🔒 Privacy Policy

1. Data We Collect

We collect the following categories of data:

• Account data: email address, account type (brewery / winery / distillery / innkeeper), registration and approval dates. Passwords are handled by Firebase Authentication; we never see or store them.
• Business data: company name, address, city, country, phone number, contact email, social links, logo and banner, product listings, price lists and other PDFs, events and promotions
• Orders: what was ordered, by and from whom, status changes and notes
• Chat messages between businesses
• Keg and asset scans: for each scan, the time, the GPS position of the scanning phone, the driver's name (for driver scans) and the phone's Android ID
• Location: also used on your phone to show distances to other businesses and to suggest your address during registration
• Push notification tokens: so we can notify you about orders and messages
• Crash reports (Firebase Crashlytics): what went wrong, the device model, Android version and app version
• Usage events (Google Analytics for Firebase): which features are used, with Firebase installation and app-instance IDs

You can turn crash reports and usage events off on the Details screen.

2. How We Use Your Data

We process your data for the following purposes and on the following legal bases:

• To provide and operate the App, including your public business profile (contract performance)
• To manage orders and business communications between producers and hospitality businesses (contract performance)
• To track kegs and other assets, and show where and by whom they were scanned (contract performance and legitimate interest — accountability for returnable assets)
• To verify drivers via time-limited QR sessions (legitimate interest — security)
• To send push notifications about orders and messages (contract performance)
• To find and fix crashes and see which features are used (legitimate interest — service improvement; you can object with the switch on the Details screen)
• To show business statistics in Tržište: your own followers, events and orders, anonymous city trends, and for producers where their drinks are poured and which venues pour their styles (legitimate interest — helping businesses plan; built from public tap lists, your own orders and anonymous counts)
• To comply with legal obligations (legal obligation)

3. Who Can See Your Data, and Our Processors

Public: your company profile (name, address, contact details, logo and banner), product listings, events and promotions are public. Anyone can see them in the DrinkLink app, in the DrinkQuest consumer app and on shared venue links. That is how customers and partners find you.

Your business partners: orders are visible to the two businesses in the order. Chat messages are visible only to the people in the conversation. An asset's scan history is visible only to the producer that owns it; drivers scanning its QR code see the asset's current status.

Deliveries: when a driver scans a keg as dispatched within 200 m of a venue, DrinkQuest shows publicly that the producer delivered to that venue and on which day (never the time), and which drink if the producer's latest approved order to that venue shows it. It never shows the driver, the phone or the scan's GPS.

Email and VAT number: they are never public. Other signed-in business users of DrinkLink can see them unless you turn off "Show my email and VAT number to other businesses" in your Profile.

Statistics: producers see in their Tržište which venues pour their drinks or their styles; this comes from tap lists that are already public. City statistics are public and name no venue; the number of venues a producer supplies appears only when it is 3 or more. A venue's followers and a business's own orders are shown only to that business.

We use the following processors:

We do not sell your personal data, and the DrinkLink app shows no third-party ads.

4. International Data Transfers

Your data is stored and processed on Google servers, which may be located outside Serbia and the EU/EEA, including in the United States. These transfers are covered by Google's data processing terms and the EU Standard Contractual Clauses.

5. Data Retention

• Account and business data: kept while your account exists. Deleting your account in the App (Details → Delete account) or on our delete-account page removes your profile, products, events, promotions, uploaded files and approval record immediately. If you ask us by email instead, we do it within 30 days.
• Chat messages: deleted automatically after 12 months. When you delete your account, your messages are replaced with "[message deleted]" in conversations that others are still part of.
• Orders: kept after your account is deleted, because each order is also the other business's record. Ask us if you need an order removed.
• Asset scans: kept as the asset's history for as long as the producer's account exists
• Delivery records shown in DrinkQuest: deleted 6 months after the delivery
• Driver QR sessions: expire automatically at the end of the period set when they were created
• Push notification tokens: removed when you log out
• Crash reports: kept by Firebase Crashlytics for 90 days
• Usage events: kept by Google Analytics for Firebase for the data-retention period set for our project (at most 14 months)

6. Your Rights

Under applicable data protection law, you have the following rights:

• Right of access and portability — Details → Export My Data, or ask us
• Right to rectification — edit your details in the App, or ask us
• Right to erasure — Details → Delete account, or our delete-account page
• Right to restriction — request that we limit how we use your data
• Right to object — to processing based on legitimate interest; the switch on the Details screen stops crash reports and usage statistics

To exercise any of these rights, contact us at drinklink.official@gmail.com. We will respond within 30 days.

7. Children

DrinkLink is a B2B platform for business users only. We do not knowingly collect data from persons under 18 years of age. If you believe a minor has registered, please contact us at drinklink.official@gmail.com and we will delete the account.

8. Security

We protect your data with Firebase security rules (each business can change only its own data, and chats are readable only by their participants), encryption in transit (HTTPS) and at rest, Firebase App Check, time-limited driver sessions and automatic logout after 30 minutes of inactivity.

However, no system is completely secure. Please notify us immediately at drinklink.official@gmail.com if you suspect any unauthorised access to your account. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of it.

9. Analytics and Crash Reports

The App uses Google Analytics for Firebase to count which features are used, and Firebase Crashlytics to report crashes. Both use Firebase installation and app-instance identifiers. You can turn both off at any time with the Usage statistics and crash reports switch on the Details screen.

10. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App. The date at the top of this page indicates when it was last updated.