Privacy Policy

Effective date: October 1, 2026

Version: 1.2

This Privacy Policy explains how Maison Vin LLC, doing business as Maison Vin (“Maison Vin,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information through our website and app (the “Service”). Maison Vin LLC is responsible for the personal information described here and acts as controller where that term applies. It covers visitors as well as account holders, including people who submit reports or whose information appears in member content.

Contact: hello@maisonvin.ai

Mailing address: 200 E 21st Street, New York, NY 10010, USA

Maison Vin is based in the United States and welcomes members worldwide. Our current local focus is New York, New Jersey, and Connecticut. Authorized developers in Ukraine and Poland may access data to support the Service. Using a US-based platform does not remove privacy rights that apply where you live.

1 Information we collect

Account information. Email address, password or other authentication information handled through Amazon Cognito, full name, nickname, and date of birth. Registration and date-of-birth editing do not allow a date indicating an age under 21. This is a check of the date supplied, not verification of identity or actual age. If Google or Apple sign-in becomes available and you choose it, we receive the account information that provider makes available, such as name and email; we do not receive your Google or Apple password.

Profile information. Information you choose to add, such as avatar, bio, country, state, city, wine experience, education, credentials, interests, favorite producers, bottle range, bottles, tasting notes, and Instagram, website, or external cellar-profile links. We display external profile links without importing the linked profile’s content.

Content and activity. Posts, photos, comments, reactions, favorites, follows and follow requests, block settings, report records, event listings, join requests, waitlists, attendance and confirmation status, and reasons given for declining or removing participants.

Messages. Direct messages and public and participants-only event chats, including attachments, are stored to deliver and display them. Authorized administrators and developers may access relevant messages when necessary for reports, safety, support, technical maintenance, security, or legal obligations. Private messages are not used for promotion under the general public-photo permission.

Location. Profile and event location information you enter, including city, neighborhood, venue, and address. We do not collect precise device GPS location. An IP address may indicate an approximate location.

Usage and device data. IP address, browser and device information, operating system, language, referring pages, screens viewed, actions, and timestamps, collected through the Service and tools such as cookies, local storage, and Google Analytics 4. The planned Meta advertising tools described in Section 6 also process website event data and advertising identifiers, subject to your advertising choice.

Waitlist and advertising data. We collect the email address you submit to join the waitlist and any optional Note you provide. When Meta advertising tracking is enabled with your permission, the data sent to Meta includes page visits, opening the waitlist registration form, successful waitlist registrations, event times and relevant page URLs, and available technical identifiers such as IP address, browser user agent, and Meta browser and click identifiers (fbp/fbc). For successful waitlist registrations, we also send your email address after normalization and SHA-256 hashing. Hashing supports account matching and does not make the information anonymous. We do not send the optional Note field to Meta.

Support and compliance records. Messages to us, requests, reports, copyright notices, moderation records, and records of terms acceptance, photo permissions, withdrawal requests, and marketing preferences where relevant. Copyright notices and counter-notices include the identity, contact details, signatures, and declarations described in the Terms. If a specific age or privacy-request check requires additional information, we explain what is needed and limit collection to that purpose.

Information from others. Other members may mention you, include you in photos, invite you to events, or report conduct involving you. We process that information for the purposes described in this Policy.

Please do not put government identification numbers, payment-card information, health information, or sensitive private details in profiles, posts, or event listings. We do not request these for ordinary use of the Service. Share any private-home event address cautiously and only with the intended participants.

2 How we use information

We use information to create and maintain accounts; apply the 21-plus eligibility rule; provide profiles, feeds, messaging, events, discovery, favorites, and notifications; apply visibility settings; provide support; investigate reports; moderate content; prevent abuse, fraud, and security incidents; maintain and improve the Service; and meet legal obligations or establish, exercise, or defend legal claims where necessary.

We use usage data and Google Analytics 4 to understand how the Service is used. We do not use personal information for solely automated decisions producing legal or similarly significant effects on members.

Advertising measurement and retargeting. Subject to the advertising choice described in Section 6, we plan to use Meta Pixel and Conversions API to measure which advertisements lead to website visits and waitlist registrations, assess campaign performance, and show Maison Vin advertisements to people who previously visited our website. Meta uses the supplied identifiers to match events to Facebook or Instagram accounts where possible. Joining the waitlist or accepting the Terms does not itself provide permission for this advertising data sharing.

Emails. Registration automatically subscribes you to Maison Vin newsletters and promotional emails. Each marketing email includes an unsubscribe option. You can also email hello@maisonvin.ai to unsubscribe. We honor requests promptly and no later than 10 business days, or sooner where required by law. Necessary account, security, and service messages are separate and may continue while needed. This Policy describes the subscription practice; it does not replace any permission required by applicable law.

Public photos. Under the limited permission in Section 4 of the Terms, we may repost photos you share with the wider members’ community on Maison Vin’s social media accounts, including paid or boosted promotion of those posts, with your associated likeness and display name or handle. These posts are visible outside Maison Vin and are processed by the social network under its own policies. Private-profile content, direct messages, followers-only content, and participants-only event chats are excluded unless separate permission is obtained. We do not use this permission for unrelated advertising or to imply endorsement of a particular wine or third-party business.

We do not sell personal information for money. The advertising disclosures to Meta described here, including hashed email addresses, website activity and technical identifiers, may constitute “sharing,” a “sale,” or processing for targeted advertising under applicable privacy laws, even without payment for the information. Sections 6 and 8 explain your choices and applicable rights. Separately, promoting an authorized public photo discloses it to the social network and its audience.

3 Legal grounds where applicable

Where applicable law requires a legal basis, account creation, messaging, and requested event features rely on performance of our contract with you. Security, abuse prevention, support, moderation, and service administration rely on our legitimate interests, balanced against your rights, or on legal obligations where relevant. Recordkeeping and responses to binding legal requirements rely on legal obligations. Analytics and marketing rely on legitimate interests only where permitted, and otherwise require valid consent. The promotional-photo permission is described in Section 4 of the Terms, with valid consent required where applicable law requires it. Accepting the Terms does not establish valid consent for every purpose. You retain applicable rights to object or withdraw consent without affecting earlier lawful processing.

Required and optional information. We need the registration details identified as required to create an account and apply the eligibility rule. If you do not provide them, we are unable to register you. Optional profile details, public posts, and participation in individual events remain your choice.

4 Who receives information

Other members and public audiences. Information is disclosed according to the visibility and sharing described in Section 5. Authorized promotional photos may also appear on Maison Vin’s social media accounts, including Instagram, and be viewed or reshared by the public.

Service providers. Our current platform providers are Amazon Web Services, including Amazon Cognito, for hosting, storage, authentication, and account security; GetStream for feeds and messaging; Mapbox for maps and location display; SendGrid for service and marketing email delivery; and Google Analytics 4 for usage analytics. They receive the information needed for their functions. We update this Policy when changes to providers materially affect the practices described here.

Advertising partner. We plan to use Meta Platforms, through Meta Pixel and Conversions API, for the advertising purposes described in Sections 2 and 6. Meta receives the event data and identifiers described in Section 1 when advertising tracking is enabled with your permission. Meta is an advertising partner, not merely a provider operating our accounts or messages. Meta also processes information under its own terms and privacy policy, including to match activity to its users and provide and improve advertising services. See Meta’s Privacy Policy at https://www.facebook.com/privacy/policy/ (opens in a new tab).

Authorized people and contractors. Maison Vin administrators and authorized development contractors access relevant information for support, moderation, security, maintenance, and other necessary service functions. Access is limited to the work needed. It does not authorize promotional use of private content. Authorized developers are located in Ukraine and Poland.

External links and sign-in. Following a restaurant, reservation, ticket, or external-profile link takes you to another service. That service may receive your IP address, browser information, and referring-page information and may collect information directly from you. Its own terms and privacy policy apply. If you choose an available third-party sign-in method, that provider also processes the sign-in under its own policies.

Legal and business purposes. We may disclose information when required by law, in response to lawful requests, or when reasonably necessary to protect rights and safety or address a legal claim. Information may transfer to a successor in a merger, acquisition, or sale, subject to applicable protections and notice requirements. When handling a report, we disclose relevant details to the person concerned or other parties only as needed for investigation, response, enforcement, safety, or legal obligations. A qualifying copyright counter-notice is forwarded to the original complainant, including the identifying and contact details required by the process. We do not promise anonymity where disclosure is necessary or legally required.

5 Visibility and messages

Profiles. Profiles can be Public or Private. With a Private profile, members who do not follow you see only your name, avatar, and bio. Follow and visibility settings affect access to the rest of your profile and activity. Follower-visible activity appears in followers’ feeds according to the activity and visibility settings. A Private profile does not make a contribution to a public event chat private.

Events. Public event listings are visible to all members. A Private event listing can be viewed by anyone who receives its link; its public event chat is closed and joining requires Host approval. Private-event links are not a guarantee of confidentiality. Do not publish sensitive information in a listing that link recipients can view.

Event chats. A chat open to the wider members’ community is different from the separate chat restricted to accepted participants. Only the wider-community chat falls within the general promotional-photo permission. Hosts and accepted participants can see participation information and the profile information available to them. A decline or removal reason is shown to the affected member.

Host use of information. A Host receives information needed to consider join requests and manage the event, including the member and proposed bottle details submitted through that flow. Hosts must use it for the relevant event or another separately authorized or legally required purpose. They must not reuse attendee details for outside mailing lists, sales, or unauthorized disclosures.

Messages. Direct messages are visible to their conversation participants, subject to necessary administrative and technical access in Sections 1 and 4. Account deletion also deletes your sent messages from other members’ conversations at the end of the 30-day recovery period, subject to the limited legal exceptions in Section 7.

Content people can access may be copied, photographed, or reshared outside the Service. We cannot erase independent copies held by other people, although applicable reporting and legal remedies remain available.

6 Cookies analytics and advertising

We use essential cookies and local storage for sign-in, security, and preferences, and Google Analytics 4 to understand usage. Google Analytics 4 uses identifiers and device and interaction information to produce reports; it does not log or store individual IP addresses. This does not mean all analytics information is anonymous.

Google Analytics and browser controls. You can manage or block cookies through your browser and use Google’s available analytics opt-out tools. Blocking essential cookies may affect features. Browser controls do not replace prior consent where required by law and do not by themselves stop server-to-server advertising transfers. Google Analytics is separate from the Meta advertising choice described below; rejecting Meta advertising does not by itself disable Google Analytics. Any consent legally required for Google Analytics must be obtained separately before the relevant analytics collection begins.

Planned Meta tools. Meta Pixel collects information through the browser using cookies and similar technologies. Conversions API sends event information from our servers to Meta. These tools are planned and have not been activated at the time this Policy is prepared. Before activation, we will provide an advertising consent choice when you first visit the website. Neither tool will send your events or identifiers to Meta unless you choose to accept advertising tracking. The same choice will control both browser and server transfers, including the hashed email sent with a successful waitlist registration.

Advertising choices. You will be able to accept or reject Meta advertising tracking and change or withdraw your choice through the website’s privacy or cookie settings once these tools are enabled. Rejection will not prevent waitlist registration or ordinary use of the Service. Withdrawal stops future transfers through both Meta tools; it does not automatically erase information already lawfully sent. Choices may need to be repeated on another browser or device or after clearing stored preferences. For assistance or a deletion request, contact hello@maisonvin.ai. You can also manage Meta’s own use of information through its privacy and advertising settings.

Preference signals. We do not treat “Do Not Track” as a universal opt-out signal. We honor legally recognized opt-out preference signals, including Global Privacy Control, where applicable to our processing. A legally required opt-out takes precedence over a conflicting advertising setting.

7 Retention and deletion

Active accounts. We keep account information and content while needed to provide the Service and for the purposes described above. Personal information is not kept indefinitely merely because it may be useful. Information no longer needed is deleted or made genuinely anonymous, subject to applicable legal requirements.

Account deletion. When you request deletion, your profile and content stop being visible promptly. You have 30 days to reactivate. If you do not reactivate, your personal platform data is permanently deleted by the end of that period, including your profile, posts, photos, comments, bottle records, event content, and messages, including messages displayed in other members’ conversations. This deletion includes associated personal data held by our service providers and in backups, subject to the limited exceptions below.

Meta information. The platform deletion period above does not promise deletion within 30 days from Meta’s independent systems. We delete information under our control and communicate qualifying deletion requests to recipients where required by law. Meta’s own retention and deletion practices also apply to information it processes independently. Contact hello@maisonvin.ai for help exercising applicable rights relating to information shared with Meta.

Anonymous statistics. We may keep statistics that no longer identify you and cannot reasonably be linked back to you, such as aggregate bottle totals. Simply removing a name or replacing it with “User X” is not enough if the information remains linkable to a person.

Existing social posts. An ordinary social media post lawfully published before you deleted your account or photo may remain under the limited permission in the Terms. Deletion stops new promotional use and active paid promotion promptly; it does not automatically remove those existing ordinary posts. To withdraw permission or request removal, email hello@maisonvin.ai. We will promptly stop new uses and active paid promotion of affected photos and remove posts within our control within 30 days after receiving an identifiable request, or sooner if required by law. Third-party copies outside our control may remain.

Limited records. We retain specific information beyond ordinary deletion only when legally required, including a court order or preservation duty, or where necessary and lawful to establish, exercise, or defend a legal claim. We may also retain the minimum consent or withdrawal record needed for an existing authorized use and a minimal suppression record to honor an email opt-out. These records are restricted to their necessary purpose, are not restored to public profiles or chats, and are deleted when the justification ends. A legal preservation obligation can require retaining particular messages even after account deletion.

8 Your rights and choices

Depending on the law applicable to you, you may have rights to access or obtain a copy of personal information; correct it; request deletion; restrict or object to processing; withdraw consent; or appeal a refusal of a qualifying privacy request. You may also complain to a competent privacy regulator. These rights can have legal exceptions. Applicable state laws also provide rights to opt out of covered sales, sharing, targeted advertising, or certain profiling, and to limit specified uses of sensitive information, where those activities and legal requirements apply.

Advertising opt-out. Once the planned Meta tools are enabled, reject advertising tracking or withdraw your choice through the website’s privacy or cookie settings to stop future Pixel and Conversions API transfers. This also provides a way to opt out of the Meta disclosures described here where they are covered sales, sharing, or targeted advertising. You may also send a request to hello@maisonvin.ai without creating an account. We honor applicable legally recognized opt-out signals as described in Section 6. Requests to delete information previously disclosed are handled separately under applicable law.

Use available Account Settings, including “Request my data,” or email hello@maisonvin.ai. We handle data-export requests manually. We may ask for information reasonably needed to verify identity or an authorized representative, without collecting unnecessary data. We respond within applicable legal deadlines, generally one month or, under applicable US state laws, 45 days. We notify you if a lawful extension is needed. Requests are generally free. If law permits a charge or refusal for a repetitive, excessive, or unfounded request, we explain the reason. We provide your own information while protecting other people’s information and legally protected records.

You can edit your profile, request account deletion, change available visibility settings, unsubscribe from marketing, or request withdrawal of photo permission. To appeal a privacy-request decision where a right of appeal applies, reply to our decision or email hello@maisonvin.ai with the subject “Privacy appeal.” We will explain the outcome and any applicable regulator complaint route.

We do not discriminate against members for exercising protected privacy rights. EU and UK individuals can complain to their local supervisory authority. US state privacy rights apply where their statutory requirements are met; this Policy does not claim every state statute applies to every member or to Maison Vin.

9 International processing

Information is processed in the United States and may be accessed in Ukraine and Poland by authorized developers and in other countries where our providers operate. Privacy laws may differ between countries. Where a transfer requires a legal safeguard, an applicable lawful mechanism is required, such as approved contractual clauses where appropriate. Merely accepting US governing law or this Policy does not waive that requirement. Contact hello@maisonvin.ai for information about safeguards relevant to your data and how to obtain a copy where applicable.

10 Security

We use safeguards appropriate to the nature of the information and the Service, including access restrictions and the security functions of our hosting and authentication providers. No system is completely secure. Use a strong, unique password and notify hello@maisonvin.ai promptly if you suspect unauthorized access. If a security incident requires notification, we will notify affected people and authorities within the applicable legal deadlines.

11 Adults only

The Service is intended only for people aged 21 and older. We do not knowingly permit under-21 accounts. If we learn an account belongs to someone under 21, we will disable it and delete its information, subject to limited legal preservation requirements. Contact hello@maisonvin.ai if you believe an underage person is using the Service.

12 Changes to this Policy

We update the effective date and version when this Policy changes and provide notice of material changes through the Service or email as appropriate. Prior versions are available on request. If applicable law requires consent for a new use, the new use is subject to that requirement; notice alone does not replace consent.

13 Contact

Maison Vin LLC

200 E 21st Street, New York, NY 10010, USA

hello@maisonvin.ai