Brewhood LLC Privacy Notice

This Privacy Notice (this “Notice”) describes how Brewhood LLC, together with its subsidiaries, affiliates, successors and assigns (collectively, “Brewhood,” “we,” “us” or “our”), collects, uses, discloses, retains and otherwise Processes Personal Information in connection with the Brewhood mobile application, website, vendor tools, account features, communications and related services that link to or reference this Notice (collectively, the “Service”).

For purposes of this Notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, and “Process” (and its variants) means any operation performed on Personal Information, whether or not by automated means. Capitalized terms used but not defined in this Notice have the meanings given to them in the Brewhood Terms of Service (the “Terms”).

This Notice applies to individuals who use the Service, create an account, submit content, communicate with us, claim or manage a vendor listing, or otherwise interact with Brewhood (each, a “User”). It does not apply to third-party websites, applications, services, payment processors, map providers, social media platforms, breweries, food vendors or other businesses that Brewhood does not own or control. Your use of the Service is also subject to the Terms.

1. About Brewhood

Brewhood operates a discovery platform that helps users find breweries, food vendors, events, menus, business locations, hours and related local information.

Brewhood is not an alcohol retailer. We do not sell, ship, deliver, broker or process purchases of alcohol. Many businesses listed on the Service serve alcohol; many also offer food-only service, non-alcoholic options, family-friendly events and other local experiences. Businesses listed on the Service are independently responsible for compliance with alcohol-beverage control, age-verification, food-service, event, licensing and other laws applicable to them.

2. Age Requirement; Children’s Privacy

The Service is intended for users who are at least 18 years of age. You must be at least 18 to create a Brewhood account or use account-based features. By creating an account, you represent and warrant that you are at least 18 years of age.

Children under 13.Consistent with COPPA (15 U.S.C. §§ 6501–6506) and its implementing regulations (16 C.F.R. Part 312), the Service is not directed to children under the age of 13, and we do not knowingly collect, use or disclose Personal Information from any individual whom we know to be under the age of 13. If we learn that we have collected Personal Information from a child under 13 without verifiable parental consent, we will delete that information promptly. A parent or legal guardian who believes that we may have collected Personal Information from a child under 13 may contact us using the information in Section 21.

Minors 13 to 17. While the Service is intended for users 18 and older, if we become aware that we have collected Personal Information from an individual between the ages of 13 and 17, we will take reasonable steps to delete it, unless retention is required or permitted by applicable law. Consistent with California Business and Professions Code § 22581, a registered user under the age of 18 may request removal of content that the user has posted on the Service by contacting us at privacy@brewhood.app.

3. Personal Information We Collect

We collect Personal Information directly from you, automatically when you use the Service, from vendor representatives and from service providers that help us operate the Service.

4. How We Use Personal Information

We Process Personal Information for the following business and commercial purposes:

• Provide and maintain the Service. To create, authenticate and maintain accounts; provide profile, discovery, search, follow, review, rating, photo, badge, check-in and community features; display breweries, food vendors, menus, events and related content; personalize discovery; provide vendor listing, claim and management tools; and handle support requests.
• Verify eligibility and vendor claims. To confirm the 18-and-older age requirement, verify vendor-account claims and confirm authority to manage a vendor listing.
• Communicate with you.To send account, security and administrative notices; email verification and password-reset messages; responses to support, privacy or legal requests; notices about changes to the Terms or this Notice; and optional product or marketing communications, where permitted by applicable law and consistent with the CAN-SPAM Act of 2003 (15 U.S.C. §§ 7701–7713) and the Telephone Consumer Protection Act (47 U.S.C. § 227) (“TCPA”).
• Protect the Service. To detect, prevent and investigate fraud, spam, abuse, unauthorized access and other harmful activity; enforce the Terms; and protect the rights, property, safety and security of Brewhood, our users, vendors and the public.
• Improve and develop the Service. To analyze usage and performance; diagnose bugs and technical issues; and test, improve and develop features.
• Generate aggregated or de-identified information. For analytics, research and product development. Aggregated, anonymized and de-identified information is not Personal Information subject to this Notice, and we will not attempt to re-identify it.
• Comply with legal obligations. To comply with applicable laws, respond to lawful requests, and establish, exercise or defend legal claims.

5. How We Disclose Personal Information

We disclose Personal Information only as described in this Section 5. We do not sell Personal Information, share Personal Information for cross-context behavioral advertising, or Process Personal Information for targeted advertising.

6. Cookies and Similar Technologies

We use cookies, software development kits (SDKs), tokens and similar technologies (collectively, “Cookies”) for the limited operational purposes described below.

We do not use third-party advertising cookies, cross-site tracking pixels, behavioral advertising identifiers, advertising SDKs, fingerprinting techniques or data-broker integrations. You may disable Cookies through your browser settings, but the Service will not function correctly if authentication or security Cookies are disabled.

7. Sale, Sharing and Targeted Advertising

To be unambiguous: Brewhood does not sell Personal Information, share Personal Information for cross-context behavioral advertising, or Process Personal Information for targeted advertising, in each case as those terms are defined under the CCPA and analogous U.S. state privacy laws (including the Colorado Privacy Act, Connecticut Data Privacy Act, Virginia Consumer Data Protection Act, Utah Consumer Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, Montana Consumer Data Privacy Act, Delaware Personal Data Privacy Act, Iowa Consumer Data Protection Act, New Hampshire Privacy Act, New Jersey Data Privacy Act, Tennessee Information Protection Act, Minnesota Consumer Data Privacy Act, Maryland Online Data Privacy Act, Nebraska Data Privacy Act, Indiana Consumer Data Protection Act, Kentucky Consumer Data Protection Act and Rhode Island Data Transparency and Privacy Protection Act, as in effect from time to time (collectively, the “State Privacy Laws”)).

Brewhood is not a data broker as defined under the California Delete Act (Cal. Civ. Code § 1798.99.80 et seq.), the Vermont Data Broker Law (9 V.S.A. § 2446) or the Texas data broker statute (Tex. Bus. & Com. Code Chapter 509), and is not registered as a data broker in any jurisdiction. If our practices materially change, we will update this Notice and provide any notices, choices and consent mechanisms required by applicable law before commencing any such Processing.

8. Sensitive Personal Information

Certain Personal Information is treated as “sensitive” under the CCPA and analogous State Privacy Laws (“Sensitive Personal Information”). Depending on how you use the Service, Sensitive Personal Information we Process may include:

• account log-in credentials;
• precise device location, but only when you enable a location-based feature; and
• business-license information submitted for vendor verification (to the extent it identifies an individual).

We Process Sensitive Personal Information solely for the purposes permitted under California Code of Regulations title 11, § 7027(m) and analogous provisions of other State Privacy Laws, namely: (i) to perform the services reasonably expected by an average consumer; (ii) to prevent, detect and investigate security incidents and fraud; (iii) to resist malicious, deceptive, fraudulent or illegal actions; (iv) to ensure the physical safety of natural persons; (v) for short-term, transient use; (vi) to perform services on behalf of the business; and (vii) to verify or maintain the quality or safety of the Service; (viii) to collect or process sensitive personal information where the collection or processing is not for the purpose of inferring characteristics about a consumer. We do not Process Sensitive Personal Information for the purpose of inferring characteristics about you. Because we Process Sensitive Personal Information only for these enumerated permitted purposes, the right to limit the use and disclosure of Sensitive Personal Information does not change our Processing practices; you may nevertheless submit a limitation request as described in Section 12.1.

9. Automated Decision-Making and Profiling

Brewhood does not use automated decision-making technology (ADMT) or profiling to make decisions that produce legal or similarly significant effects concerning you, within the meaning of California Code of Regulations title 11, §§ 7150–7157 and analogous provisions of other State Privacy Laws (including the Colorado Privacy Act, Connecticut Data Privacy Act and Virginia Consumer Data Protection Act). We may use basic algorithmic logic to personalize discovery (for example, surfacing nearby vendors or recommending vendors similar to those you have followed), but such logic does not make Significant Decisions about you. If we begin using ADMT in a manner requiring additional disclosures or opt-out rights under applicable law, we will update this Notice and implement the controls required by law before doing so.

10. Opt-Out Preference Signals and Do Not Track

Some browsers, devices and extensions offer opt-out preference signals such as Global Privacy Control (GPC) or “Do Not Track” signals. Because Brewhood does not sell Personal Information, share Personal Information for cross-context behavioral advertising, or Process Personal Information for targeted advertising, these signals do not change our Processing practices.

Pursuant to the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §§ 22575–22579) (“CalOPPA”), we disclose that we do not respond differently to Do Not Track signals because we do not engage in the Processing those signals are designed to address. Third parties may not collect personally identifiable information about an individual user’s online activities over time and across different websites when the user uses the Service, because we do not permit any such Processing.

11. Your Privacy Choices

12. U.S. State Privacy Rights

Depending on your state of residence, and subject to applicable exceptions, you may have some or all of the following rights with respect to your Personal Information:

• Right to Know / Access. To confirm whether we Process Personal Information about you and, if so, to access that information.
• Right to Portability. To receive a copy of certain Personal Information in a portable and, to the extent technically feasible, readily usable format.
• Right to Correct. To correct inaccurate Personal Information, taking into account the nature of the information and the purposes of Processing.
• Right to Delete. To request deletion of Personal Information, subject to the exceptions set forth in applicable law.
• Right to Opt Out of Sale, Sharing and Targeted Advertising. Brewhood does not engage in any of these activities, so there is nothing to opt out of.
• Right to Opt Out of Profiling. Brewhood does not engage in profiling that produces legal or similarly significant effects.
• Right to Limit Use of Sensitive Personal Information. As described in Section 8, we Process Sensitive Personal Information only for permitted purposes, but you may still submit a limitation request.
• Right to Appeal. Where applicable law provides for an appeal of a decision regarding a privacy-rights request, to appeal that decision.
• Right to Non-Discrimination. Not to receive discriminatory treatment for exercising any of your privacy rights.

13. California Privacy Notice

This Section 13 applies to California residents and supplements (and, where inconsistent, controls over) the balance of this Notice with respect to California residents. It is the “notice at collection” required by California Civil Code § 1798.100(a) and California Code of Regulations title 11, § 7012.

14. Additional State-Specific Disclosures

15. Data Retention

We retain Personal Information only for so long as is reasonably necessary to fulfill the purposes described in this Notice, including providing the Service, maintaining account functionality, complying with legal obligations, resolving disputes, enforcing agreements, preventing fraud, maintaining security and protecting legal rights. The specific retention periods (or, where periods are not feasible, the criteria used to determine them) are set forth in the notice-at-collection table in Section 13.1 and supplemented as follows:

• server, security and diagnostic logs are typically retained for up to ninety (90) days, unless retained longer for security, fraud-prevention, legal or operational reasons;
• disaster-recovery and operational backups are retained in accordance with our backup schedules and overwritten or deleted in the ordinary course of business (typically within 90 days);
• support and privacy-request records are retained for as long as necessary to respond, maintain records, resolve disputes, comply with applicable law and protect legal rights;
• vendor verification records are retained for the duration of the vendor account plus three (3) years thereafter for fraud-prevention and recordkeeping purposes; and
• tax, accounting and corporate records associated with vendor or commercial relationships are retained for the period required by applicable federal and state law.

When Personal Information is no longer needed for the purposes described in this Notice, we delete, destroy or de-identify it in accordance with our records-retention policies.

16. Information Security

We maintain reasonable administrative, technical, organizational and physical safeguards designed to protect Personal Information against unauthorized access, loss, misuse, disclosure, alteration or destruction. Those safeguards include:

• encryption of data in transit using Transport Layer Security (TLS) version 1.2 or higher;
• encryption of sensitive data at rest;
• cryptographic hashing of passwords using industry-standard algorithms;
• role-based access controls and least-privilege internal access practices;
• multi-factor authentication for administrative access;
• monitoring, logging and alerting for anomalous activity;
• contractual security obligations imposed on service providers; and
• written procedures for reviewing and responding to suspected security incidents.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident involving your Personal Information, we will provide notice as required by applicable law, including California Civil Code §§ 1798.29 and 1798.82 and analogous state and federal breach-notification statutes.

17. Third-Party Services and Links

The Service may contain links to, or integrations with, third-party websites, applications, services, vendor pages, event pages, reservation tools, menu tools, payment tools, map services, application stores and social networks. Brewhood does not control, and is not responsible for, the privacy, security or data-Processing practices of such third parties. Your interactions with third parties are governed by their own privacy notices and policies, which we encourage you to review.

18. International Users

Brewhood is operated from the United States and is intended for users located in the United States. If you access the Service from outside the United States, you understand that your Personal Information may be transferred to, stored in and Processed in the United States and other jurisdictions where privacy laws may differ from those in your jurisdiction. By using the Service from outside the United States, you consent to such transfer, storage and Processing. Where the laws of your jurisdiction nevertheless apply (including, where applicable, the EU General Data Protection Regulation, the UK GDPR, the Canadian Personal Information Protection and Electronic Documents Act or the Brazilian Lei Geral de Proteção de Dados), we will respond to applicable requests and obligations as and to the extent required by law.

19. Accessibility

We strive to make this Notice and the Service accessible to all users, consistent with the Americans with Disabilities Act and the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA where reasonably practicable. If you have difficulty accessing any portion of this Notice or the Service due to a disability, please contact us using the information in Section 21, and we will work with you to provide the information in an accessible format.

20. Changes to This Notice

We may update this Notice from time to time. When we do, we will update the “Last Updated” date set forth above. If we make material changes, we will provide notice through the Service, by email, by in-app notification or by other reasonable means at least thirty (30) days before the changes take effect, unless a shorter period is required by applicable law. The updated Notice will apply as of the effective date stated therein, unless otherwise required by law. Your continued use of the Service after the effective date constitutes acceptance of the updated Notice to the extent permitted by applicable law.

21. Contact Us

For privacy questions, requests or concerns, please contact us using any of the following:

Email: privacy@brewhood.app

Mail: Brewhood LLC, Attn: Privacy, 2108 N. St., Ste. N, Sacramento, CA 95816

Legal Entity: Brewhood LLC, a California limited liability company.

© 2026 Brewhood LLC. All rights reserved.