1. Introduction & Overview
At The Bottle Universe ("we," "our," or "us"), we are committed to protecting the privacy and security of our users. This Privacy Policy explains how we collect, use, process, and safeguard information across our website, mobile application interfaces, and our in-store digital kiosk devices located at participating retail establishments.
By accessing our platform or using our services, you consent to the data collection and usage practices described in this policy.
2. Data We Collect
We collect information that you provide to us directly, as well as data that is automatically generated during your interactions with our services.
- Account Credentials & Profile Info: When merchants register or users create accounts, we collect name, email address, physical store location address, phone number, and password hashes.
- Transaction & Inventory Data: We upload POS inventory files (UPC, product details, pricing, stock levels) on behalf of merchants to display in-store stock availability. We do not process final financial transactions directly (payment transactions are securely offloaded to Stripe).
- Usage and Telemetry Logs: We track scan counts, QR code interactions, dwell times, and user button presses to generate real-time retail analytics for participating merchants.
3. AI Sommelier Chat Logs & Anonymous Processing
💡 Important Notice regarding AI interactions:
Our platform features an interactive AI Sommelier Engine to assist customers with tasting notes, recommendations, and flavor profile questions.
- Anonymization: All chat logs entered into the AI Sommelier interface are stripped of personal identifying information (PII), such as IP addresses or session tokens, prior to processing or logging.
- Inventory Enhancements: These anonymized chat queries are analyzed collectively to help local retailers understand customer interest patterns and improve local inventory stocking choices.
- No Tracking of Conversations: Chat history is persisted solely within your local browser session to maintain thread continuity and is not permanently tied to your user identity.
4. Security Protocols & Encryption
We enforce strict administrative, technical, and physical security measures to shield your data from unauthorized access, loss, alteration, or disclosure:
- Encryption in Transit & Rest: All data transmitted through our web services and in-store kiosk fleets is encrypted using Secure Sockets Layer (SSL/TLS) protocols. Database storage utilizes standard AES-256 encryption at rest.
- Access Control: Backend access is locked behind Firebase Auth policies, ensuring that merchant inventory control routes are only accessible via validated user profiles under specific tenant configurations.
- Vendor Audits: We host our services on Google Cloud and Firebase, adhering to industry-leading SOC 2 Type II compliance standards.
5. CCPA & GDPR Data Rights & Erasure Instructions
Depending on your location, you may possess legal rights regarding your personal information under the California Consumer Privacy Act (CCPA) or the General Data Protection Regulation (GDPR). These rights include the right to access, correct, or request the permanent deletion of your data.
How to submit a Data Erasure/Access request:
- Send an explicit email to: support@thebottleuniverse.com.
- Include the subject line: "Data Deletion Request (GDPR/CCPA)".
- Provide your registered account email and store profile details. For security reasons, we will verify your identity before executing any delete orders.
- Once verified, we will permanently purge your personal account records and database logs within thirty (30) days and confirm completion.
6. Policy Modifications
We reserve the right to modify this Privacy Policy at any time. Changes will take effect immediately upon posting to this URL. We recommend checking this page periodically to remain informed about our latest data protection standards.