Privacy Notice

Last updated: August 31, 2026

This Notice explains how Villanueva Hospitality Group LLC ("VHG," "we," "us," or "our") handles personal information in connection with The Top Pour.

1. Information we collect

Depending on how you use The Top Pour, we may process:

• Account information: email address, account identifier, authentication/session information, and account status.
• Purchase and entitlement information: Lifetime Core status, AI+ status, AI-credit balance, Paddle customer or subscription identifiers, and transaction-event references used to provision access.
• Support information: information you send when you contact us for help.
• Technical information: information ordinarily generated when you access a hosted website, such as IP address, browser/device information, timestamps, and security or server logs handled by our hosting and infrastructure providers.
• Locally stored app data: My Bar inventory, creations, calendar entries, profile settings, favorites, event-planning information, and similar Core data may remain in your browser/device rather than being automatically synced to our servers.

2. How we use information

We use information to create and secure accounts; verify purchases and entitlements; provide and maintain the service; restore or manage access; support customers; detect abuse and security issues; comply with legal obligations; and improve reliability and product functionality.

3. Local storage and device data

The Top Pour intentionally stores much of your Core working data locally in your browser. Local storage allows the app to remember your bar, creations, events, preferences, and other device-specific information. This data can be lost if you clear browser storage, reset the app, or move to a different device without exporting it. Where available, the app's export/import tools can be used to create a manual backup.

4. Authentication and cloud entitlement data

We use Supabase for account authentication and limited backend data needed to operate access controls, including purchase entitlements, AI-credit balances, AI+ status, and related billing identifiers. Core personal working data is not automatically uploaded merely because you create an account.

5. Payments

Payments are processed by Paddle, which acts as our authorized reseller and Merchant of Record. Paddle receives the payment, billing, tax, and transaction information needed to complete your purchase and manages payment-card information under its own privacy practices. The Top Pour does not receive or store your full payment-card number.

6. Hosting and service providers

We use service providers to operate The Top Pour. Current infrastructure includes Netlify for website hosting and delivery, Supabase for authentication and backend services, and Paddle for checkout, payments, subscriptions, and transaction-related functions. These providers process information as needed to provide their services and maintain security.

7. Ask STSB and AI features

Some Ask STSB experiences may run using local or prebuilt responses and do not transmit your question to an external AI model. If we enable a live external AI service, text you submit to that feature will need to be transmitted to the applicable AI provider to generate a response. We will update this Notice or provide appropriate in-product disclosure before production use of a new external AI provider where required.

8. Cookies and similar technologies

The site and its service providers may use cookies, browser storage, or similar technologies that are necessary for authentication, security, checkout, preferences, and service operation. We do not currently operate an advertising program that sells your browsing activity to third-party advertisers, and we do not intentionally use The Top Pour to sell personal information.

9. When we disclose information

We may disclose information to the service providers described above; to professional advisers where reasonably necessary; to authorities or other parties when required by law or to protect rights, safety, and security; or in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable law.

10. Retention

We retain account and entitlement information for as long as reasonably necessary to provide access, maintain transaction records, resolve disputes, prevent fraud, and comply with legal obligations. Support communications may be retained as needed to resolve and document requests. Data stored only in your browser remains under your device's storage controls until you delete or reset it.

11. Your privacy choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or other control over personal information we hold about you. You may also have rights to appeal certain privacy decisions or lodge a complaint with a regulator. These rights are subject to applicable exceptions, including records we must keep for legal, security, fraud-prevention, or transaction purposes.

12. Security

We use reasonable administrative and technical safeguards designed to protect information, including authenticated access controls and limited backend permissions. No internet service or storage method can be guaranteed completely secure.

13. Children

The Top Pour is not directed to children under 18, and we do not knowingly collect personal information from children under 18 through account registration. If you believe a child has provided personal information, contact us so we can review the situation.

14. International processing

Our service providers may process information in countries other than the country where you live. Where required, those providers and VHG use legally recognized mechanisms or safeguards for cross-border processing.

15. Changes to this Notice

We may update this Privacy Notice as the service changes. The "Last updated" date will show the most recent revision. Material changes will be communicated when required by law.

16. Contact

Privacy questions and requests may be sent to support@villanuevahospitalitygroup.com. Please include enough information for us to understand and verify your request.