Privacy policy

The intended controller is Denis Moskovets, trading as DosVermuts. The canonical service is ai.dosvermuts.com. Privacy requests can be sent to support@dosvermuts.com. The controller service address must still be verified before paid launch.

• Account identifiers such as email address, user ID, and authentication status.
• Guest identifiers, IP-derived security signals, request timestamps, and rate-limit records.
• Your shelf description, prompts, preferences, generated twists, saved recipes, ratings, and collections.
• Subscription product, entitlement, renewal, and transaction references; DosVermuts should not receive full card details.
• Device, browser, error, and performance data needed to secure and operate the service.
• Support messages and the information you choose to include in them.

We process account, saved-content, and entitlement data to provide the service and perform our contract with you. We process limited security, fraud-prevention, and reliability data for our legitimate interests in operating a safe service. We will request consent before using non-essential analytics, advertising, or marketing cookies where consent is required.

Cocktail prompts, shelf context, and relevant recipe context may be sent to contracted AI providers to generate a twist, tasting flight, or image. Do not submit confidential information or personal data about another person. AI output can be incomplete or wrong; check measurements, ingredients, allergies, and safe service before making or consuming a drink.

DosVermuts does not use AI output to make decisions that produce legal or similarly significant effects about you.

The current implementation uses Vercel for hosting, Turso for the application database, Clerk for account authentication, OpenAI for text and image generation. Cloudflare R2 is the configured object-storage path when its credentials are enabled. RevenueCat will manage subscription entitlements and Paddle will act as merchant of record for web checkout once those services are activated.

Each provider receives only the information needed for its role. Final data locations, processor agreements, and applicable international-transfer safeguards must be verified and published before paid launch.

The essential guest cookie expires after one year. Guest application records are deleted after 400 days of inactivity. Expired rate-limit records are deleted by the rate-limit service. Account content is kept while the account remains active or until you delete it, subject to information that must be retained for legal, security, dispute-resolution, tax, or accounting obligations.

Account deletion must remove or irreversibly anonymize content that is no longer legally required. Billing records may be retained for the period required by tax and accounting law.

Depending on your location, you may request access, correction, deletion, restriction, portability, or object to processing, and may withdraw consent without affecting earlier lawful processing. Requests will be free unless manifestly unfounded or excessive and will be answered within the legally required period.

We normally respond within one month and will notify you if the legally permitted extension is needed. People in Spain may complain directly to the Agencia Española de Protección de Datos at aepd.es.

DosVermuts is intended only for people who are at least 18 and of legal drinking age where they live. We do not intentionally collect data from children. Do not drink and drive. Alcohol affects people differently; AI-generated pacing or serving suggestions are not medical or safety advice.

See the Cookies Policy for browser storage. Material policy changes will be dated and, where required, communicated before they take effect. A new purpose that requires consent will not be applied retroactively without that consent.