Privacy Policy

Information you provide directly

When you reach out to us via email or through a partner application, we may collect:

• Name — so we know who we're talking to.
• Email address — so we can respond to you.
• Phone number — if you provide one, only used when email isn't the right fit.

We only collect what we need for the specific interaction. We do not require you to create an account to browse our sites.

Information collected automatically

We use Google Analytics across our sites and partner applications to understand how visitors interact with them. Google Analytics collects:

• Pages visited and time spent on each page
• Referring site or search term
• General geographic region (city-level, not street address)
• Device type, browser, and operating system

This data is aggregated and anonymized. We do not combine analytics data with any personally identifiable information.

Google Analytics sets cookies on your device to distinguish returning visitors and measure site performance. These are third-party cookies governed by Google's Privacy Policy. We do not use cookies for advertising, retargeting, or cross-site tracking.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

• To respond to you — when you email or contact us, we use your info to reply.
• To deliver partner services — if you're a user of an application we built for a partner (e.g., a loyalty program or member portal), your data is used to operate that service on the partner's behalf.
• To improve our work — aggregated analytics help us understand what pages are useful and where the site needs work.

We will never use your information to send unsolicited marketing email or sell to third parties.

We rely on a small number of trusted providers to operate. Your data may be processed by:

• Microsoft Azure — cloud hosting, database storage, and authentication. Data is stored in U.S. data centers.
• Google Analytics — anonymized website usage analytics (see Section 2 above).

We do not sell, rent, or trade your personal information. These providers process data only as needed to deliver their services and are bound by their own privacy commitments.

We build and operate custom software for local businesses. If you use an application we built for a partner (for example, a brewery's loyalty program or cooperative member portal), the partner is the data controller and we act as the data processor. The partner determines what data is collected and why; we store and process it on their behalf.

Questions about how a specific partner application handles your data should be directed to that partner. We're always happy to help clarify our role if you reach out to us directly.

Personal data is stored in encrypted databases hosted on Microsoft Azure in the United States. We use:

• Encryption at rest and in transit (TLS 1.2+)
• Managed identity and role-based access controls
• Regular access audits — only authorized personnel can reach production data

No system is 100% secure, but we take reasonable and industry-standard measures to protect the data entrusted to us.

We keep your personal information only as long as it's needed for the purpose it was collected:

• Contact inquiries — retained for up to 24 months, then deleted unless an ongoing engagement exists.
• Partner application data — retained per the partner's requirements; deleted when the engagement ends or the partner requests removal.
• Analytics data — governed by Google Analytics' own retention settings (currently 14 months).

Regardless of where you live, we believe you should be able to:

• Access — request a copy of the personal data we hold about you.
• Correct — ask us to fix inaccurate information.
• Delete — ask us to remove your personal data from our systems.
• Opt out — disable analytics cookies via your browser or the Google Analytics opt-out tool linked above.

To exercise any of these rights, email us. We'll respond within 30 days.

Our services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights including the right to know what personal information we collect and to request its deletion. Similar rights may apply under other state privacy laws (e.g., Colorado, Connecticut, Virginia).

We honor these rights for all users regardless of state. Use the contact information below to submit a request.

We may update this Privacy Policy as our services evolve. When we make material changes, we'll revise the "Last updated" date at the top of this page. We encourage you to check back periodically.