Privacy policy
# Privacy Policy
**That Bartender Project Shop**
Last updated: July 23, 2026
---
That Bartender Project Shop operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). That Bartender Project Shop is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services — including the **Cocktail Architect** digital application — or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
---
## Personal Information We Collect or Process
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
- **Contact details** including your name, address, billing address, shipping address, phone number, and email address.
- **Financial information** including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, payment confirmation and other payment details.
- **Account information** including your username, password, security questions, preferences and settings.
- **License and subscription information** including your license key, subscription tier (Basic, Pro AI, or Premium AI), and associated account status — collected when you purchase or activate a license for the Cocktail Architect application.
- **Transaction information** including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
- **Application data** including recipes, cocktail menus, batch production records, and sales history that you create or import within the Cocktail Architect application, stored on your behalf in our cloud database.
- **AI usage information** — when you use the AI assistant feature (Pro AI and Premium AI plans), we store a pseudonymized identifier (a cryptographic hash of your license key) and the aggregated cost of your AI requests per week and per month, to enforce usage budgets. The content of your conversations with the AI assistant is transmitted to Anthropic, Inc. for processing but is **not stored on our servers**.
- **Feedback and interaction signals** — anonymous signals such as clicking the "need higher limits" button, stored with a pseudonymized identifier.
- **Communications with us** including the information you include in communications with us, for example when sending a customer support inquiry.
- **Device information** including information about your device, browser, or network connection, your IP address, and other unique identifiers.
- **Usage information** including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
---
## Personal Information Sources
We may collect personal information from the following sources:
- **Directly from you** including when you create an account, purchase a license, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
- **Automatically through the Services** including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
- **From our service providers** including Lemon Squeezy (our license and subscription management provider), which provides us with your email address and name upon license activation, and Shopify, which collects and processes information about your store activity.
- **From our partners or other third parties.**
---
## How We Use Your Personal Information
Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:
- **Provide, Tailor, and Improve the Services.** We use your personal information to provide you with the Services, including to process your payments, fulfill your orders, remember your preferences, send notifications related to your account, process purchases and transactions, create and maintain your account, and create a customized experience for you. For the Cocktail Architect application, this includes syncing your application data (recipes, menus, batches, sales) to our cloud database so you can access them across devices.
- **Operate the Cocktail Architect Application.** We use your license key and associated email to authenticate your access, determine your subscription tier, enforce AI usage budgets, and provide the features available under your plan.
- **AI Processing.** When you use the AI assistant feature, your messages, along with context about your current session (such as the recipe you are working on), are transmitted to Anthropic, Inc. for processing. We use this information solely to provide AI-powered responses to your queries. The content of these conversations is not stored by us beyond the duration of your session.
- **Marketing and Advertising.** We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements.
- **Security and Fraud Prevention.** We use your personal information to authenticate your account, provide a secure payment and usage experience, and detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity.
- **Communicating with You.** We use your personal information to provide you with customer support and to maintain our business relationship with you.
- **Legal Reasons.** We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies.
---
## Cocktail Architect Application
The Cocktail Architect is a digital bartending tool available as part of our Services. When you use the Cocktail Architect application, the following applies:
**Cloud Storage.** If you are a registered user (having activated a license key), your application data — including recipes you create, cocktail menus, batch production records, sales history, and account preferences — is stored in a cloud database operated by Supabase, Inc. Each user's data is isolated and protected by Row Level Security, meaning your data is accessible only to you. Your email address, display name, license key, and subscription tier are stored in your account profile.
**Local Storage.** The application also stores data locally on your device (browser localStorage) as an offline cache. This data mirrors your cloud data and is used when you are offline or when cloud services are unavailable.
**AI Assistant.** The Pro AI and Premium AI subscription tiers include access to an AI assistant powered by Claude, an AI model developed by Anthropic, Inc. When you interact with the AI assistant, your messages and contextual information about your session are sent to Anthropic's API for processing. Anthropic processes this data in accordance with their own Privacy Policy and API Data Usage Policy. By default, Anthropic does not use API data to train their models. We do not store the content of your AI conversations on our servers. We do store a pseudonymized usage counter (your token consumption) to enforce monthly and weekly usage budgets included in your plan.
**License Authentication.** Access to the Cocktail Architect application is controlled by a license key issued through Lemon Squeezy. When you activate or verify your license, your license key and associated email address are verified against Lemon Squeezy's records. We receive your email address and name from Lemon Squeezy solely for the purpose of creating and managing your account.
---
## How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
- **With Shopify**, as our website and storefront platform provider, for hosting the store and managing website traffic and analytics.
- **With Supabase, Inc.**, as our cloud database and authentication provider, for storing your application data and managing your account.
- **With Anthropic, Inc.**, as our AI service provider, for processing your AI assistant queries (Pro AI and Premium AI plans only). Anthropic receives the content of your messages and session context. Anthropic's Privacy Policy governs their use of this data.
- **With Vercel, Inc.**, as our cloud hosting and serverless computing provider, for operating the application's backend infrastructure.
- **With Lemon Squeezy**, as our license key and subscription management provider, for processing license activations, managing subscriptions, and handling payments for the Cocktail Architect application.
- **With vendors and other third parties** who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
- **With business and marketing partners** to provide marketing services and advertise to you.
- **When you direct, request us or otherwise consent** to our disclosure of certain information to third parties.
- **With our affiliates** or otherwise within our corporate group.
- **In connection with a business transaction** such as a merger or bankruptcy, to comply with any applicable legal obligations, to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.
---
## Relationship with Shopify
Our website and storefront are hosted on the Shopify platform. Shopify collects and processes certain personal information about your visits to and use of our website (such as IP address, browser type, and pages visited) in order to provide and operate the platform. Shopify does not receive your purchase or payment information — all purchases are processed exclusively through Lemon Squeezy, who acts as Merchant of Record.
To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy. Depending on where you live, you may exercise certain rights with respect to your personal information at the Shopify Privacy Portal at https://privacy.shopify.com/en.
---
## Third Party Websites and Links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
---
## Children's Data
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
---
## Security and Retention of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
Application data stored in our cloud database (Supabase) is protected by Row Level Security — each user can only access their own data. Access to the AI assistant is protected by server-side entitlement checks; your API keys are never exposed to client-side code.
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. Application data (recipes, menus, batches) is retained for the duration of your account. AI usage counters are retained for up to 13 months. Aggregated feedback signals (stored as pseudonymized identifiers with no directly identifying information) are retained for up to 24 months and may be purged earlier at our discretion. You may request deletion of your account and all associated data at any time (see "Your Rights and Choices" below).
---
## Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances, and, in certain cases, we may decline your request as permitted by law.
- **Right to Access / Know.** You may have a right to request access to personal information that we hold about you.
- **Right to Delete.** You may have a right to request that we delete personal information we maintain about you. For Cocktail Architect users, you may also delete your account directly within the application by navigating to your Account settings and selecting "Delete account." This will permanently remove your cloud-stored data.
- **Right to Correct.** You may have a right to request that we correct inaccurate personal information we maintain about you.
- **Right of Portability.** You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
- **Managing Communication Preferences.** We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you.
You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, you can visit https://privacy.shopify.com/en.
We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests. We will respond to your request in a timely manner as required under applicable law.
---
## International Transfers
Please note that we may transfer, store and process your personal information outside the country you live in, including to countries such as the United States, where our service providers Supabase, Inc., Anthropic, Inc., and Vercel, Inc. are headquartered or process data.
If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
---
## Jurisdiction-Specific Information
We are committed to complying with the applicable data protection and privacy laws of each country in which we operate, in addition to the general rights and obligations described in this Privacy Policy. This includes:
- **European Union and European Economic Area**: Your rights are governed by the General Data Protection Regulation (GDPR, Regulation 2016/679). The legal bases for our processing are primarily contractual necessity (performing the subscription and services agreement with you) and legitimate interests (operating and improving the Services). You may lodge a complaint with your local supervisory authority.
- **United Kingdom**: Your rights are governed by the UK GDPR and the Data Protection Act 2018. You may lodge a complaint with the Information Commissioner's Office (ICO).
- **United States**: Depending on your state of residence, you may have additional rights under applicable state privacy laws (e.g., CCPA/CPRA for California residents).
- **Republic of Moldova**: We process your personal data in compliance with the Law on Personal Data Protection No. 133 of 08.07.2011, as amended. You may lodge a complaint with the Autoritatea Națională pentru Protecția Datelor cu Caracter Personal (ANPDCP), the competent supervisory authority for personal data protection in Moldova.
- **Ukraine**: We process your personal data in compliance with the Law of Ukraine "On Personal Data Protection" No. 2297-VI of 01.06.2010, as amended.
- **Georgia**: We process your personal data in compliance with the Law of Georgia on Personal Data Protection (2011), as amended.
- **Republic of Belarus**: We process your personal data in compliance with the Law of the Republic of Belarus "On Personal Data" dated 07.05.2021.
- **Republic of Kazakhstan**: We process your personal data in compliance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" dated 21.05.2013, as amended.
- **Asian markets (including but not limited to Japan, South Korea, Singapore, and others)**: We comply with applicable local data protection laws in these jurisdictions.
In all cases, regardless of your jurisdiction, you may contact us to exercise your rights or lodge a complaint using the contact details below.
---
## Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.
---
## Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.
---
## Contact
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at contact@thatbartenderproject.com or contact us at:
**That Bartender Project Shop**
Strada Matei Basarab 16/1
Chișinău, 2045, Republic of Moldova