Privacy Policy

We take data security seriously:

• Passwords are hashed using industry-standard bcrypt encryption
• All data is stored in secure PostgreSQL databases
• Communication with our servers uses HTTPS encryption
• Session tokens are stored in HttpOnly cookies on the web
• We never sell your personal information to third parties

We use the following third-party services:

• Google Maps API: For restaurant location and autocomplete on the web
• OpenAI Vision: For wine menu image processing

Google Maps is subject to Google's privacy policy:

• Google Privacy Policy

For users in the European Economic Area (EEA) and UK, we process your data based on:

• Contract: Processing necessary to provide our service to you
• Consent: When you explicitly agree to specific data processing
• Legitimate Interests: For service improvement and security

All Users

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications

Additional Rights for EEA/UK Users (GDPR)

• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Additional Rights for California Residents (CCPA)

• Right to Know: Request disclosure of data collected about you
• Right to Delete: Request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Right to Opt-Out: We do not sell your personal information

To exercise these rights, please contact us at: privacy@winebrats.ai

You can also delete your account directly from the app settings.

Your data may be transferred to and processed in countries outside your home country, including the United States. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with all third-party providers
• Encryption of data in transit and at rest

We use cookies and local storage for:

• Authentication tokens (to keep you logged in)
• User preferences
• Analytics to improve our service

You can disable cookies in your browser settings, but this may limit functionality.

We retain your data:

• Account data: Until you delete your account
• Uploaded images: For processing and future reference
• Favorites: Until you remove them or delete your account
• Logs and analytics: Up to 90 days