BREWTALLY — PRIVACY POLICY

1. Who We Are

Brewtally is a Software-as-a-Service (SaaS) platform built for craft breweries in India. We provide tools for fermentation monitoring, batch management, sales tracking, and automated state excise compliance document generation.

• Platform: Brewtally
• Tagline: Precision in Every Brew
• Location: Hubli, Karnataka 580031, India
• Data hosting: AWS Mumbai (ap-south-1) via Supabase
• Contact: privacy@brewtally.in

2. Information We Collect

2.1 Information you provide

• Account info: name, email, password (bcrypt hashed)
• Brewery profile: brewery name, state, city, excise license number, FSSAI number, owner name, contact phone number
• Operational records: BBT readings, fermentation logs, tank stock readings, sales transactions, raw material consumption, shift handover notes, batch records, QC lab readings
• Compliance data: opening stock values, excise duty declarations, compliance deadlines
• Team info: names and roles of staff members

2.2 Information collected automatically

• Login timestamps and session duration
• Device type and browser
• Pages visited within the app and features used
• IP address at time of login
• Error logs when app experiences failures

2.3 Information we do NOT collect

• Payment card details (handled by Razorpay only)
• Biometric data of any kind
• Camera, microphone or contacts access
• Browsing history outside Brewtally
• We do NOT sell your data — ever

3. How We Use Your Information

To provide the service

• Show your brewery operational data on dashboard
• Generate state-specific excise compliance documents from your sales and production data
• Calculate fermentation kinetics, tank fill percentages, and stock reconciliation
• Send compliance deadline reminders via WhatsApp/SMS when enabled
• Maintain your 7-year audit trail as required by Indian excise regulations

To improve the platform

• Analyse feature usage to prioritise development
• Identify and fix bugs
• Improve performance

To communicate

• Password reset and verification emails
• Critical account alerts
• Policy change notifications
• Respond to support requests

4. Data Storage and Security

Where stored

All data stored on Supabase Cloud — AWS Mumbai (ap-south-1) region. Your data never leaves India.

How we protect it

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for all data at rest
• PostgreSQL Row Level Security — your brewery data is technically isolated from all others
• Passwords stored as bcrypt hashes only
• OTP-based 2FA available for all accounts
• Immutable audit log on all data changes
• Only you and your invited team can access your brewery's records

Data retention

Operational records: 7 years minimum (required by Indian Central Excise Act and state excise regulations).

On account closure

• Compliance records: retained 7 years
• All other data: deleted within 30 days

5. Data Sharing

We do NOT sell, rent or trade your data. We share data only with:

• Supabase Inc. — database and auth infrastructure
• Anthropic PBC — AI recommendations only. Only anonymised fermentation data sent. No brewery name or compliance data shared.
• Twilio Inc. — WhatsApp/SMS alerts. Phone number only. No operational data.
• Razorpay — payment processing only. No operational or compliance data shared.

Legal disclosure

We may disclose data if required by law or court order. We will notify you where permitted.

6. Your Rights

• Access: Export all data via BrewSheet (CSV or Excel) at any time
• Correction: Edit any record in your account at any time
• Deletion: Email privacy@brewtally.in — non-compliance data deleted within 30 days
• Portability: Data exportable in Excel/CSV format compatible with any software
• Withdraw consent: Contact us at any time

7. Cookies

We use only:

• Session cookie (httpOnly JWT) — required, cannot be disabled, stores login session only
• Preference cookie — remembers UI settings, can be cleared with browser data

We do NOT use advertising cookies or tracking pixels.

8. Children's Privacy

Brewtally is a professional platform for adults operating licensed brewery businesses. We do not knowingly collect data from persons under 18. Contact privacy@brewtally.in to report any such account.

9. Changes to This Policy

We will notify you of significant changes via:

• In-app notice for 30 days
• Email to registered brewery owner
• Updated "Last Updated" date on this page

10. Governing Law

This policy is governed by the laws of India. Disputes subject to exclusive jurisdiction of courts of Bangalore, Karnataka, India. Compliant with: IT Act 2000, IT Rules 2011, Digital Personal Data Protection Act 2023.

11. Contact Us

• Email: privacy@brewtally.in
• Subject: "Privacy Request — [Your Brewery Name]"
• Response time: Within 72 hours
• Address: Brewtally, Hubli, Karnataka 580031