For restaurants and visitors
This policy covers syncbev.com, getsommsync.com, our demos, and SyncBev's own marketing. If you're a diner using a restaurant's menu, the Guest Privacy Notice applies to you instead — there we act on the restaurant's behalf, not our own.
Effective [DATE — on publication]
Draft — not yet effective
This document is awaiting review by counsel and is published here for reference only. Remove this banner once it has been reviewed and an effective date is set.
Who we are: SyncBev, Inc., [MAILING ADDRESS — TO BE ADDED]
Contact: privacy@syncbev.com
This policy applies when you:
If you are dining at a restaurant that uses SommSync, the Guest Privacy Notice applies instead.
When you contact us or request a demo. Our enquiry form is hosted by HubSpot. It asks for [FIELDS AS BUILT — confirm against the live form before publishing], typically your name, email address, restaurant, and your point-of-sale system. We ask because we want to judge whether SommSync is a fit before either of us spends time on it.
We also record when you submitted, and whether and how much you used a demo we gave you access to.
When you use a demo. A demo is a working copy of the product. We record which pages you opened and which questions you asked the sommelier, so we can tell whether the demo was useful and follow up sensibly. Demo tenants carry a fixed expiry.
When we build a demo from your menus. If you send us menus, or we build a demo from a menu you publish, we receive whatever those documents contain — typically beverage names, producers, vintages, and prices. We use them only to build your demo, and demo sites are not indexed by search engines.
When you are an account holder. Email address, role, and which restaurants you are assigned to. Passwords are stored hashed by our authentication provider; we cannot read them.
Automatically. Standard server logs: IP address, browser type, pages requested, timestamps.
[Confirm what analytics, if any, run on syncbev.com before publishing — as of this draft there is no analytics tag on the marketing site. If one is added, this section and the cookie section must change with it.]
What we do not collect. We do not ask for payment card details directly — payments, when they begin, are handled by [Stripe], who receive them and we do not.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
If you gave us your address through the enquiry form or a demo request, we may email you about SommSync. Every marketing email carries an unsubscribe link, and we honour it promptly.
Transactional email — demo access, account notifications, invoices — is not marketing and continues regardless.
If you are in Canada, we treat CASL as the governing standard for our own marketing.
We use third-party providers to run the business. Each processes information only on our instructions:
| Provider | Purpose |
|---|---|
| Google Firebase | Hosting, database, storage, authentication |
| HubSpot | Enquiry form and prospect records |
| Resend | Email delivery |
| Anthropic | AI content generation and sommelier chat |
| SerpApi | Product label image search |
| [Stripe] | [Payments — once billing begins] |
AI providers. Text you send to a demo sommelier goes to Anthropic's commercial API. Under our agreement with them, that content is used to answer you and not to train AI models. That statement reflects our current agreement, and we will update this policy if it changes.
We may also disclose information where legally required, or in connection with a merger or sale of the business, in which case this policy continues to apply until replaced.
| What | How long |
|---|---|
| Enquiry and prospect records | [24] months from last contact, unless you ask us to delete sooner |
| Demo tenants | Deleted approximately [30] days after expiry |
| Account records | For the life of the account, then [30] days |
| Server logs | [90] days |
| Records we must keep for tax or accounting | As long as the law requires |
Depending where you live, you may have the right to access what we hold about you, correct it, delete it, obtain a copy, or object to certain uses. California residents have specific rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.
Write to privacy@syncbev.com and we will respond within the time the applicable law allows. We may need to verify who you are first.
[Complete against what the site actually sets before publishing.] Our site uses cookies necessary for it to function. The HubSpot form sets its own cookies.
[If analytics or advertising cookies are added, a consent mechanism will be required for visitors in some jurisdictions — decide this before running paid campaigns.]
We are based in the United States and our providers process information there. If you contact us from outside the United States, your information will be transferred to and processed in the United States.
The Service is sold to businesses and is not directed at children. We do not knowingly collect personal information from children.
We use encryption in transit, role-scoped authentication, and credential storage separated from application data. No system is perfectly secure, but we take this seriously and will tell you promptly if something affecting you goes wrong.
SyncBev, Inc.
[MAILING ADDRESS — TO BE ADDED]
privacy@syncbev.com
Contact
privacy@syncbev.com
SyncBev, Inc.
[MAILING ADDRESS — TO BE ADDED]
Version [1.1] · Draft prepared [DATE]. Requires review by counsel before publication.
