WineStreet ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (winestreet.app), web application, Chrome extension, and related services (collectively, the "Services").
Please read this Privacy Policy carefully. By using our Services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address and password when you create an account
- Payment Information: Payment details processed securely through Stripe (we do not store your full payment card details)
- Communications: Information you provide when contacting our support team
1.2 Automatically Collected Information
- Usage Data: Login timestamps, login count, and last login date
- Subscription Data: Subscription tier, status, start date, and end date
- Device Information: Browser type, operating system, and IP address
- Analytics: We use analytics to understand how users interact with our Services
1.3 Chrome Extension Data
Our Chrome extension enhances your wine browsing experience. Here's what it collects:
- Page Titles: The extension reads page titles from wine-related websites you visit to automatically detect and identify wines
- Text Selection: When you manually select text on a webpage (using the extension's text selection feature), that text is temporarily processed to search for wine information
- Wine Content Detection: The extension checks if a page contains wine-related keywords (like "wine," "bottle") to determine if automatic wine detection should run
- API Key Storage: Your WineStreet API key is stored locally in your browser to authenticate requests
- Wine Collection Data: Wines you save to your personal collection are stored locally in your browser
- Search Cache: Wine search results and predictions are temporarily cached locally (1 hour TTL) to improve performance
- Pricing Cache: Wine pricing and price history data is temporarily cached locally (30 minutes TTL)
- API Usage Tracking: Rate limit information from API responses is stored locally to display your usage status
- No Browsing History: We do not collect, store, or transmit your general browsing history beyond wine-related page titles
- No Personal Browsing Data: The extension only processes data when you're viewing wine-related pages and does not track your activity on other websites
Chrome Extension Permissions: The extension requests the following permissions:
- storage: To save your API key, wine collection, and cached data locally
- activeTab: To read page titles and detect wine content on the current tab
- sidePanel: To display wine information in a side panel
- scripting: To inject content scripts for wine detection
- webNavigation: To detect when you navigate to new pages for automatic wine detection
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our Services
- Process your subscription and payments through Stripe
- Authenticate your account and prevent unauthorized access
- Send you service-related communications (account updates, password resets, subscription changes)
- Respond to your inquiries and provide customer support
- Analyze usage patterns to improve our Services
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations and enforce our terms
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
3.1 Service Providers
- Stripe: Payment processing (subject to Stripe's Privacy Policy)
- Google Cloud Platform: Data storage and hosting
- Email Service Providers: For sending transactional emails (password resets, account notifications)
3.2 Legal Requirements
We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4. Data Storage and Security
We implement industry-standard security measures to protect your information:
- Passwords are encrypted using secure hashing algorithms
- Data is transmitted over encrypted HTTPS connections
- Access to user data is restricted to authorized personnel only
- Regular security audits and updates to our infrastructure
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.
6. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Data Portability: Request a copy of your data in a structured, machine-readable format
- Opt-Out: Unsubscribe from marketing communications
To exercise these rights, please contact us using the information provided in the Contact section below.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Maintain your logged-in session
- Remember your preferences
- Analyze usage patterns and improve our Services
You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our Services.
8. Third-Party Services
Our Services may contain links to third-party websites and services, including wine merchant websites accessed through our Chrome extension. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
9. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Services, you consent to the transfer of your information to these countries.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our Services after changes become effective constitutes your acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
13. Additional Information for European Users (GDPR)
If you are located in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on contract performance (providing Services), consent, legitimate interests, and legal obligations
- Data Controller: WineStreet Data Limited (company number 16887183), trading as WineStreet, acts as the data controller for personal information collected through our Services
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority
14. Additional Information for California Users (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You can request information about the categories and specific pieces of personal information we have collected
- Right to Delete: You can request deletion of your personal information
- Right to Opt-Out: We do not sell personal information
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights