from within the relevant conversation or portal. On a verified erasure request, the Service:

(a) deletes stored files (documents, call audio, and extracted text) and their associated extraction records;

(b) deletes structured profile facts built up about the person;

(c) overwrites directly identifying fields on the relevant relationship or person record and marks it erased; and

(d) redacts the content of conversation messages associated with that person, in the manner described in Section 8.4.

8.5.2 Where the erasure request relates to a Candidate or Client managed within a single Recruiter's Workspace conversation, the Service also makes a best-effort request to Anthropic to delete the corresponding provider-side managed-agent session. As of this draft, this additional step is implemented for that pathway but has not been confirmed as implemented for the parallel pathway that applies to a Connected Individual's own cross-Workspace identity; this is flagged for resolution before publication (see Section 20).

8.5.3 Nothing in this Section limits any statutory right a Candidate, Client, or Connected Individual has to request export or erasure of their Personal Data directly from the Company or, where the Company acts as Processor, to route that request through the relevant Recruiter as Controller.

8.6 Security

The Company maintains technical and organisational measures designed to protect Personal Data processed through the Service, including access controls scoped to a Workspace, encryption of data believed to be sensitive at rest where applicable, and time-limited signed URLs for media access. Further detail will be provided in the Privacy Policy or on request.

8.7 Cookies (marketing site)

As of this draft, the Company's public marketing pages do not set any cookies and do not load any third-party analytics, tracking, or advertising scripts. Cookies used elsewhere in the Service are limited to those strictly necessary to keep you signed in and your session secure. If this changes — for example, if analytics are added to the marketing site in future — the Company will publish a Cookie Policy and, where required, a cookie-consent mechanism, and will update this Section accordingly.

9. Intellectual Property

9.1 The Company and its licensors own all right, title, and interest in the Service, including its software, design, and underlying technology. These Terms grant you a limited, non-exclusive, non-transferable licence to access and use the Service for your internal recruiting purposes during your subscription, and no other rights.

9.2 As between you and the Company, you retain ownership of the Content you or your Workspace submit to the Service (including uploaded documents and messages you author). You grant the Company a licence to host, process, transmit, and display that Content solely as necessary to provide the Service to you, including by routing it to the sub-processors described in Section 8.2.

9.3 You must not use any trade mark, logo, or branding of the Company without prior written consent.

10. Confidentiality

10.1 Each party may receive confidential information of the other in connection with the Service (for example, non-public information about your recruiting pipeline, or non-public information about the Company's technology). Each party agrees to use the other's confidential information only to perform its obligations under these Terms, and to protect it with at least the same care it uses for its own confidential information of similar importance, and no less than reasonable care.

10.2 This Section does not apply to information that is or becomes public other than through breach of these Terms, was already known to the receiving party without an obligation of confidence, or is independently developed without use of the disclosing party's confidential information.

10.3 Personal Data about Candidates and Clients processed through the Service is, in addition to being confidential information under this Section, subject to the data protection terms in Sections 5, 7, and 8.

11. Fees and Payment

This Section is deliberately generic. As of the date of this draft, the Company has described its intended commercial model as a free trial followed by a paid subscription tier, but no payment processor is integrated into the Service, and no live pricing, billing cycle, or payment terms exist yet. This Section must be revisited and made specific once billing is implemented, and should not be relied on as final.

11.1 Free trial. The Company may offer a free trial period. At the end of any trial, continued use of the Service may require a paid subscription. The Company will describe the length and terms of any trial at the time it is offered.

11.2 Subscription fees. Where a paid subscription applies, fees will be as set out in the applicable order, plan page, or invoice agreed with you, payable in advance for the applicable billing period unless otherwise stated.

11.3 Taxes. Fees are exclusive of any applicable sales, value-added, or similar taxes, which you are responsible for in addition to the stated fees, except taxes on the Company's net income.

11.4 Renewal and changes. Unless otherwise agreed, subscriptions renew automatically for successive periods matching the original billing period, at the then-current fee, unless cancelled before the renewal date. The Company will give reasonable advance notice of any fee increase taking effect on renewal.

11.5 Non-payment. The Company may suspend or, following continued non-payment after notice, terminate access to the Service for unpaid fees, subject to Section 12.

11.6 Refunds. Except as required by law or expressly stated at the point of purchase, fees are non-refundable.

12. Term, Suspension, and Termination

12.1 These Terms apply from the point you first access the Service and continue until terminated as described in this Section.

12.2 Termination for convenience. You may stop using the Service and, if you have a paid subscription, cancel it in accordance with the cancellation terms applicable to your plan. The Company may terminate a free or trial account at any time on reasonable notice.

12.3 Termination for cause. Either party may terminate immediately on written notice if the other party materially breaches these Terms and, where the breach is capable of remedy, fails to remedy it within a reasonable period after being asked to do so. The Company may also suspend or terminate immediately, without prior notice, where it reasonably believes continued access poses a security, legal, or safety risk, or where Section 6 has been breached in a way that risks harm to a Candidate, Client, or third party.

12.4 Effect of termination. On termination, your right to access the Service ends. Data associated with your Workspace will be retained, exported, or deleted in accordance with Section 8.4 and 8.5 and any separately agreed data-return process; termination does not by itself trigger deletion of Candidate or Client data where a lawful basis independent of the Recruiter relationship requires it to be retained (for example, an unresolved erasure or export obligation).

12.5 Sections 8 (to the extent obligations to Candidates, Clients, and Connected Individuals survive), 9.1–9.2 (as to Content already processed), 10 (Confidentiality), 14 (Limitation of Liability), 15 (Indemnification), 17 (Governing Law and Dispute Resolution), and 18 (General Provisions) survive termination.

13. Disclaimers

13.1 The Service is provided "as is" and "as available". To the maximum extent permitted by law, the Company disclaims all warranties, express or implied, including any implied warranty of satisfactory quality, fitness for a particular purpose, or non-infringement.

13.2 The Company does not warrant that the Service will be uninterrupted, error-free, or free of security vulnerabilities, or that AI-generated content, extracted facts, or matching suggestions will be accurate, complete, or suitable for any particular recruiting decision. You are responsible for independently verifying any information the Service surfaces before relying on it, and for complying with any legal requirement for human review of a recruitment decision.

13.3 Nothing in this Section excludes or limits any warranty or right that cannot lawfully be excluded or limited, including under consumer-protection law where it applies.

14. Limitation of Liability

14.1 Nothing in these Terms excludes or limits either party's liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot lawfully be excluded or limited.

14.2 Subject to Section 14.1, neither party will be liable to the other for any indirect, special, incidental, or consequential loss, or for loss of profits, revenue, goodwill, or anticipated savings, arising out of or in connection with these Terms, however caused, even if advised of the possibility of such loss.

14.3 Subject to Sections 14.1 and 14.2, the Company's total aggregate liability arising out of or in connection with these Terms, whether in contract, tort (including negligence), or otherwise, will not exceed the greater of (a) the fees you paid to the Company in the 12 months preceding the event giving rise to the claim, or (b) [a nominal amount to be confirmed — placeholder, e.g. £100] for accounts on a free or trial plan.

14.4 The limitations in this Section do not limit your obligations under Section 5 as Controller of Candidate and Client Personal Data, or the Company's obligations as Processor, which will be more fully addressed in the Company's Data Processing Addendum.

15. Indemnification

15.1 You will indemnify and hold the Company harmless against any claim, loss, or liability (including reasonable legal costs) arising from: (a) your breach of Section 5 (your obligations as data controller) or Section 6 (acceptable use); (b) Content you submit to the Service, including any claim that it infringes a third party's rights or was submitted without a lawful basis; or (c) your use of the Service in violation of applicable law.

15.2 The Company will indemnify and hold you harmless against any claim that the Service, as provided by the Company and used in accordance with these Terms, infringes a third party's intellectual property rights, subject to customary carve-outs (for example, modification by you, or combination with materials not provided by the Company).

16. Changes to the Service and These Terms

16.1 The Company may update the Service, including adding, changing, or removing features (including beta features under Section 3.5), from time to time.

16.2 The Company may update these Terms from time to time. Where a change is material, the Company will give reasonable notice (for example, by email or an in-product notice) before it takes effect. Continued use of the Service after a change takes effect constitutes acceptance of the updated Terms.

17. Governing Law and Dispute Resolution

This Section assumes England and Wales as the governing law and forum, as the Company's default working assumption for a UK/EU-facing product. This has not been confirmed against the Company's actual (as yet unconfirmed) place of incorporation and should be checked by counsel before publication.

17.1 These Terms, and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims), are governed by the laws of England and Wales.

17.2 The courts of England and Wales have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these Terms, save that the Company may seek injunctive or other equitable relief in any jurisdiction to protect its intellectual property or confidential information.

17.3 Before commencing formal proceedings, the parties will attempt in good faith to resolve any dispute through informal negotiation between senior representatives for a period of [30 days — placeholder] from written notice of the dispute.

18. General Provisions

18.1 Assignment. You may not assign or transfer these Terms without the Company's prior written consent. The Company may assign these Terms in connection with a merger, acquisition, or sale of substantially all of its assets.

18.2 Severability. If any provision of these Terms is held unenforceable, the remaining provisions continue in full force, and the unenforceable provision will be replaced by an enforceable provision that most closely reflects the parties' original intent.

18.3 No waiver. A failure to enforce any provision of these Terms is not a waiver of the right to enforce it later.

18.4 Force majeure. Neither party is liable for delay or failure to perform caused by events beyond its reasonable control.

18.5 Notices. Notices under these Terms should be sent to the contact details in Section 19 (for the Company) or the email address on your account (for you).

18.6 Entire agreement. These Terms, together with the documents referenced in Section 2.2, constitute the entire agreement between you and the Company regarding the Service and supersede any prior agreement on the same subject.

18.7 Third-party rights. Except as expressly stated, a person who is not a party to these Terms has no right to enforce any term of these Terms.

19. Contact

Questions about these Terms can be sent to [support/legal contact address — placeholder, to be confirmed].