Winery OS

Privacy Statement

Version 2026-09-21.2

Stemco LLC operates Winery OS. This statement explains what we collect, why, who else handles it, and how long it is kept. In short: your winery’s records are used to run Winery OS for your winery, and for nothing else.

What we collect

  • Accounts: each person’s name, email address and role. Passwords are stored only as a one-way hash. We cannot read them.
  • Your winery’s records: everything you and your crew enter, including vineyard blocks and maps, samples and analyses, fermentation and cellar work, inventory and movements in and out of bond, tasks, crew-board posts, uploaded photos, and conversations with the copilot.
  • Location: the city, state, ZIP code or coordinates you give for your winery, used for weather and frost data.
  • Technical data: IP addresses, browser type and the pages requested, in our server logs. When you sign up, we also record which version of each agreement you accepted, with the time and your IP address.

Cookies

Winery OS sets three cookies of its own: one that keeps you signed in, and two that remember your display theme and units. There are no advertising, analytics or tracking cookies, and no third-party trackers.

How we use it

  • To run Winery OS for your winery: store, calculate and show your records.
  • To send the email you ask for or expect: invitations, password resets, task notices and the morning digest, which each person opts into.
  • To support you, fix problems, and keep the service secure.

We do not sell your data, we do not use it for advertising, and we do not use it to train AI models.

Other wineries

Each winery’s records are separated from every other winery’s in the database itself, not only in the application. Other wineries cannot see your records.

Winery OS includes controls for a possible future regional benchmarking feature. It is not active: nothing is aggregated or shared, and every winery’s consent is off by default. If we ever turn it on, it will be opt-in, category by category, aggregated so that no single winery can be identified, and we will tell you before it starts.

AI features

When you use an AI feature, the request is sent to an AI provider to produce a response. That includes your question, and the records, photos or audio the feature needs to answer it. The copilot and label reading use Anthropic. Voice input and read-aloud use OpenAI, and the copilot may be configured to use OpenAI instead. Both providers’ API terms state that they do not use API data to train their models by default. If you do not use the AI features, none of your records are sent to either provider.

Service providers

These companies process data on our behalf, only to provide their part of the service:

  • Vultr: hosts Winery OS and its database, in Chicago, USA.
  • Cloudflare: network delivery and security, and forwarding of mail sent to our support address.
  • Resend: delivers the email Winery OS sends.
  • Anthropic and OpenAI: the AI features, as described above.
  • Open-Meteo: weather data. It receives only your weather station’s coordinates, never your records.
  • Backblaze: off-site backup storage. Backups are encrypted before they leave our server, so Backblaze cannot read them.
  • Google Fonts: serves the typefaces the app uses, so your browser’s IP address reaches Google when a page loads.

We will update this list before adding a provider that handles your records.

Who at Stemco LLC can see your records

Only the people who run Winery OS, and only when needed: to help you when you ask, to fix a problem, or to protect the service.

How long we keep it

  • Your records: for as long as your winery uses Winery OS.
  • After your winery leaves: records are removed from the live system when deletion is carried out. Copies remain in backups until those age out: up to 14 days on our server, and up to about 4 months off-site.
  • Web server logs, including IP addresses: 14 days.
  • Agreement acceptances: as long as the account exists.

Your choices and rights

  • An owner or administrator can export the winery’s complete record at any time from Settings.
  • Each person controls their own morning digest, and can turn it off in Settings.
  • To see, correct or delete personal information, or to have your winery deleted, email [email protected].

Where it is stored

In the United States.

Security

Connections are encrypted in transit. Passwords are hashed. Each winery is isolated at the database level, and backups are encrypted and tested regularly by restoring them. No system is perfectly secure. If we learn of a breach that affects your data, we will tell you promptly.

Children

Winery OS is for businesses and is not intended for anyone under 18.

Changes

If we change how we handle your information, we will update this page and its version date, and tell you by email or in the app before a significant change takes effect.

Contact

Stemco LLC · [email protected]