Privacy policy

What we collect

• Account details: your name, email address, and a scrambled (hashed) copy of your password. We never store the password itself.
• Your cellar: bottles, where they're stored, quantities, ratings, tasting notes, and the label photos you take.
• Billing: your plan, its status and renewal date, and a reference to your customer record at Stripe. Card details go straight to Stripe; we never see them.
• Usage: a count of lookups and questions, and their estimated cost, so we can apply plan limits. Questions you ask are answered and not kept.
• Technical: the sign-in cookie that keeps you logged in, and basic server logs (such as IP address) used for security.

How we use it

Only to run Cellarnote: identifying bottles, filling in details, answering your questions, applying your plan and billing, keeping your account secure, and contacting you about your account. We don't sell your information, show advertising, or track you across other websites.

The shared wine catalogue

When Cellarnote looks up a wine, the wine facts it finds (name, producer, vintage, region, tasting notes, drinking window, typical price and shop links) are saved in a shared catalogue so other people adding the same wine get them instantly. The catalogue never contains your photos, notes, ratings, locations, quantities or anything that identifies you.

Who we share it with

• Anthropic (Claude, United States) reads label photos and answers questions. We send the photo or the relevant cellar details for that purpose only. Anthropic does not use this data to train its models.
• Web search: to find details and prices, only the wine's name is searched, never your personal details.
• Railway hosts the app, database and photos on servers in Singapore.
• Stripe handles subscriptions and card details.
• Resend sends account emails such as password resets.
• Everyone in your household cellar sees its bottles, notes and ratings. Other cellars can't see yours.
• We may disclose information if the law requires it.

Because some of these providers are overseas (United States and Singapore), your information may be stored or processed outside Australia. We choose providers with strong security and privacy commitments.

How long we keep it

While your account is open. If you ask us to delete your account, we delete your cellar, photos and account within 30 days; copies in backups are overwritten within 14 days after that. We keep billing records as long as tax law requires.

Keeping it safe

Connections are encrypted, passwords are hashed, photos are only shown to members of their cellar, and access to the servers is restricted. No system is perfectly secure; if a breach is likely to cause you serious harm, we will tell you and the regulator as the law requires.

Your choices

• Edit or delete any bottle, rating, note or photo at any time in the app.
• Ask for a copy of your information, a correction, or deletion of your account by emailing hello@cellarnote.com.au. We'll respond within 30 days.
• Cellarnote is for adults 18 and over; we don't knowingly collect information from anyone younger.

Complaints

Contact us first at hello@cellarnote.com.au and we'll try to resolve it within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.