Privacy Policy

WineJoys is operated by Webair AI LLC (“Webair AI,” “we,” “us,” or “our”). This Privacy Policy describes what personal data we collect, how we use it, and your choices. It applies to the WineJoys website at winejoys.com and to the forthcoming WineJoys mobile applications (collectively, the “Services”).

Short version — You don’t need an account. We don’t sell your data. Your favorite wineries are stored locally in your browser. Wine bottle photos you scan are sent to our AI vision provider for analysis and are not retained after the request completes.

1. Data We Collect

1.1 Information you give us

• Wine bottle photos uploaded to the bottle scanner. Photos are transmitted to our AI vision provider (currently OpenAI) for analysis and are not retained by Webair AI after the analysis request completes. Our AI vision provider may retain inputs briefly for abuse monitoring per their own policies; see Section 4.
• Email address if you write to us at hello@webair.ai. We use your email solely to respond to your inquiry.

1.2 Information stored on your device

• Favorite wineries are stored in your browser’s localStorage. They never leave your device. Clearing your browser data deletes them.
• Cached directory data (the WineJoys winery list) is cached in your browser to make pages load faster.

1.3 Information automatically collected

• Standard server logs — IP address, user-agent, request timestamps, and HTTP status codes — collected by our hosting provider (Vercel) for security, abuse prevention, and service operation. Logs are retained per Vercel’s standard retention.
• Rate-limit metadata — the IP address of API requests is hashed and stored briefly in our distributed rate-limit store (Upstash Redis) for the duration of the rate window, then evicted automatically. We use this only to enforce per-IP rate limits.
• Analytics — we use Ahrefs Web Analytics, a privacy-friendly analytics product that collects aggregated page-view metrics without using cookies or fingerprinting and without transmitting personal data to third parties.

2. How We Use Data

We use the data described above only to:

• Operate and maintain the Services.
• Identify wines you ask the bottle scanner to analyze.
• Prevent abuse, fraud, and excessive use of paid AI APIs (rate limiting and security logging).
• Understand aggregate site usage so we can improve the product.
• Respond to support requests you send us.

3. What We Do Not Do

• We do not sell your personal data to anyone.
• We do not share data with advertisers or advertising networks.
• We do not retain wine bottle images you upload to the bottle scanner after the analysis request completes.
• We do not use cross-site tracking cookies or third-party advertising trackers.

4. Third-Party Services

We rely on the following third parties to operate the Services:

• OpenAI — processes wine label images you upload via the bottle scanner. OpenAI’s policy is not to use API inputs to train its models, but they may retain inputs briefly for abuse monitoring. See OpenAI’s Privacy Policy.
• Vercel — hosts the website and serverless API. See Vercel’s Privacy Policy.
• Upstash — provides the Redis store used for rate-limit metadata.
• Ahrefs — provides cookieless web analytics.
• RapidAPI / Wine Explorer — referenced for backend enrichment of certain wine data (no user data is sent).

Each of these vendors has its own privacy practices. We choose vendors that align with this policy.

5. Children’s Privacy

The Services are intended for users of legal drinking age (21+ in the United States). We do not knowingly collect personal data from anyone under 13, and we will delete data we discover was collected from a child. Contact us at hello@webair.ai if you believe we have such data.

6. Data Retention

• Wine bottle images: not retained after analysis.
• Favorites: stored on your device until you clear them.
• Server logs: retained per Vercel’s standard retention windows.
• Rate-limit data: evicted automatically at the end of the relevant rate window (minutes).
• Email correspondence: kept as long as needed to handle your request and for reasonable record-keeping.

7. Your Rights

Depending on where you live, you may have rights under applicable privacy laws (including the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, and the EU General Data Protection Regulation), including:

• The right to access the personal data we hold about you.
• The right to request correction or deletion of your data.
• The right to object to or restrict certain processing.
• The right to data portability where applicable (we hold very little portable data — see Section 1).

To exercise these rights, email hello@webair.ai. We will respond within 30 days.

8. Security

We protect data with industry-standard practices including TLS for transit, server-only API keys, scoped database credentials, per-route rate limiting, and a strict Content Security Policy. No system is perfectly secure; if you discover a security vulnerability, please report it to security@webair.ai.

9. International Users

The Services are operated from the United States. By using the Services, you consent to the transfer of your information to the United States, where data-protection laws may differ from those in your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the updated date at the top of this page and, for material changes, provide additional notice via the website or app.

11. Contact

Privacy questions? Email us at:

Webair AI LLC
hello@webair.ai
Security: security@webair.ai

WineJoys is a product of Webair AI LLC.