Privacy Policy

1. Who we are

utah-neat (accessible at utahneat.app) is operated by Bonham Technologies LLC, a company organized under the laws of Utah, USA (“we,” “us,” or “our”).

utah-neat tracks publicly available Utah DABS whiskey inventory and presents it as an informational service. We are not affiliated with or endorsed by the Utah Department of Alcoholic Beverage Services (DABS).

For privacy-related inquiries or data-deletion requests, contact us at privacy@bonham.tech.

2. What data we collect

2a. Email address and account identifiers

When you sign up for free bottle alerts or a Pro subscription, you provide your email address. We store it together with your account status (free vs. Pro), subscription expiry date, and a reference to your Stripe customer record. We do not store passwords — authentication is handled via a magic link sent to your inbox.

2b. Saved searches and alert preferences

Pro subscribers can save product-filter criteria (e.g., “new bourbon under $150”). We store those criteria so we can match them against nightly new listings and include results in alert emails.

2c. Payment information

Payments are processed by Stripe. We never see, receive, or store your full card number, CVV, or bank account details. Stripe provides us with a customer ID and subscription status; all payment data is governed by Stripe’s Privacy Policy.

2d. Usage analytics

We use Vercel Analytics, a privacy-friendly analytics service. Vercel Analytics does not use cookies for analytics, does not fingerprint individual users, and does not share data with advertising networks. It records aggregate page-view counts and performance metrics. See Vercel’s Analytics Privacy Policy for details.

2e. Log and technical data

Like most web services, our hosting infrastructure (Vercel) logs standard request metadata including IP address, browser type, and pages visited. These logs are used only for security monitoring and troubleshooting and are subject to Vercel’s own retention policies.

3. How and why we use your data

• To send alert emails — we use your email address and saved preferences to notify you about bottle restocks, price changes, status changes, or new listings matching your criteria.
• To manage your account and subscription — authenticating you via magic link, tracking your Pro status, and providing access to the billing portal.
• To send transactional emails — confirmation emails, alert digests, and billing-related notices (e.g., renewal receipts sent by Stripe).
• To improve the service — aggregate, anonymous usage analytics help us understand which features are used and identify performance problems.
• To prevent abuse — request-rate limiting to protect the API and prevent spam to third-party addresses.

We do not sell, rent, or share your personal data with advertisers or data brokers. We do not use your data for profiling or automated decision-making beyond the matching of your saved search criteria against new product listings.

4. Legal bases for processing

We process your data on the following bases:

• Contract — processing necessary to deliver the service you signed up for (alerts, account management, Pro subscription).
• Consent — you provide your email address and explicitly opt in to receiving alert emails; you can withdraw consent at any time by deleting your account or unsubscribing.
• Legitimate interests — security monitoring, rate limiting, and aggregate analytics that help us keep the service running reliably.

5. Third-party processors

We rely on the following sub-processors to operate the service. Each processes only the data necessary for its stated purpose.

6. Cookies

We use the minimum number of cookies required to operate the service:

• Authentication session cookie — an httpOnly, Secure cookie set by Supabase Auth when you sign in. It stores your session token and is required to keep you logged in. It expires when your session ends or you sign out. This cookie is strictly necessary; it cannot be opted out of while signed in.
• Local storage (shopping list) — your whiskey shopping list is stored only in your browser’s local storage, not on our servers, and never transmitted to us.

Vercel Analytics does not use tracking cookies. We do not use advertising cookies, third-party tracking pixels, or any persistent identifiers for behavioral advertising.

7. Data retention

We retain your account data (email, subscription status, saved searches, alert history) for as long as your account is active. If you delete your account, we permanently purge your subscriber record, all saved search criteria, alert history, and magic-link tokens. Stripe’s independent retention of billing records is governed by their own policies.

Server and infrastructure logs held by Vercel are subject to Vercel’s own retention schedule (typically 30 days).

8. Your rights

Depending on your jurisdiction, you may have rights including:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request deletion of your account and all associated data. You can self-serve this instantly from your Account page. If you have an active Pro subscription you must cancel it first (you can do so in the billing portal, also linked from your Account page); access continues until the end of your current paid period. You can also email privacy@bonham.tech to request deletion manually.
• Objection / withdrawal of consent — you can stop receiving alert emails at any time by unsubscribing via the link in any alert email, or by deleting your account.
• Portability — contact us to receive your data in a structured, machine-readable format.

To exercise any of these rights, email privacy@bonham.tech. We will respond within a reasonable time consistent with applicable law.

9. Age restriction

utah-neat provides information about alcoholic beverages sold through the Utah state liquor system. It is intended for users who are 21 years of age or older. We do not knowingly collect personal data from anyone under 21. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@bonham.tech and we will delete it promptly.

10. Security

We take reasonable technical and organizational measures to protect your data, including TLS encryption in transit, httpOnly/Secure session cookies, and row-level security on our database. No internet transmission is 100% secure; we cannot guarantee absolute security, but we will notify you promptly in the event of a breach that affects your personal data.

11. International data transfers

Bonham Technologies LLC is based in the United States (Utah). Our primary infrastructure (Vercel, Supabase) operates in US data centers. If you access the service from outside the United States, your data will be transferred to and processed in the US. We rely on the legitimate interest and contractual necessity bases for such transfers. If you have questions about cross-border data transfers, contact privacy@bonham.tech.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date at the top of this page. If you have an account, we may also notify you by email. Your continued use of the service after changes take effect constitutes acceptance of the revised policy.

13. Contact

Privacy and data-deletion requests: privacy@bonham.tech

Legal and general inquiries: legal@bonham.tech

Bonham Technologies LLC — Utah, USA