Privacy Policy

The data controller is NoronhaLima Solutions. For any privacy matter, including exercising your rights, write to contato@cellarvine.com.br.

— Account data: name, email and identifier provided by Google or Apple sign-in (via Firebase Authentication).

— Your cellar data: registered bottles, positions, notes, ratings and consumption history.

— Photos you upload: images of labels and wine lists, used for AI analysis.

— Subscription data: plan, status and billing history. Your card details are handled directly by Stripe or the App Store — we do not store them.

— Advertising: in the free version of the app, Google AdMob may process your device’s advertising identifiers to display ads, according to your device settings.

— Technical and usage data: device information, language, access logs and interactions with the app.

We use your data to: provide the Service and maintain your account (performance of contract); process photos and queries to generate AI sommelier responses (performance of contract); manage subscriptions and billing (performance of contract and legal obligation); improve and protect the Service, preventing fraud and abuse (legitimate interest); and send news and updates when you consent (consent).

Photos and queries sent to the sommelier are processed by AI providers engaged by us, exclusively to generate the requested response. We do not use your content for third-party advertising.

We share data only with processors necessary to run the Service: Google Firebase (authentication and infrastructure), Stripe (web payments), Apple and RevenueCat (iOS subscriptions), Google AdMob (ads in the free version of the app) and cloud and AI providers that process data on our behalf, under contract. We do not sell your personal data.

Some providers process data outside Brazil or your country of residence. In those cases we adopt appropriate safeguards provided for by the LGPD and the GDPR, such as contractual data protection clauses.

We keep your data while your account is active. You can request full deletion of your account and data at any time through the account deletion page; the request generates a protocol number and the data is removed, except for what we must retain due to legal obligations (for example, tax records of payments).

The LGPD and the GDPR guarantee you: confirmation of processing and access to your data; correction; anonymization or deletion; portability; information about sharing; and withdrawal of consent. To exercise them, use the account deletion page or write to contato@cellarvine.com.br. You may also petition the ANPD or your country’s data protection authority.

Your data is encrypted in transit (TLS) and stored with encryption at rest. We apply access controls and security best practices; even so, no system is infallible, and we will report relevant incidents as required by law.

The CellarVine website does not use tracking or advertising cookies. We only use the browser’s local storage for preferences (such as language) and, in the app, equivalent technologies necessary for it to work. If we adopt analytics tools, we will prefer cookie-free solutions without individual identification.

The Service is intended for people aged 18 or over and we do not knowingly collect data from minors. If we identify an account belonging to a minor, it will be deleted.

We may update this policy from time to time; the current version and its update date will always be on this page. Significant changes will be communicated through the app or by email.

Data Protection Officer (DPO): contato@cellarvine.com.br.