Vinova helps people discover Ontario wineries and plan trips, and helps wineries manage how they appear to visitors. This policy explains what personal information we collect through our website and apps, why we collect it, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Information we collect
When you create an account
- Account details: your name, email address and password. Passwords are stored as a one-way hash, so we can't read them.
- Sign in with Apple or Google: if you choose this, we receive your name, email address and an account identifier from that provider. We never see your Apple or Google password.
- Age confirmation: you must be of legal drinking age in Ontario (19 or older). We record that you confirmed this and when.
- Email preferences: whether you agreed to receive news about wineries and events, and when.
When you use Vinova
- Your activity: wineries you favourite and routes you save.
- Reports: if you tell us a listing is wrong, we keep your report so we can follow up.
- Technical information: your IP address, browser type and the pages you request. We use this to keep you signed in, protect accounts from abuse and fix errors.
If you manage a winery
- Business details: information you add to your winery's listing, such as contact details, hours, descriptions and photos. Listings are public.
- Ownership checks: details you give us when you claim a winery, so we can confirm you're allowed to manage it.
- Team members: the names and email addresses of people you invite to help manage your listing.
- Billing: if you subscribe to a paid plan, Stripe processes your payment. We store your subscription status and the last digits of your card, but never your full card number.
How we use your information
- To run your account and the features you use, like favourites and saved routes.
- To send you emails you need, such as account verification, password resets and security notices.
- To send you news and offers, but only if you've agreed. You can unsubscribe at any time.
- To verify winery ownership, publish winery listings and bill winery subscriptions.
- To keep Vinova secure, prevent fraud and abuse, and fix problems.
- To meet our legal obligations.
We don't sell your personal information.
Cookies
We use cookies that are needed for the site to work: keeping you signed in, remembering your session and protecting forms against forgery. Our network provider, Cloudflare, may also set a cookie to filter out malicious traffic. We don't currently use advertising or analytics cookies. If that changes, we'll update this policy first.
Who we share it with
We share personal information only with service providers that help us run Vinova, and only as much as they need to do that work:
- Hosting and storage providers that run our servers, databases and file storage.
- Cloudflare for website delivery and security.
- Amazon Web Services to send our emails.
- Sentry to tell us when something breaks.
- Stripe to process winery subscription payments.
- Apple and Google, if you choose to sign in with them.
Some of these providers may store or process information outside Canada, including in the United States, where it may be subject to the laws of that country. We may also disclose information if the law requires it, or to protect the safety of our users or the public.
How long we keep it
We keep your information while your account is open. When you delete your account, we delete your profile, favourites, saved routes and app sign-ins. Copies in backups and logs are removed as they expire. We may keep some records for longer when the law requires it, such as billing records for wineries.
Your choices and rights
You can ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent. Most of this you can do yourself on your account page:
- Update your name, email address or password.
- Download a copy of your data.
- Permanently delete your account.
You can unsubscribe from marketing emails using the link in any of them. For anything else, contact us using the details below.
Security
We use encryption in transit (HTTPS), hashed passwords, access controls and two-factor authentication for staff and winery owners. No system is perfectly secure, so if we learn of a breach that creates a real risk of significant harm, we'll notify you and the Privacy Commissioner of Canada as the law requires.
Children
Vinova is for adults of legal drinking age. We don't knowingly collect information from anyone under 19. If you think a minor has created an account, please contact us and we'll delete it.
Changes to this policy
If we make significant changes, we'll update the date at the top of this page and, where appropriate, let you know by email or in the app.
Contact us
Questions or requests about your privacy can go to [email protected]. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.