Privacy Policy

Account Information

• - Name and email address (from Apple Sign-In, Google Sign-In or direct registration)
• - Account preferences and settings

Wine Collection Data

• - Wine information you add to your cellar
• - Tasting notes and personal ratings
• - Wine photos and label images (see "Label photos" below for how each product handles them)
• - Purchase information and cellar organization

Voice & AI Interactions

• - Vox Vin: voice conversations are processed in real-time and not stored after the session ends
• - Text chat messages are processed for responses and not permanently retained
• - Sommelier's Window apps: voice is used only to dictate wine details; they use your device's speech recognition and do not send audio to our servers

Label photos

• - Vox Vin: label photos are analyzed for wine identification and not retained
• - Sommelier's Window apps: a label photo you scan is uploaded for analysis and, if you save the wine, stored with that cellar entry. Photos are kept in a storage bucket whose files can be opened by anyone who has the exact link, and are deleted when you delete your account. Photos of restaurant wine lists are deleted after they are read

We DO NOT sell your personal data

Your wine collection and personal information are never sold to third parties for marketing purposes.

What the plugin receives

• - Only what ChatGPT sends in a tool call: a wine name, producer, vintage, region, or a wine page identifier. We do not receive your conversation, your name, your email, or any account data.
• - Searching wines and getting a drinking window are read-only lookups of our public wine database. Nothing about your request is saved by those lookups.
• - If a wine is not in our database, ChatGPT can ask us to analyze it. The wine name, producer, vintage, and region you gave are sent to our analysis pipeline, which uses OpenAI and Perplexity to generate the analysis and look up sourced critic scores. The finished analysis is saved and published as a public page on sommelierswindow.com that anyone, including search engines, can read. The page is not linked to you. Please do not put personal information in a wine name.

Rate limiting and the anonymized ChatGPT identifier

• - To limit abuse and cost, creating new analyses is capped (currently 3 per user and 100 in total per day). ChatGPT provides an anonymized user identifier with the request. We immediately convert it into a salted, one-way hash and store only that hash with a daily count.
• - The hash is kept for up to 4 days, then deleted. It is used only to enforce the daily limit. It cannot be used to identify you, is not linked to any account, and is not used for advertising, profiling, or analytics.
• - We do not store your IP address, your query text, or your conversation identifier in this rate-limiting record.

Server logs

Our hosting and database providers (Vercel and Supabase) keep standard request logs, such as timestamps, request paths, user agent, and IP address, for security and operations. These logs are held under their retention policies. We do not use them to profile users, and we do not sell them.

What we do not do

• - We do not sell or share plugin data for advertising, and the plugin shows no ads.
• - We do not collect payment information, health information, government identifiers, or credentials through the plugin.
• - We do not read your wider ChatGPT conversation.