🍸 Privacy Policy

GDPR • CCPA • Google Play Enterprise Standard

Effective Date: October 5, 2026 | Last Updated: October 5, 2026

BevDirector ("we", "us", or "our") operates the BevDirector Enterprise Suite, associated Progressive Web Applications (PWA), mobile shells, offline inventory engines, and cloud synchronization platforms accessible at https://bevdirector.com. This Privacy Policy outlines our strict organizational protocols regarding data collection, local device storage, cryptographic transport, and confidentiality safeguards for hospitality professionals, venue operators, and corporate beverage programs.

1. Data Collection & Processing Categories

BevDirector collects and processes only the minimum operational data strictly necessary to deliver commercial inventory management, beverage costing, and procurement automation:

• Account & Identity Verification: Corporate email address, authorized user name, organization/venue title, user role, and session tokens. If authenticating via Google Sign-In, we receive the standard federated OAuth identity token (User ID, primary email, display name) strictly for secure session authorization.
• Operational Inventory & Recipe Data: SKU records, wholesale bottle costs, distributor packaging specs, tare weight deductions, storage zones, physical bottle counts, commissary transfers, and purchase order histories. All inventory and recipe data remains 100% proprietary to the client organization.
• AI Vision Invoice Scanner (Camera/Image Access): When utilizing the AI Vision Invoice Scanner, photos of paper delivery invoices captured via your device camera or uploaded image files are processed strictly to perform optical character recognition (OCR) on line-item descriptions, case counts, and invoice unit prices. Invoice images are processed ephemerally in volatile memory and are never retained for advertising or commercial model training.
• Device Orientation Sensors (Gyroscope & Accelerometer): Sensor orientation data is accessed solely while interacting with the Touch Bottle Calculator to calculate fluid angle physics and render realistic dynamic meniscus slosh simulations. Sensor data is processed entirely in volatile client-side device memory and is never recorded, transmitted over networks, or shared with third parties.

2. Local-First Storage & Cryptographic Cloud Synchronization

BevDirector is engineered for subterranean cellars, reinforced walk-in coolers, and concrete kitchen environments where cellular and Wi-Fi signals frequently attenuate:

• Encrypted Local Storage: All inventory counts, recipe builds, tare calibrations, and master price books reside on your local physical device inside encrypted IndexedDB and LocalStorage stores.
• Zero-Interruption Offline Work: Bar stations and managers can conduct full physical inventory counts, scale prep batches, and audit costs entirely offline without network connectivity.
• Cloud Replication: When an active network connection is established, changes synchronize to Google Cloud Platform and Firebase Realtime Database clusters utilizing TLS 1.3 encryption in transit and AES-256 encryption at rest. Multi-tenant database rules isolate each organization's data strictly to authorized venue accounts.

3. Third-Party Infrastructure & Sub-processors

We do not monetize, broker, sell, or rent your operational inventory data, confidential recipe specs, or supplier pricing agreements to any third party or marketing network. We rely only on enterprise-grade infrastructure sub-processors:

• Google Cloud Platform & Firebase: Provides user authentication, real-time database replication, and progressive web application hosting (https://bevdirector.com).
• Google Gemini Vision AI API: Provides high-speed transient optical character recognition for paper delivery invoices.

4. Data Ownership, Portability & Deletion Rights

You maintain unencumbered ownership of your beverage catalog, sales mix, and inventory records:

• On-Demand Export: You can export complete price books, cocktail recipe cards, physical count sheets, and purchase order histories in standardized CSV or JSON formats at any time without fees.
• Permanent Data Erasure: In accordance with GDPR Article 17 and CCPA Right to Delete, organizations may permanently purge their cloud database partitions and account records at any time via the Account & Data Deletion Portal or by emailing privacy@bevdirector.com.

5. Security Standards & Vulnerability Management

BevDirector implements stringent security controls including Content Security Policies (CSP), strict credential hashing, Manager PIN compartmentalization, and automated session timeouts to prevent unauthorized floor terminal tampering.

6. Privacy Officer & Inquiries

For questions regarding this Privacy Policy, enterprise Data Processing Agreements (DPA), or regulatory compliance inquiries, please contact our Data Protection Officer:

BevDirector Enterprise Compliance & Data Protection
Website: https://bevdirector.com
Email: privacy@bevdirector.com