Privacy Policy — QvevriConnect

1. Who We Are

QvevriConnect (“we,” “us,” or “our”) operates the QvevriConnect platform at qvevriconnect.com — a B2B marketplace connecting Georgian wine producers with importers and distributors worldwide. QvevriConnect is a technology platform only. It does not hold alcohol licenses and does not sell, store, or transport alcoholic beverages.

2. Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

Information you provide

Account registration details (name, email, password)
Company or winery information (name, address, region)
Producer or importer profile content (wines, certifications, bio)
Communications sent through the platform (RFPs, messages)
Compliance documents uploaded to the Compliance Locker

Information collected automatically

Usage data (pages visited, features used, timestamps)
Device and browser information
IP address and approximate location
Cookies and similar tracking technologies

3. How We Use Your Information

To provide, operate, and improve the QvevriConnect platform
To facilitate connections between producers and importers
To process subscription payments via Stripe
To send transactional emails (account notifications, RFP updates)
To display your producer or importer profile in the directory
To provide analytics and insights on your platform activity
To comply with legal obligations

4. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

With other platform users: Your producer or importer profile is visible to other registered users as part of the platform’s core function.
With service providers: We use trusted third parties including Stripe (payments), Resend (email), Cloudflare (infrastructure), and Vercel (hosting).
For legal compliance: When required by law, court order, or government authority.
Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

5. Compliance Documents

Documents you upload to the Compliance Locker (certifications, permits, lab analyses) are stored encrypted at rest. You control who can access these documents. We do not share compliance documents with third parties except at your explicit direction.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us at privacy@qvevriconnect.com. Certain information may be retained for legal compliance purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the data we hold about you
Correction — request correction of inaccurate data
Deletion — request deletion of your personal data
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interests
Withdrawal of consent — where processing is based on consent

To exercise any of these rights, email privacy@qvevriconnect.com.

8. Cookies

We use essential cookies required for platform authentication and functionality. We do not use advertising or tracking cookies. You can disable cookies in your browser settings; however, this may affect platform functionality.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive documents, hashed passwords, and regular security reviews. No system is completely secure; we encourage you to use a strong, unique password for your account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice on the platform. Your continued use of QvevriConnect after changes take effect constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, contact us at: privacy@qvevriconnect.com