Privacy Policy

1. Who We Are

CellarFox (“we”, “us”, or “our”) is a wine cellar management service. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website at cellarfox.com and our mobile application (together, the “Service”).

2. Information We Collect

Information you provide directly

• Email address (for account creation and magic-link login)
• Name (optional, used for personalisation)
• Wine collection data you enter (bottle names, vintages, tasting notes, purchase prices)
• Cellar and storage location details

Information collected automatically

• Device identifiers and platform (iOS / Android) for analytics
• App usage events (e.g. bottles added, recommendations viewed) to improve the product
• IP address and basic request metadata for security and fraud prevention

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To send transactional emails (magic-link authentication, account notifications)
• To personalise recommendations (Fox Picks, serving guides)
• To analyse aggregate usage patterns and improve the product
• To comply with legal obligations and enforce our Terms of Service

We do not sell your personal information to third parties.

4. Data Sharing

We share your information only with:

• Infrastructure providers — hosting and database services (Railway, Supabase/PostgreSQL) that process data on our behalf under data processing agreements
• Authentication providers — Google OAuth, used only when you choose “Continue with Google”
• Analytics — anonymised, aggregate usage data only; no individual profiles are sold or shared

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

6. Security

We use industry-standard safeguards including encrypted connections (HTTPS/TLS), JWT-based authentication with short-lived access tokens, and secure encrypted storage for credentials on your device. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Receive a copy of your data in a portable format

To exercise any of these rights, email us at privacy@cellarfox.com.

8. Cookies

The web application uses session cookies and local storage to keep you signed in. We use Google Analytics (via Google Tag Manager) to understand aggregate traffic patterns. You can disable cookies in your browser settings, though some features of the Service may not function correctly as a result.

9. Children

CellarFox is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date above. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy, please contact us at privacy@cellarfox.com.