Privacy Policy

Information We Collect

We collect the following types of information:

• Account information: name, email address, and role (grower, buyer, broker) provided during registration
• Listing data: vineyard name, grape variety, tonnage, pricing, brix levels, and vineyard conditions submitted through marketplace listings
• Usage data: pages visited, features used, and interaction patterns collected through PostHog analytics
• Questions asked without an account: if you use the pricing chat without signing in, we collect the question you type and the answer we give. To limit each visitor to one free answer, we set a cookie with a random identifier and turn your IP address into a one-way code that changes every day. We don't store your IP address for this limit. Please don't include personal or confidential information in your question.
• Cookies: authentication session cookies and analytics cookies (see our Cookie Policy)

How We Use Your Information

• Operate and maintain the marketplace
• Connect growers with qualified buyers
• Improve the Platform based on usage patterns
• Generate aggregated pricing intelligence and market reports (individual data is never exposed — pricing data is suppressed when fewer than three data points exist for a given segment)
• Send emails about your account, listings and introductions, and Market Pulse, our market email, if you've chosen to receive it. Every Market Pulse email includes an unsubscribe link.
• Answer pricing questions in the chat, and prevent misuse such as repeated free answers

How We Share Your Information

We do not sell your personal information. We share information only in the following ways:

• Aggregated market data: we publish anonymized, aggregated pricing data as part of our market intelligence products. Individual pricing is never exposed when fewer than three data points exist for a given segment.
• Service providers: we use third-party services that process data on our behalf under contractual obligations: Supabase for data storage, Clerk for sign-in, SendGrid and Resend for email, PostHog for analytics, Vercel for hosting, and Anthropic, through Vercel's AI Gateway, to generate chat answers.
• Legal requirements: we may disclose information if required by law or to protect our rights.

Data Retention

We retain your personal information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Aggregated, anonymized data derived from your listings may be retained indefinitely as part of our market intelligence products.

Questions asked without an account, and their answers, are deleted 90 days after they're asked. We may keep counts that don't include your question text, such as how many questions were asked about a CDFA district. The records we use to count free answers are deleted after 30 days.

Your Rights Under CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know: request a copy of the personal information we have collected about you
• Right to delete: request deletion of your personal information
• Right to opt out: we do not sell personal information, but you may contact us to confirm this at any time
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at hello@grapora.com.

Security

We take reasonable measures to protect your information. Data is encrypted in transit using TLS. Our database enforces row-level security policies to ensure users can only access data they are authorized to see. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Grapora is not directed at individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.