Privacy Policy

Effective date: July 15, 2026

A12 Solutions LLC ("we," "us," or "our") operates the whereswhiskey.com website and the Wheres Whiskey service. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account Information

When you create an account we collect your email address and a password (stored only in hashed form). Email is your login identifier. We do not collect your name, date of birth, phone number, physical address, or payment card details.

During signup you confirm that you are 21 years of age or older. That attestation is used only to gate access; we do not store a date of birth.

Profile & Preferences

We store preferences you set on your account, including:

• Which U.S. states you track for inventory and lottery features.
• Daily limits for email and Telegram alert delivery.
• Optional Telegram connection data: a Telegram chat ID and temporary verification tokens used only while you link your account to our bot.

Alert Subscriptions

When you create stock alerts we store the bottles and cities you select, which delivery channels you enable (email and/or Telegram), and when each alert was last triggered.

If you opt into lottery alerts, we store the state(s) you selected and your preferred delivery channels for those notifications.

Notification Delivery Records

We keep delivery logs for stock and lottery alerts (for example: user identifier, channel, bottle or state, status, and timestamps). These records support reliable delivery, idempotency, and daily rate limits. They are not used for advertising.

Community Contributions

If community features are available on your plan, you may voluntarily submit:

• Sightings - reports that a product was seen at a store (product, store, city/state, and submission time). Sightings expire after a set period.
• Store delivery-day reports - your vote for a store's typical delivery day of week.

These submissions are associated with your account for moderation and abuse prevention. We do not collect device GPS or other personal location data; store coordinates, when shown, come from public store addresses, not from your device.

Billing Information

If you subscribe to a paid plan, payment is processed entirely by Stripe, Inc. We never receive or store your credit card number. We store only a Stripe customer identifier, subscription status, plan tier, billing interval, and related subscription metadata so we can manage your plan.

Session Data

We use server-side sessions to keep you signed in while you use the site.

Information We Do Not Collect

We do not use advertising pixels, analytics SDKs, or third-party marketing trackers on this site. We do not collect Social Security numbers, government IDs, or biometric data.

2. How We Use Your Information

• Deliver the service - send stock and lottery alerts via email and/or Telegram based on your subscriptions and preferences; display inventory, store, and lottery information you request.
• Account management - email verification, password resets, Telegram account linking, and billing.
• Community features - publish and expire sightings and aggregate delivery-day reports you choose to submit.
• Reliability & abuse prevention - enforce daily submission and notification limits; diagnose delivery failures.
• Service improvement - aggregate, non-identifying usage patterns to improve reliability.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Third-Party Services

We rely on the following third-party service providers:

• Stripe - payment processing. Stripe's privacy policy: stripe.com/privacy
• Amazon Web Services (SES) - transactional email delivery (verification emails, password resets, alert notifications).
• Telegram - optional alert delivery and account linking via the Telegram Bot API. If you connect Telegram, your chat ID is stored so we can send you messages you opt into. Telegram's privacy policy: telegram.org/privacy
• jsDelivr CDN - serves front-end libraries (such as Bootstrap and Chart.js) used by this website.

Each provider processes data under their own privacy policies. We share only the minimum data required for each service to function (for example, your email address for email delivery, a Telegram chat ID for bot messages, and Stripe identifiers for billing).

4. Cookies

We use only strictly necessary cookies:

• sessionid - keeps you signed in.
• csrftoken - protects against cross-site request forgery.

We do not use analytics, advertising, or tracking cookies. For more details see our Cookie Policy.

5. Data Retention

• Account, profile, subscription, preference, and billing linkage data is retained for as long as your account exists.
• Notification delivery logs are retained while needed for delivery reliability and rate limiting, and are removed when your account is deleted.
• Community sightings expire automatically after a set period; your submissions are also removed when you delete your account.
• When you delete your account, associated personal data (account, profile, alert subscriptions, lottery subscriptions, billing records, sightings, and related records) is permanently removed. Any active paid subscription is canceled immediately; no refund is issued for the remaining billing period.
• Server logs that may contain IP addresses are retained for no more than 90 days and are used only for security and debugging purposes.

6. Your Rights

• Access & correction - you can view and update your email, password, state preferences, notification channels, Telegram connection, and alert subscriptions from your account pages.
• Deletion - you can permanently delete your account and associated data from the Account Settings page.
• Disconnect Telegram - you can unlink Telegram at any time from Notification Settings; we clear your stored chat ID and disable Telegram delivery on your alerts.
• Data portability - contact us to request an export of your data.

If you are located in the European Economic Area (EEA), you may also have additional rights under the GDPR, including the right to lodge a complaint with a supervisory authority.

7. Children's Privacy

This service is intended for users who are 21 years of age or older. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected data from a person under 21, we will delete it promptly.

8. Security

We use industry-standard measures to protect your data, including HTTPS encryption in transit, hashed passwords, CSRF protection, and secure session handling. No method of electronic transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective date" at the top of this page. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at support@whereswhiskey.com.