Privacy Policy
Last updated: 7/28/2026
This notice explains how Cocktail BarFlow (“the App”), provided by Vincenzo Caggiano, processes users' personal data under Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data controller is Vincenzo Caggiano, reachable at info@cocktailbarflow.com for any request concerning personal data or the exercise of GDPR rights.
2. Data we collect
Account data: name, e-mail address, password (stored only in hashed form) and optional profile picture. Data entered by the user: managed venues, inventory and products, recipes and costs, checklists, shopping lists, consumption statistics, job posts and applications, recipes published to the public recipe book. Technical data: IP address, device and browser type, access and error logs required for security and maintenance.
3. Purposes and legal basis
We process data to: provide the App features and manage your account (performance of the contract); manage subscriptions and payments (contract and legal obligations); ensure security, abuse prevention and service continuity (legitimate interest); answer your support requests (legitimate interest); comply with tax and legal obligations.
4. Public content
Job posts published on BarFlow Jobs and recipes you choose to publish to the Public Recipe Book are visible to anyone, even without an account, and may be indexed by search engines. Published recipes show your user name as the author. Your sale prices and costs are never made public. You can withdraw a recipe or close a job post at any time from the relevant sections of the App.
5. Third-party services
We rely on providers that process data on our behalf: Stripe for subscriptions and payments (full card details never reach or stay on our servers); AI providers (Google Gemini through the Emergent platform) for industry news summaries; Open Food Facts for barcode product lookups; hosting and database providers for data storage. Each provider processes data in compliance with applicable law.
6. Cookies and local storage
The App only uses technical cookies and local storage: session token to keep you signed in, language preference, interface settings and Progressive Web App offline cache. We do not use profiling or advertising cookies, nor third-party analytics tools.
7. Data retention
We keep account data and content for the duration of the relationship and afterwards for the time needed to comply with legal obligations (in particular tax and accounting ones). When the account is deleted, associated data is erased or anonymised, except where retention is required by law.
8. Security
We apply appropriate technical and organisational measures: HTTPS encrypted communications, passwords stored only as hashes, role-based access control inside each venue, data separation per workspace and regular database backups.
9. Your rights
You may exercise at any time the rights of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw consent where given. Requests can be sent to info@cocktailbarflow.com; you also have the right to lodge a complaint with your national data protection authority.
10. Minors
The service is aimed at professionals and is not intended for children under 16. We do not knowingly collect minors' data; should we become aware of such processing, we will delete the data promptly.
11. Changes to this notice
This notice may be updated for regulatory reasons or when new features are introduced. The current version is always available on this page with its last update date; significant changes will be highlighted inside the App.
General information document, it does not constitute legal advice.