Privacy Policy

Version 1.1 · Published 26 May 2026

Back

Welcome to SipEvo ("we," "our," or "us"). We are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and share information when you use our platform, whether you are a business managing a venue ("Venue") or a guest participating in a tasting session ("Taster").

1. Information We Collect

We collect different information depending on how you interact with our platform:

For Tasters (Guests): To provide a frictionless experience, we do not require Tasters to create formal accounts with passwords. We collect:

  • Contact Information: Your email address, collected if you choose to initiate a tasting session with an email, save your tasting history, or request a one-time passcode (OTP) to view your Tasting Journal.
  • Tasting Activity: Data regarding your tasting sessions, including the venue visited, timestamps, guest tokens (used to resume your session), and browser session IDs (used for anonymous sessions).
  • Reviews & Feedback: Ratings (0.0 to 5.0 scale represented by drink-glass icons tailored to the beverage type) and text comments or tasting notes you submit for specific products.
  • Device & Session Data: We use browser Local Storage to temporarily store session tokens, preview reviews, and locally back up pending reviews to prevent data loss. We also set functional device cookies (e.g., sipevo_device_id) for rate limiting and security purposes.

For Venues (Businesses & Staff):

  • Account Information: Name, email address, and authentication credentials for venue administrators and staff.
  • Business Details: Venue name, slug, contact details, brand colors, logo images, website URL, currency, and customization preferences.
  • Financial & Subscription Data: Stripe subscription records, plan tiers (Free Setup, Standard Pro, Hibernation), price monthly, and payment records history. All payment details are processed directly by our third-party provider (Stripe); we do not store full credit card details.
  • Audit & Activity Logs: Admin audit logs capturing administrative actions (e.g., plan overrides, venue archiving, guest deletions, maintenance banner updates, and legal document edits) to maintain platform integrity.

2. How We Use Your Information

For Tasters:

  • To operate and manage your tasting session (anonymous or email-linked) and allow you to resume your session within 12 hours.
  • To attribute your reviews and ratings to the correct products and venues.
  • To maintain a historical timeline of your tasting history (Tasting Journal) accessible via email verification.

For Venues:

  • To provide, maintain, and improve our services, including hosting your digital tasting lists and customizing your branding.
  • To process your subscription payments and generate invoices.
  • To provide analytics dashboards and insights based on Taster interactions at your location.

3. How We Share Your Information

  • Tasters to Venues: When you submit reviews and ratings (either during an email-identified session or if you associate your anonymous session with an email), your email address and reviews are shared directly with the specific Venue where the tasting occurred. Please note: Once shared, the Venue's own privacy policy applies to their use of your contact information outside of the platform.
  • Service Providers: We share data with trusted third-party services required to operate our platform (e.g., Supabase for secure cloud database hosting, Resend for email notifications, and Stripe for payment processing).
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4. Data Retention

  • Tasters: Ratings and reviews are retained to preserve the integrity of venue analytics. If you request the deletion or anonymisation of your personal information, we replace your email address with an anonymous identifier (deleted_{id}@deleted.sipevo.com), decouple session and review records from your profile, delete OTP logs, and store a hash of the email in the admin audit log. The comments and ratings themselves are kept anonymously.
  • Venues: We retain your account, product, and list data for the duration of your subscription. Subscriptions can be active, hibernating, past due, or canceled. Canceled venues retain read-only access to their analytics. If a venue account is archived or scheduled for deletion, data will be permanently removed.

5. Your Rights

Depending on your location, you may have the right to access, correct, or request the deletion/anonymisation of your personal data.

  • Tasters: You may contact us to request the anonymisation of your email and reviews from our systems.
  • Venues: You can manage your data and staff accounts directly through your administrator dashboard.

6. Contact Us

If you have any questions about this Privacy Policy, please contact us at amanpjandu@gmail.com.