Privacy Policy

Octet Inc. (d/b/a Grapevine), a Delaware corporation (“Grapevine,” “we,” “us”) is the controller of the information described below.

This Privacy Policy explains what information Grapevine collects when you use our wine reservation service (the "Services"), how we use and share it, and your choices. It applies to diners, restaurant and wine-store personnel, and visitors. Payment-card data is handled by our payment processor (Stripe), not stored by us — see Section 3.

1. Information we collect

You provide:

• Reservation and order details — your name, email, phone (optional), the restaurant and reservation, the wines you select, and any notes you add (e.g., "decant 30 minutes before").
• Age affirmation — your confirmation that you are 21 or older at checkout.
• Communications — messages you send us for support.

Collected automatically:

• Usage and device data — basic log, device, and analytics information to operate and secure the Services.

From third parties:

• Payment confirmation from Stripe (e.g., success/failure, card brand and last four digits) — but not full card numbers.

We do not knowingly collect information from anyone under 21; the Services are for adults of legal drinking age only.

2. How we use information

• To create, process, and fulfill your wine order, including routing each bottle to the correct Store and your reservation.
• To charge accepted bottles, issue receipts, and handle refunds (via Stripe).
• To send transactional messages (order confirmations, declines, payment-failure notices) and, if you opt in, occasional updates.
• To coordinate service with your restaurant and fulfillment with the wine store.
• To provide support, prevent fraud and abuse, comply with law (including alcohol and tax laws), and improve the Services.

We rely on performing our contract with you, your consent (where required), and our legitimate interests in operating and securing the Services.

3. How we share information

• Restaurants — we share your reservation details, name, and order so the venue can serve your wine at the table. Restaurants may use this only to provide service, under their agreement with us.
• Wine stores — we share the order details needed to fulfill (the bottles, reservation timing, delivery destination).
• Stripe (payments) — payment is processed by Stripe under its own terms and PCI-DSS standards; Grapevine does not store full card numbers.
• Service providers — e.g., email delivery, hosting, and database providers, acting on our behalf under confidentiality obligations.
• Legal and safety — where required by law, to respond to lawful requests, or to protect rights, safety, and the integrity of the Services.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not allow recipients to re-identify or use your data for unrelated marketing.

4. Data retention

We keep personal information for as long as needed to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Order and tax records may be retained for the periods required by applicable law.

5. Security

We use appropriate technical and organizational measures to protect personal information, including reliance on Stripe for card data and access controls on our systems. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

6. Your choices and rights

• Access/correction/deletion — you may request access to, correction of, or deletion of your personal information, subject to legal retention limits.
• Marketing opt-out — you can opt out of non-transactional emails using the unsubscribe link or by contacting us.
• State privacy rights — depending on your state, you may have additional rights (e.g., to know, delete, correct, or opt out of certain processing). We will honor applicable rights and will not discriminate against you for exercising them.

To exercise any right, contact us using Section 9.

7. Cookies and analytics

We use cookies and similar technologies to keep you signed in to a reservation, remember your cart, secure the Services, and understand usage. You can control cookies through your browser; disabling some may affect functionality.

8. Children and scope

The Services are intended only for adults 21 and older in the United States. We do not direct the Services to, or knowingly collect data from, minors.

9. Contact

Questions or privacy requests:

• Grapevine (Octet Inc.) — privacy@grape.vin

We may update this Policy from time to time; the effective date above will change, and material changes will be communicated through the Services.