Collector’s Vault Privacy Policy

Last updated: July 29, 2026

Collector’s Vault is currently operated by Mario Urquia (collectively, “Collector’s Vault,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and retain information when you use the Collector’s Vault website, web application, future mobile applications, and related beta services (the “Service”).

Collector’s Vault is currently an invitation-only beta focused on wine collection management. Features, providers, and data practices may evolve as the Service develops. When they do, we will update this Policy and provide additional notice when required by law.

1. Information We Collect

We may collect the following categories of information:

Account and identity information

This may include your name or display name, email address or Apple private relay address, Sign in with Apple identifier, account identifier, beta invitation or access status, and authentication or session information.

Collection and inventory information

This may include wines and other collection records you add or import; producers, vintages, regions, quantities, bottle formats, storage locations, categories, purchase information, estimated values, notes, tasting notes, corrections, and related metadata.

Label images and scan information

When you use label scanning, we process the image and any notes you submit to identify information shown on the label. Unless the Service expressly tells you otherwise, uploaded label-image bytes are discarded after analysis. We may retain the resulting extracted text, structured fields, confidence scores, candidate matches, scan status, and related technical metadata as part of your account.

Images may be normalized before analysis, including applying orientation and removing embedded image metadata. Do not upload images containing people, private documents, location details, or unrelated sensitive information.

AI interactions

We may collect prompts, questions, collection context supplied to an AI-enabled feature, generated responses, proposed actions, confirmations, corrections, and feedback. AI features may process only the information reasonably needed to provide the requested feature. Do not submit passwords, financial-account credentials, government identifiers, health information, or other unrelated sensitive personal information.

Shared and guest-feature information

If you create or participate in a dinner-party or other share-by-link feature, we may process the event name, selected bottles, share code, votes, display information, and related activity. Anyone who receives a valid share link or code may be able to view or interact with the information made available through that feature. Do not include confidential or sensitive information in shared event names or content.

Support communications

We collect the information you include when contacting us, such as your email address, message, screenshots, device or browser details, and any troubleshooting information you choose to provide.

Technical and usage information

We may automatically collect limited technical information needed to operate, secure, and troubleshoot the Service, such as IP address, browser or device type, operating system, timestamps, requested pages or endpoints, error and diagnostic information, security events, and rate-limiting information. The Service may use cookies, local storage, or similar technologies for authentication, preferences, drafts, security, and core functionality.

2. How We Use Information

We may use information to:

• provide, authenticate, personalize, and maintain the Service;
• store, organize, import, scan, value, display, export, and delete collection records;
• provide AI-assisted scanning, organization, recommendations, and conversational features;
• operate share-by-link and guest features you choose to use;
• respond to support requests and beta feedback;
• detect, investigate, and prevent fraud, abuse, security incidents, and unauthorized access;
• monitor reliability, diagnose errors, and improve product functionality;
• enforce applicable terms and protect users, Collector’s Vault, and others; and
• comply with legal obligations and lawful requests.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, our legitimate interests in operating and securing the Service, consent where requested, and compliance with legal obligations.

3. AI Processing and Automated Outputs

Collector’s Vault uses external AI service providers to support features such as label recognition, collection organization, recommendations, and conversational assistance. Information submitted to an AI feature may be transmitted to and processed by those providers under their business or commercial service terms.

We do not use your private collection content to train a public or general-purpose AI model unless we first provide appropriate notice and obtain any consent required by law. We may use aggregated or de-identified information to evaluate and improve the Service where permitted by law.

AI-generated information may be incomplete, outdated, or incorrect. Review all extracted fields, valuations, recommendations, serving suggestions, and proposed changes before relying on or confirming them.

4. How We Disclose Information

We may disclose information in the following circumstances:

Service providers

We may use vendors that provide hosting, databases, authentication, AI processing, security, rate limiting, communications, monitoring, customer support, and licensed collection or market-data services. They may process information only as needed to provide services to us, subject to their agreements and applicable law.

At your direction or through sharing features

We disclose information when you ask us to, connect a service, export data, create a share link, invite a guest, or otherwise choose to make information available to another person.

Legal, safety, and security purposes

We may disclose information if reasonably necessary to comply with law or legal process; respond to lawful government requests; investigate fraud, abuse, or security incidents; enforce applicable terms; or protect the rights, safety, and property of Collector’s Vault, our users, or others.

Business changes

Information may be disclosed or transferred in connection with a financing, merger, acquisition, reorganization, asset sale, bankruptcy, or similar transaction. Any recipient will be subject to this Policy or receive notice of materially different practices as required by law.

We do not currently sell personal information, rent personal information, or use personal information for cross-context behavioral advertising. If this changes, we will update this Policy and provide legally required choices before the change applies.

5. Cookies, Local Storage, and Tracking Choices

Collector’s Vault currently uses cookies, local storage, and similar technologies primarily for authentication, security, preferences, dismissed notices, drafts, and core Service functionality. We do not currently operate a third-party advertising network or use cross-site advertising trackers.

Because we do not currently sell or share personal information for cross-context behavioral advertising, browser “Do Not Track” or Global Privacy Control signals do not change the Service’s present behavior. If our practices change in a way that makes such signals legally applicable, we will honor them as required by law and update this Policy.

6. Data Retention

We retain account and collection information while your account is active and as reasonably necessary to provide, secure, and improve the Service; comply with law; resolve disputes; and enforce agreements.

Unless the Service expressly tells you otherwise, uploaded label-image bytes are discarded after analysis. Derived scan results and other account content may remain until you delete the associated content or account, or until they are no longer reasonably needed.

When you delete your account, we will delete or de-identify account information and user-owned content from active systems, subject to reasonable processing time and limited exceptions. Some information may remain temporarily in backups, security logs, fraud-prevention records, or records we must retain by law. Backup copies are isolated from ordinary use and are deleted or overwritten according to normal backup cycles.

We may retain aggregated or de-identified information that cannot reasonably be linked back to you.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These may include access controls, encryption in transit, account isolation, session controls, logging protections, and security monitoring. No service can guarantee absolute security, and you use the Service at your own risk.

Protect your account and device, do not share authentication credentials, and notify us if you believe your account or information has been compromised.

8. Your Choices and Privacy Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information, or to appeal a decision concerning a privacy request.

Collector’s Vault provides account-data export and account-deletion controls through the Service where available. You may also contact us using the information below. We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right.

Removing Collector’s Vault from your Apple ID settings or disabling Sign in with Apple does not necessarily delete your Collector’s Vault account or collection data. Use the account-deletion control in Collector’s Vault or contact us to request deletion.

9. Adults Only; Alcohol-Related Content

Collector’s Vault is intended only for adults who are at least 18 years old and of legal drinking age where they live, whichever age is higher. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 13. If we learn that a child has provided personal information, we will take reasonable steps to delete it.

Collector’s Vault does not sell, deliver, or facilitate the purchase of alcohol. Collection information, valuations, drinking windows, pairings, serving suggestions, and AI-generated recommendations are informational only and are not medical, legal, tax, investment, or professional appraisal advice. Follow applicable law and drink responsibly.

10. International Processing

Collector’s Vault and its service providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from those in your location. Where required, we use appropriate safeguards for international transfers.

11. Changes to This Policy

We may update this Policy as the beta and Service evolve. We will post the revised Policy and update the “Last updated” date. If a change materially affects how we use information already collected, we will provide additional notice or request consent when required by law.

12. Contact Us

For privacy questions or requests, email:

contact@mariourquia.com

Subject: Collector’s Vault Privacy

Collector’s Vault

United States