Privacy

Information we collect

We collect the following categories of information:

• Account information: your name, email address, and profile photo, provided by Google when you sign in with your Google account.
• Winery operational data: the records your winery enters or uploads, including harvest intakes, vineyard plots and growers, vessels and production lots, cellar operations, lab analyses, bottling runs, facility floor plans, and any documents or photos attached to those records.
• Usage data: information about how you use the Service, such as pages visited, actions taken, browser type, and IP address, collected automatically to operate, secure, and improve the Service.
• Cookies: session cookies that keep you signed in and remember preferences such as your language and selected winery. We do not use advertising or cross-site tracking cookies.

How we use information

We use the information we collect to provide and secure the Service for your winery: to authenticate you and enforce winery-level access controls, to generate the reports, exports, and labels you request, to diagnose and fix technical problems, to communicate with you about your account, and to improve the Service based on aggregated usage patterns. We do not use your winery's operational data to train third-party AI models, and we do not sell your information.

How we share information

Data you enter is visible to other members of your winery according to their assigned role. We share information with the service providers listed below, who process it on our behalf and are contractually required to protect it and use it only to provide services to us. We may also disclose information if required by law or valid legal process, or to protect the rights, property, or safety of Cellarbook, our users, or others. If Cellarbook is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; we will notify winery administrators of any material change. We do not sell your personal information or your winery's operational data.

Subprocessors and infrastructure

We rely on the following infrastructure providers to operate the Service:

• Supabase — database, authentication, and file storage for your winery's records.
• Google — sign-in (OAuth). Google receives only the authentication request; it does not receive your winery's operational data.
• Vercel — application hosting.
• Rollbar — error monitoring, used to capture technical details (such as a stack trace and the page you were on) when something fails, so we can fix it.

Data retention

We retain your winery's operational data for as long as the winery's account is active. If a winery's account is closed, we delete or anonymize its data within 90 days, unless a longer period is required by law or to resolve disputes, enforce our agreements, or prevent fraud. You can request an export of your winery's data at any time before closure.

Your rights and choices

You can access, correct, or export most of your winery's data directly within the Service. You may also contact us to request a copy of your data, ask us to correct inaccurate information, or request deletion of your account or your winery's data, subject to the retention exceptions above. Depending on where you live, you may have additional rights under applicable data protection law, such as the GDPR or CCPA; contact us to exercise them.

Security

We encrypt data in transit and rely on our infrastructure providers' security controls, including database policies that keep each winery's data isolated from every other winery's data. Access is limited to your winery's members and to Cellarbook personnel who need it to provide support or maintain the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

Cellarbook is a business tool intended for winery personnel and is not directed to children. We do not knowingly collect information from anyone under 16 years old.

International data transfers

Depending on your location and the regions used by our infrastructure providers, your information may be processed in a country other than your own. We take steps to ensure appropriate safeguards are in place for these transfers.

Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we will notify winery administrators by email or within the Service before it takes effect. The date at the top of this page reflects the most recent revision.

Contact us

If you have questions about this Privacy Policy or your data, contact us at hi@cellarbook.co.