Privacy Policy

1. Introduction

Vine and Grove LLC (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website at vineandgrove.com, our mobile applications, and all related services (collectively, the “Services”).

By using our Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with the practices described herein, please do not use our Services.

This Privacy Policy applies to all users of the Services, including Neighbors (buyers), Providers (sellers), and Community Leaders.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an Account: Name, email address, phone number, password, zip code, and profile photo.
• Set Up a Provider Profile: Business name, description, story, logo, banner image, business address, service area, and credentials.
• Make a Purchase: Payment information (processed by Stripe; we do not store full card numbers), billing address, and order details.
• List Products or Services: Product names, descriptions, prices, images, inventory information, and pickup locations.
• Participate in Community Features: Forum posts, replies, event RSVPs, reviews, and messages.
• Contact Us: Name, email, subject, and message content submitted through our contact form or email.
• Apply as a Community Leader: Community name, location, description, and qualifications.

2.2 Information Collected Automatically

When you use our Services, we automatically collect certain information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features used, links clicked, time spent on pages, search queries, and navigation patterns.
• Location Data: Approximate location based on IP address and, with your consent, more precise location data from your device for finding nearby Providers.
• Log Data: IP address, access timestamps, referring URLs, and error logs.

2.3 Information from Third Parties

We may receive information from third parties, including:

• Authentication Providers: If you sign in using a third-party service (e.g., Google, Apple), we receive basic profile information as authorized by your privacy settings.
• Payment Processors: Stripe provides us with transaction confirmations, payment status, and limited payment method details (last four digits and card type) for order management.
• Identity Verification Services: For Provider verification, we may receive verification results from third-party identity verification providers.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Process transactions and send related notifications (order confirmations, status updates, receipts)
• Create and manage your user account
• Connect Neighbors with local Providers based on location
• Verify Provider identities and business information
• Facilitate community features including forums, events, and reviews
• Send you marketing communications (with your consent), including newsletters, product updates, and promotional offers
• Respond to your inquiries and provide customer support
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address fraud, security issues, and technical problems
• Enforce our Terms of Service, Community Guidelines, and other policies
• Process referral credits and subscription billing
• Generate aggregated, anonymized analytics for platform improvement
• Comply with legal obligations and respond to lawful requests

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Other Users

• Provider Profiles: Business name, description, logo, products, pickup locations, and reviews are visible to all users.
• Order Information: When you place an order, relevant details (name, pickup time) are shared with the Provider to fulfill your order.
• Community Content: Forum posts, replies, reviews, and event RSVPs are visible to other community members.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing
• Supabase: Authentication and data storage
• Email service providers: Transactional and marketing emails
• Analytics providers: Usage analytics and performance monitoring
• Cloud hosting providers: Data storage and infrastructure

These providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.

4.3 For Legal Reasons

We may disclose your information if required to do so by law or if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, subpoena, or court order
• Protect the rights, property, or safety of Vine & Grove, our users, or the public
• Prevent or investigate possible wrongdoing in connection with the Services
• Enforce our Terms of Service or other agreements

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or use of your personal information.

4.5 With Your Consent

We may share your information in other circumstances with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain your information as necessary to:

• Comply with our legal obligations (e.g., tax records, transaction history)
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud
• Meet regulatory requirements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes. Transaction records may be retained for up to seven (7) years for tax and accounting purposes.

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and vulnerability testing
• Access controls limiting employee access to personal information
• Secure authentication through Supabase Auth
• PCI-DSS compliant payment processing through Stripe

While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information. If you become aware of a security breach, please notify us immediately at legal@vineandgrove.com.

7. Your Rights and Choices

7.1 Access and Update

You can access and update your personal information at any time through your account settings. This includes your name, phone number, zip code, and profile photo.

7.2 Account Deletion

You can delete your account through your account settings or by contacting us at legal@vineandgrove.com. Upon deletion, we will remove your personal information within 30 days, subject to the retention requirements described in Section 5.

7.3 Marketing Communications

You can opt out of marketing communications at any time by clicking the “unsubscribe” link in any marketing email, or by updating your notification preferences in your account settings. Note that you may still receive transactional communications (order confirmations, account alerts) even if you opt out of marketing messages.

7.4 Location Data

You can control whether the Platform accesses your precise location through your device's location settings. Disabling location access may limit certain features, such as finding nearby Providers.

7.5 Data Portability

You may request a copy of your personal data in a commonly used, machine-readable format. Contact us at legal@vineandgrove.com to submit a data portability request.

7.6 State-Specific Rights

Residents of certain states (including California, Virginia, Colorado, Connecticut, and others) may have additional rights under state privacy laws, including the right to know what personal information we collect, the right to delete, the right to opt out of data sales (we do not sell data), and the right to non-discrimination for exercising your privacy rights. To exercise these rights, contact us using the information in Section 12.

8. Cookies and Tracking Technologies

8.1 What We Use

We use the following tracking technologies:

• Essential Cookies: Required for the Platform to function, including authentication tokens, session management, and security features. These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the Platform, which pages are most popular, and where users encounter errors.
• Preference Cookies: Remember your settings and preferences, such as preferred community, language, and notification settings.

8.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling essential cookies may prevent you from using certain features of the Platform, including logging in and making purchases.

8.3 Do Not Track

The Platform does not currently respond to Do Not Track (DNT) browser signals. We will update this policy if we implement DNT support in the future.

9. Children's Privacy

The Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information as promptly as possible.

Users between 13 and 17 may create Neighbor accounts with parental consent. Provider accounts require users to be at least 18 years old. See our Terms of Service for eligibility requirements.

10. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party services.

We strongly advise you to review the privacy policy of every third-party service you access. Key third-party services used by the Platform include:

• Stripe: Payment processing — stripe.com/privacy
• Supabase: Authentication and storage — supabase.com/privacy

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Effective Date” at the top of this page
• Post a notice on the Platform
• Send an email notification to registered users for significant changes

Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to verified privacy requests within 30 days. For data subject access requests under state privacy laws, we may take up to 45 days with an extension of an additional 45 days if reasonably necessary.