Privacy Policy
Last updated July 24, 2026.
Sommont is a private wine journal and recommendation service. This policy explains how we collect, use, disclose, retain, and protect personal information when you use the Sommont web app and Luca, Sommont's ChatGPT companion.
Who We Are
Sommont operates the service and acts as the controller of personal information collected through the web app, connected MCP clients, and support requests. For privacy requests, use the support contact linked below.
Information We Collect
We collect account identifiers, authentication status, subscription status, tasting entries, bottle details, tasting notes, uploaded bottle or label images, saved recommendations, generated palate summaries, connected-client identifiers, audit events, rate-limit records, and support communications. We may also receive technical information such as request metadata needed to operate, secure, and debug the service. Payment details are processed by Stripe; Sommont does not store full card numbers or bank account numbers.
How We Use Information
We use this information to authenticate users, enforce paid entitlements, save and retrieve private journal data, generate palate summaries and recommendations, process billing, prevent abuse, and provide support.
AI Processing
When you use Luca or connected ChatGPT/MCP features, your prompts, tasting notes, bottle details, label images, and relevant account context may be processed by AI platform providers to provide the requested feature. Do not submit sensitive information that is not needed for wine journaling or recommendations.
Sharing
We share information with service providers that operate the product, including hosting, database, storage, authentication, billing, support, security, and AI platform providers. We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer. We do not sell personal information or share it for cross-context behavioral advertising.
Data Retention
We keep account, tasting, image, recommendation, and connected-client data while your account is active or as needed to provide the service. We may retain billing, audit, security, backup, and legal records for longer where necessary for compliance, dispute resolution, fraud prevention, or business continuity.
Security
We use technical and organizational safeguards designed to protect private journal data, including authentication, server-side entitlement checks, scoped storage paths, short-lived image access URLs, rate limits, and secret-managed backend credentials. No internet service can guarantee perfect security.
Data Controls
Users can manage billing and connected clients from the account page and export tasting data from the reports page. For access, correction, deletion, portability, objection, opt-out, or other privacy requests, contact support. We may need to verify your identity before acting on a request.
State, Regional, and International Rights
Depending on where you live, privacy laws may give you rights to know what personal information we collect, access or delete it, correct inaccuracies, receive a portable copy, restrict or object to certain processing, or appeal a denied request. We will respond to applicable rights requests as required by law.
Children and Alcohol-Related Content
Sommont is not directed to children under 13 and should not be used by children. Because the service concerns wine and alcohol preferences, users in the United States must be at least 21 years old.
Changes
We may update this policy as the service changes. The updated date shows when the current version took effect.