Privacy Policy

Information We Collect

We collect the following types of information:

• Account information: name, email address, and role (grower, buyer, broker) provided during registration
• Listing data: vineyard name, grape variety, tonnage, pricing, brix levels, and vineyard conditions submitted through marketplace listings
• Usage data: pages visited, features used, and interaction patterns collected through PostHog analytics
• Cookies: authentication session cookies and analytics cookies (see our Cookie Policy)

How We Use Your Information

• Operate and maintain the marketplace
• Connect growers with qualified buyers
• Improve the Platform based on usage patterns
• Generate aggregated pricing intelligence and market reports (individual data is never exposed — pricing data is suppressed when fewer than three data points exist for a given segment)
• Send transactional emails related to your account and listings

How We Share Your Information

We do not sell your personal information. We share information only in the following ways:

• Aggregated market data: we publish anonymized, aggregated pricing data as part of our market intelligence products. Individual pricing is never exposed when fewer than three data points exist for a given segment.
• Service providers: we use third-party services (Supabase for data storage, SendGrid for email, PostHog for analytics, Vercel for hosting) that process data on our behalf under contractual obligations.
• Legal requirements: we may disclose information if required by law or to protect our rights.

Data Retention

We retain your personal information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Aggregated, anonymized data derived from your listings may be retained indefinitely as part of our market intelligence products.

Your Rights Under CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know: request a copy of the personal information we have collected about you
• Right to delete: request deletion of your personal information
• Right to opt out: we do not sell personal information, but you may contact us to confirm this at any time
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at hello@grapora.com.

Security

We take reasonable measures to protect your information. Data is encrypted in transit using TLS. Our database enforces row-level security policies to ensure users can only access data they are authorized to see. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Grapora is not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.