US Privacy Notice
Last updated: 2026-05-17 · Draft — pending legal review
For California residents
This notice supplements our general Privacy Policy with disclosures required by the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
Categories of personal information collected
- Identifiers: name, email, user ID, IP address.
- Commercial information: subscription plan, billing history.
- Internet activity: pages visited within the app, feature usage.
- Professional/business information: company name, EIN, TTB Basic Permit, state of operation, vineyard and winery records you enter.
- Geolocation (coarse): country derived from IP for pricing region and signup verification.
Purposes for which information is used
- To provide and operate the GrapeFlow service.
- To process billing through our payment provider.
- To send transactional emails and product communications.
- To enforce subscription tier and detect arbitrage at signup.
- To improve the product (aggregated, non-identifying analytics).
Sale or sharing of personal information
We do not sell personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising.
Do Not Sell or Share My Personal Information
You can submit an opt-out request by emailing privacy@grapeflow.app with the subject line “Do Not Sell My Personal Information.” We respond within 15 business days. We will not discriminate against you for exercising this right.
Your CCPA / CPRA rights
- Right to know: request a copy of the personal information we hold about you.
- Right to delete: request deletion of your personal information.
- Right to correct: ask us to fix inaccurate information.
- Right to opt out: opt out of sale or sharing (see above — we do neither).
- Right to limit: limit use of sensitive personal information.
- Right to non-discrimination: we will not deny service or charge differently for exercising these rights.
To exercise any of these, email privacy@grapeflow.app. We may verify your identity before fulfilling the request.
Contact
Questions about this notice? Email privacy@grapeflow.app.