VinoSnap

Privacy Policy & Data Sovereignty

Last Updated: October 2026 ยท European Union (GDPR Compliant)

At VinoSnap ("we," "our," or "us"), available at www.vinosnap.app, your privacy, data isolation, and autonomy are our foundational design principles. This Privacy Policy outlines how your personal data and cellar records are processed, stored within the European Union, and strictly protected.

1. 100% User Isolation & Strict Multi-Tenant Separation

VinoSnap is built with hardened multi-tenant isolation. When you create an account, an isolated personal cellar tenant is automatically provisioned for you:

  • Zero Cross-Cellar Leaks: Your inventory, wine quantities, bottle photos, custom notes, purchase prices, and locations are strictly accessible only by your authenticated identity, or members you explicitly invite.
  • Private by Default: Wine bottle scans and inventory additions are 100% private. Nothing is shared with the public community or marketing feeds unless you explicitly choose to publish a tasting note or check-in.
  • No Tracking Across Apps: We do not sell, rent, or monetize your cellar data or drinking habits to third-party data brokers.

2. Information We Process

  • Identity & Authentication: Email address, display name, and avatar synchronized securely via Firebase Authentication (Google Sign-In).
  • Oenological & Inventory Data: Wine labels captured via camera, custom tasting notes, bottle counts, and cellar storage coordinates.
  • Aggregated Technical Telemetry: Essential serverless logs (response time, edge query metrics, error diagnostics) processed for system health, load balancing, and DDoS defense.

3. Data Residency & Verified EU Sub-Processors

All core database operations and serverless compute reside within the European Union:

  • Primary Database: Neon Lakebase PostgreSQL hosted in AWS Frankfurt (eu-central-1), Germany.
  • Compute & API Gateway: Vercel Serverless Network routed through Paris (cdg1), France.
  • Edge DNS & DDoS Shield: Cloudflare Global Anycast Edge (vinosnap.app).
  • AI Sommelier Vision Engine: Google Gemini API (used exclusively for oenological label identification and vintage tech-sheet retrieval; your personal identity is never transmitted with image prompts).

4. GDPR Rights (EEA & Sovereign User Rights)

Under the General Data Protection Regulation (Regulation (EU) 2016/679), you have sovereign rights over your data:

  • Right of Access & Portability (Art. 15 & 20): You may inspect your collection and export your inventory data at any time.
  • Right to Erasure / "Right to be Forgotten" (Art. 17): You can permanently delete your account directly inside the app (Settings > Delete Account), which immediately cascades and purges your personal cellar, bottle records, and anonymizes activity logs.
  • Right to Rectification (Art. 16): Modify or correct any wine record, vintage, or personal profile detail instantly.

5. Responsible Alcohol & AI Informational Notice

VinoSnap promotes mindful appreciation and responsible consumption of wine. You must be of legal drinking age in your country of residence to use the application. AI sommelier notes, food pairings, maturity horizons, and indicative market values are provided strictly for informational and educational purposes.

6. Data Protection Officer & Inquiries

For data sovereignty inquiries, GDPR requests, or data deletion verification, contact our Data Sovereignty team at support@vinosnap.app.