Privacy Policy

Last updated: September 21, 2026

Bev Deck is a product of Hammond Labs LLC ("Hammond Labs," "we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you use the Bev Deck web application and related services (collectively, the "Service").

By using the Service you agree to the practices described in this policy.

Information We Collect

Account Information

When you create an account we collect your name, email address, and any profile information you provide. This information is used to authenticate you and administer your account.

Business Data

The Service stores business records you enter or import, including production data, inventory records, sales orders, invoices, customer and distributor contact information, compliance records, and financial data. This data belongs to you. We store it on your behalf to provide the Service and do not use it for any purpose other than operating and improving the Service.

Usage Data

We automatically collect certain technical information when you use the Service, including your IP address, browser type and version, pages visited, and timestamps. This data is used to maintain service reliability and diagnose technical issues.

We also measure traffic to our public marketing pages. That measurement is limited, is not connected to your account, and is described under Analytics on Our Public Website below.

Payment Information

Subscription billing is handled by Stripe. We do not store your credit card number or full payment details. Stripe's privacy policy governs how your payment information is handled: stripe.com/privacy.

Third-Party Integrations

Bev Deck connects to third-party services at your direction. When you connect an integration, we store the access credentials (OAuth tokens) necessary to operate it on your behalf. The following integrations are available:

QuickBooks (Intuit) — invoice sync and customer data. Governed by Intuit's Privacy Statement.
Square — point-of-sale transaction data for taproom reporting. Governed by Square's Privacy Policy.
Slack — workflow notifications and task delivery. Governed by Slack's Privacy Policy.

We only access third-party data to the extent necessary to deliver the features you have enabled. We do not sell or share your third-party integration data with other parties.

Analytics on Our Public Website

We use Cloudflare Web Analytics to understand how many people visit our public marketing pages and which pages they read. It runs only on those public pages — the home, product, pricing, get started, contact, privacy, and terms pages. It does not run anywhere inside the application, and it stops entirely once you are signed in.

It does not use cookies, and it does not store anything on your device. No cookie, no local storage, no identifier of any kind — not as a setting we chose, but because the tool has no such mechanism. Nothing follows you between visits or between your devices. If you come back next week, we have no way of knowing it was you.

What is recorded is the page address, the site or search that referred you, and coarse technical details of the request such as country, browser, and device type. The page address is sent without its query string or fragment, so anything after a ? in a link you followed is discarded before it is sent.

Cloudflare processes this on our behalf and does not use it to build advertising audiences or profiles. There is no advertising product involved and nothing to link this to. We do not sell or share it, and we do not combine it with your account or business data. Cloudflare’s privacy policy: cloudflare.com/privacypolicy.

If your browser sends a Global Privacy Control signal, we do not measure your visit at all. Blocking analytics scripts in your browser or with an extension also works, and nothing on the site depends on it.

How We Use Your Information

To provide, operate, and maintain the Service
To authenticate users and manage access controls
To process subscription billing through Stripe
To send transactional emails and service notifications
To respond to support requests
To detect and address security issues or abuse
To improve the Service based on aggregate usage patterns

We do not sell your personal data or business data to third parties. We do not use your data for advertising, and we do not use the website analytics described above to build advertising audiences or profiles.

Data Storage and Security

Data is stored in Google Firebase (Firestore), which is hosted in Google Cloud infrastructure in the United States. Firebase enforces encryption in transit (TLS) and encryption at rest. Access to your data within the Service is controlled by role-based permissions that you configure.

While we implement industry-standard security measures, no system is completely secure. We cannot guarantee the absolute security of data transmitted over the internet.

Data Retention

We retain your account and business data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days during which you may request an export. After that period, data is deleted from active systems. Backups may persist for an additional 30 days before being purged.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at the address below. Requests to delete account data will be processed within 30 days subject to any legal retention obligations.

Children's Privacy

The Service is intended for use by business operators and is not directed at anyone under 18 years of age. We do not knowingly collect personal information from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within the Service prior to the change taking effect. The updated policy will be posted at this URL with a revised date.

Contact

Questions about this Privacy Policy or requests regarding your data:
Hammond Labs LLC, doing business as Bev Deck
hello@bevdeck.com