Privacy Notice

1. Who we are

Terroir is operated by MAS Hospitality LLC ("we", "us", "our"). For personal data you provide when using the Service, MAS Hospitality LLC acts as the data controller.

2. Data we collect

• Account data: name, email, login credentials, authentication identifiers.
• Profile and content: taste preferences, saved pairings, bookmarks, menu photos, and other inputs you submit.
• Usage and device data: pages viewed, features used, device identifiers, browser type, IP address, approximate location, and diagnostic logs.
• Support data: messages and attachments you send to support.
• Payment data: processed directly by Paddle (see Section 4). We do not store full card numbers.

3. How we use data

• Create and operate your account (legal basis: contract performance).
• Provide and personalize the Service, including AI-generated flavor analyses and menu scans (contract / legitimate interests).
• Prevent fraud, abuse, and secure the Service (legitimate interests, legal obligation).
• Improve our product and develop new features (legitimate interests).
• Respond to support requests and important account notices (contract).
• Send product updates and marketing where you have opted in (consent — you can withdraw at any time).

4. Sharing

We share personal data with the following categories of recipients:

• Subprocessors and infrastructure providers that host the Service, run our database, send email, and provide analytics and error monitoring.
• AI model providers (such as Google and OpenAI) that process inputs to generate flavor and menu responses.
• Paddle, our Merchant of Record, for sale of subscriptions, subscription management, payments, tax compliance, invoicing, and refund handling.
• Professional advisers such as accountants and lawyers, and authorities where required by law.

5. Retention

We keep personal data only as long as needed to provide the Service and meet legal obligations. Account and content data are retained while your account is active and for a reasonable period after closure for backup, dispute resolution, and legal compliance, after which they are deleted or anonymized.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. To exercise these rights, contact us through the in-app support channel. You also have the right to lodge a complaint with your local data protection authority.

7. International transfers

Our infrastructure and subprocessors may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect your data. No system is perfectly secure; please use a strong password and notify us if you suspect unauthorized access.

9. Cookies

We use essential cookies and similar technologies to keep you signed in and to remember preferences. We may also use limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings.

10. Children

The Service is not intended for children under 16, and we do not knowingly collect their data.

11. Changes

We may update this notice from time to time. Material changes will be notified through the Service or by email.

12. Contact

MAS Hospitality LLC — privacy questions can be sent through the in-app support channel.