1. Information We Collect
Personal information
When you create an account, we collect:
- Email address: Required for account creation, login, and optional email notifications
- Username: Optional display name for your account
- Password: Encrypted and never stored in plain text
- Payment information: For premium subscribers, processed securely through Stripe (we never store credit card numbers)
Usage data
We automatically collect certain information when you use our service:
- IP address: For rate limiting and security purposes
- Search queries: To improve our search algorithm and provide relevant results
- Tracked bars: The establishments you choose to monitor
- Page views: Basic analytics to understand which features are most popular
- Browser & device information: For compatibility and debugging purposes
Cookies & session data
- Authentication cookies: Keep you logged in for 30 days
- Session cookies: Maintain your preferences during browsing
- Cache data: Improve performance and load times
2. How We Use Your Information
- Provide services: Enable core functionality including search, tracking, and analytics
- Account management: Create and manage your account, process subscriptions
- Email notifications: Send monthly reports if you opt in (you can unsubscribe anytime)
- Rate limiting: Enforce fair usage policies
- Security: Prevent fraud, abuse, and unauthorized access
- Improve service: Analyze usage patterns to enhance features and performance
- Customer support: Respond to questions and troubleshoot issues
3. Data Sharing & Disclosure
We do not sell your personal information to third parties.
We may share limited information only in these circumstances:
- Payment processing: Stripe processes premium subscriptions securely
- Legal requirements: If required by law, court order, or government investigation
- Business transfer: In the event of a merger, acquisition, or sale of assets (with notice to users)
- Protect rights: To enforce our Terms of Service, prevent fraud, or protect our legal rights
We never share your data with advertisers, data brokers, analytics vendors, social media platforms, or third-party apps (unless you explicitly authorize it).
4. Public Data vs. Personal Data
- Public TABC data: All bar/restaurant sales data, license information, and delinquent taxpayer lists are already public records from the Texas government. This data is not private and is accessible to anyone.
- Your personal data: Your email, tracked bars, search history, and account preferences are private and protected under this privacy policy.
5. Data Retention
- Account data: Deleted 30 days after account closure (you can request immediate deletion)
- Payment records: Kept for 7 years for tax and accounting purposes (required by law)
- Usage logs: Deleted after 90 days unless needed for security investigations
- Email history: Stored until you unsubscribe or delete your account
6. Your Rights & Choices
- Access: View all data we have about you by requesting a data export
- Correction: Update your email or account information anytime in Settings
- Deletion: Delete your account and all associated data (permanent and irreversible)
- Opt-out: Unsubscribe from email notifications while keeping your account active
- Export: Download your tracked bars and search history
- Portability: Take your data with you if you choose to leave our service
7. Security Measures
- Encryption: All data transmitted over HTTPS/TLS
- Password hashing: Passwords are hashed using bcrypt (never stored in plain text)
- Database security: Oracle Autonomous Database with restricted access and encrypted backups
- Rate limiting: Prevents brute-force attacks and abuse
- Session management: Secure tokens with 30-day expiration
- Regular updates: Security patches applied promptly to all systems
Despite our best efforts, no system is 100% secure. We cannot guarantee absolute security but will notify users promptly in the event of a data breach.
8. Children's Privacy
BoozeReports is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will delete it immediately.
9. Third-Party Links
Our service may contain links to external websites. We are not responsible for the privacy practices of third-party sites. Please review their privacy policies before providing personal information.
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information we collect and how it's used
- Right to delete personal information (with certain exceptions)
- Right to opt-out of data sales (we don't sell data, so this doesn't apply)
- Right to non-discrimination for exercising your privacy rights
To exercise these rights, email [email protected].
11. European Users (GDPR)
If you are in the European Economic Area (EEA), you have rights under GDPR:
- Right to access, rectify, or erase your personal data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
We process your data based on legitimate interests (providing our service) and your consent (email notifications).
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last Updated" date, notify users via email, and display a notice on the website. Continued use after changes constitutes acceptance.
13. Contact Us
We typically respond to privacy requests within 7 business days.
14. Data Controller
BoozeReports acts as the data controller for personal information collected through this service. We determine how and why your personal data is processed.