Privacy Notice

Personal data we collect and why

• Account data (name or display name, email address, login credentials, language preference, sign-in provider) — to create and secure your account and let you sign in. Legal basis: performance of our contract with you.
• Collection content (wine fridges, zones, shelves, bottles, notes, valuations, and the label and fridge photographs you upload) — to provide the core inventory, recognition and valuation features. Legal basis: performance of our contract.
• Sharing data (collection memberships, invitations and roles) — to let you share a collection with family members or friends. Legal basis: performance of our contract.
• Subscription data (plan, status, billing period, subscription and customer identifiers from our payment provider) — to give you access to the features you paid for. Legal basis: performance of our contract and our legal obligations.
• Support messages (the content of emails you send us) — to answer your questions. Legal basis: our legitimate interest in supporting our customers.
• Technical and security data (IP address, device and browser information, error and access logs) — to keep the Service secure, prevent fraud and abuse and diagnose faults. Legal basis: our legitimate interest in a secure service.

Card numbers and other payment credentials are handled by Paddle and never reach our systems.

Who we share data with

• Merchant of Record — Paddle.com Market Ltd acts as reseller and Merchant of Record for all our orders, and handles the sale, subscription management, payments, tax compliance, invoicing and refunds.
• Service providers and subprocessors — our hosting, database, storage and email delivery providers, which store and transmit data on our behalf.
• AI recognition providers — label, barcode and fridge photographs are sent to our machine learning provider to identify wines and suggest fridge configurations.
• Other members of a shared collection — if you join or share a collection, its members can see the collection content and your display name.
• Professional advisers and authorities — our legal and accounting advisers, and public authorities where disclosure is required by law.

We do not sell personal data.

International transfers

Our providers may process data outside the EEA. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep data

We keep account and collection data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we must keep records longer to meet legal obligations such as accounting rules. Technical logs are kept for a short period, normally no more than 12 months.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, row-level access control so that users can only reach their own collections, role-based administration and restricted internal access.

Cookies and similar technologies

We use only essential storage: a session cookie or local storage entry that keeps you signed in and remembers your language choice. We do not use advertising or cross-site tracking cookies. You can clear this data at any time in your browser settings, which will sign you out.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at the address below; we respond within one month. You also have the right to lodge a complaint with your supervisory authority — in Sweden, Integritetsskyddsmyndigheten (IMY).

Contact

Ideact Svenska AB, Sweden — privacy@winecellarcompanion.com