Privacy Policy

This Privacy Policy describes how we collect, use, and share information when you use our website, products, and services ("Services"). This policy applies to Corkly AI, LLC ("we," "our," or "us"), a limited liability company based in the United States.

1. Information We Collect

We may collect information you provide directly to us, such as your name, email address, payment details, tasting notes, preferences, and optional wine label photos. We also collect information automatically through your use of our Services, such as IP address, browser type, device information, and usage data.

If you join the iPhone app waitlist, we collect your email address, confirmation status, the Corkly page and placement where you joined, device category, language, and campaign parameters when present. We use Cloudflare Turnstile to help distinguish legitimate requests from automated abuse.

To measure the number of qualified browser sessions in this app-interest study, Corkly creates a random experiment ID for the current tab session. The ID is kept in session storage for that tab. Corkly does not store a direct association between this ID and your email address or waitlist record. After the app-availability section is at least half visible for one second, we record the ID with the first qualifying Corkly page and placement and a server timestamp. The exposure record stores no IP address, device data, or campaign attribution.

If you choose to sign in with Google, Google and our authentication provider, Supabase, provide us with basic account information associated with your Google account, including your verified email address, name, and profile information made available through the standard identity scopes. Corkly never receives or stores your Google password.

2. How We Use Information

We use the collected information to operate, maintain, and improve our Services. We also use it to communicate with you, process transactions, and comply with legal obligations.

We use Mixpanel to understand feature usage and improve reliability. Mixpanel may process device, browser, page, and interaction information. We record a limited sample of sessions. Text and form inputs are masked, images and video are blocked, and console and network recording are disabled.

3. iPhone App Waitlist

The waitlist helps us measure verified demand before deciding whether to build an iPhone app. We use the email address only to confirm your interest and, if we proceed, to send one update about the iPhone app. Joining this waitlist does not subscribe you to general marketing email.

Your interest counts only after you use the confirmation link. Confirmation and removal links are sent by email. Removing yourself deletes the waitlist record and stops the one-time app update.

4. Sharing of Information

We do not sell your personal information. We may share information with third-party service providers who help us operate our Services, including Supabase for authentication and data storage, Mixpanel for product analytics and limited session replay, Stripe and Google Play for payment processing, and Google when you choose Google sign-in. For the iPhone waitlist, Supabase stores the record, Resend delivers confirmation and app-update email, and Cloudflare hosts the request endpoint and provides Turnstile abuse protection. We may also share information when required to comply with law or protect our rights.

Free Wine Confidence course

The free written course uses browser storage to keep your exercise text, quiz selections and completion marks on this device. You can download the lessons and your work. Clearing browser data removes that saved work. It is not synced to a Corkly account, and the course makes no AI requests.

We record course starts, exercise starts, lesson completion, workbook downloads and subscription-link clicks through the website analytics described in this policy. These course events do not include your written exercises or selected answers.

AI in the separate Corkly app

Existing paid course access in the Corkly app may include optional AI practice using OpenAI. Asking that lesson coach sends your question, the saved exercise for that lesson, and a short recent exchange to OpenAI to generate a reply. Other included AI practice may send the tasting information or label photo you choose to use in that request.

Supabase stores your course access, lesson progress, written notes, and AI usage records. Usage records include request times, processing results, and token counts. Those usage records do not contain your prompts or photos. The lesson coaching exchange stays on the current page and clears when you leave that lesson step. To keep an insight, write it in your saved reflection.

OpenAI has separate rules for processing and retaining API requests. Its default abuse-monitoring logs may include requests and replies for up to 30 days, with longer retention in some circumstances. See OpenAI’s API data controls.

5. Data Retention

We retain your data only for as long as necessary to provide our Services or as required by law.

Unconfirmed iPhone waitlist requests expire after 48 hours and are deleted through a daily cleanup. Confirmed waitlist records are deleted after the one-time app update or, if no app launches, after no more than 18 months. Records scheduled for deletion are removed within 30 days. You may remove your waitlist record sooner using the removal link in the email or by contacting us.

The session-scoped experiment ID disappears from browser storage when the tab session ends. Its unlinked server exposure row is automatically deleted after 18 months. Removing a waitlist signup does not remove that separate, anonymous exposure row because it cannot be linked back to the signup.

6. Security

We take reasonable steps to protect your information from unauthorized access or disclosure. However, no method of transmission over the Internet is completely secure.

7. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal information. Please contact us at esteban@corkly.ai to exercise these rights.

8. Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take steps to delete such information.

9. International Users

If you access the Services from outside the United States, you consent to the processing and transfer of your information in and to the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The revised policy will be effective as of the Effective Date listed above.

11. Contact Us

For questions about this policy, contact us at:

Corkly AI, LLC
Email: estebanwesson@gmail.com