Legal
Privacy Policy
What we collect, why we collect it, and what we never do with it.
Effective August 12, 2026 · Last updated August 16, 2026
This policy explains how Members Wine LLC ("members.wine", "we", "us") handles personal information on members.wine.
1. Who this covers
- Shops — the wine shops and businesses that sign up to operate a membership club on members.wine.
- Members — the customers who join a Shop's club through a members.wine storefront.
Our role differs for each. For Shop account data, we are the controller. For member data, the Shop is the controller and members.wine acts as a processor on the Shop's behalf, handling that data only to provide the service. Members with questions about how a Shop uses their data should contact that Shop directly.
2. What we collect
From Shops
- Account profile (name, email) via our authentication provider.
- Shop details — business name, storefront slug, branding, club configuration.
- Stripe connected account identifier for payouts.
- Billing contact information for your software subscription.
- Usage and diagnostic data (log data, IP address, browser and device type, pages visited).
From Members
- Name, email, and pickup details.
- Subscription status and order history with the Shop they joined through.
- Communications preferences.
- Usage and diagnostic data as above.
Categories, sources, and disclosures
For residents of states that require this breakdown, here is the same information organized by statutory category. We have collected each of these in the preceding twelve months.
| Category | What that means here | Where it comes from | Why we collect it | Who we disclose it to |
|---|---|---|---|---|
| Identifiers | Name, email, postal address, IP address, account and Stripe identifiers | You, or the Shop you joined | Operate the service, authenticate, bill, support | Stripe, Clerk, Resend, AWS, and the Shop |
| Customer records | Pickup details, billing contact | You | Fulfillment and billing | Stripe, AWS, and the Shop |
| Commercial information | Subscription status, tier, order and pickup history | Generated by your use of the service | Operate the club and its billing | Stripe, AWS, and the Shop |
| Internet or network activity | Log data, pages visited, browser and device type | Automatically, as you use the site | Security, fraud prevention, debugging, and understanding how our own pages are used | AWS, and Google for pages outside Shop storefronts |
| Geolocation (approximate) | Coarse location inferred from IP address | Automatically | Security and fraud prevention | AWS |
We do not collect sensitive personal information as defined by the CPRA, and we do not use personal information to build profiles or draw inferences about you.
What we do not collect
Payment card details are collected and processed by Stripe. Full card numbers never reach members.wine servers. We receive only limited identifiers, such as the last four digits and card brand, for display and support purposes.
3. How we use it
- Operate the storefront, member portal, and recurring billing.
- Send transactional email — welcome messages, payment receipts, fulfillment notices, account notices.
- Provide Shops with the data they need to run their club and fulfill orders.
- Bill Shops for their software subscription.
- Maintain security, prevent fraud and abuse, and debug problems.
- Improve the platform.
- Comply with legal obligations.
We do not use member data to market our own services to members.
We do not make decisions about you that produce legal or similarly significant effects without human involvement.
4. Sharing and sub-processors
We share member data with the Shop that member joined. That Shop is responsible for its own use of that data.
We use these service providers:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and payouts | United States |
| Clerk | Shop authentication | United States |
| Resend | Transactional email delivery | United States |
| Amazon Web Services | Application hosting, database, and file storage | United States (us-west-2) |
| Website analytics, on members.wine's own pages only | United States |
We maintain a current list of sub-processors and will give Shops advance notice before adding a new one that processes member data.
Where we act as a processor for a Shop, the full processor terms — our roles, security obligations, 72-hour breach notification, sub-processor change notice, and audit rights — are set out in Section 10 of our Terms of Service.
We may also disclose information when required by law, valid legal process, or to protect our rights, safety, or property.
If we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We will provide notice before your information becomes subject to a different policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months, and we do not knowingly sell or share the personal information of anyone under 16.
5. Retention
- Active accounts — we retain Shop and member data while the Shop's account is active.
- After termination — member-facing data is available for export for 30 days, after which it is deleted or anonymized.
- Longer retention applies where required for tax, accounting, dispute resolution, or other legal obligations, typically 7 years for transaction records.
- Logs and diagnostic data are retained for 90 days.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to opt out of certain processing, and to be free from discrimination for exercising these rights.
California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale or sharing. As stated above, we do not sell or share personal information.
Oregon residents have rights under the Oregon Consumer Privacy Act, including the right to obtain a list of specific third parties to whom we have disclosed personal data.
Residents of other states with comprehensive privacy laws have comparable rights.
Making a request. Contact us using the details in Section 12. We will verify your identity before responding, and we will respond within 45 days, extendable by another 45 days where the law allows and we tell you why. You may use an authorized agent, and we may ask that agent for proof of authorization.
If we deny your request, we will tell you why, and you may appeal by replying to our decision. We will respond to an appeal within 45 days. If we deny the appeal, you may contact your state Attorney General.
Members: because the Shop is the controller of your data, we may route your request to that Shop or fulfill it at their direction.
7. Cookies and tracking
We use cookies and similar technologies for:
- Essential — authentication, session management, and security. These cannot be disabled.
- Functional — remembering preferences.
- Analytics — Google Analytics, which sets cookies to count visits and show us which pages people use.
We do not load third-party trackers on Shop storefronts. Analytics runs only on members.wine's own pages — the marketing site, sign-up, the Shop dashboard, and the member portal. A member browsing a Shop's storefront or joining a club is not measured, by us or by Google.
We do not use advertising or cross-site tracking cookies, we do not enable advertising or personalization features in Google Analytics, and we do not sell or share personal information. Most browsers let you block or delete cookies; blocking essential cookies will break sign-in. Google publishes a browser opt-out for Analytics that works on every site.
Because we do not track visitors across sites, we do not respond differently to Global Privacy Control or Do Not Track signals — there is no sale or sharing for them to opt out of.
8. Security
We use industry-standard practices to protect personal information, including encryption in transit, access controls, and use of vetted sub-processors. No system is perfectly secure. Report concerns using the details in Section 12.
9. Age restrictions
members.wine supports the sale of alcohol and is intended only for adults.
- Members must be of legal drinking age in their jurisdiction — 21 or older in the United States. Age verification is performed by the Shop at signup and at pickup, in accordance with applicable law.
- We do not knowingly collect personal information from anyone under the legal drinking age. If we learn we have, we will delete it.
- Children under 13. The platform is not directed to children, and we do not knowingly collect personal information from anyone under 13. Parents or guardians who believe we have may contact us using the details in Section 12 and we will delete it.
10. International users
members.wine is operated in the United States and information is processed here. If you access the platform from outside the United States, you understand that your information will be transferred to and processed in the U.S., which may have different data protection laws than your jurisdiction.
11. Changes
We will update the "Last updated" date above. For material changes, we will notify Shops by email at least 30 days before the change takes effect.
12. Contact
Members Wine LLC
3236 NW Vaughn Street, Unit B
Portland, OR 97210
Customer support: hello@members.wine
Phone: +1 (503) 893-9054