Privacy Policy

Last updated June 11, 2026

This policy explains what Margo™ collects, how it is used, and the choices you have. It reflects how the product actually works today.

What we collect

Account data: your email and, if you provide it, your display name.

Content you create: tasting notes, ratings, wine and cellar data, photos, and voice recordings (plus their transcripts).

Contacts you add: names and details you enter for tasting companions.

Usage analytics: anonymized product events to understand how features are used.

Photos and voice notes

Photos you upload are stripped of embedded metadata (including any GPS location) on our servers before storage, and are kept in private storage. They are served to you through short-lived signed links and are not publicly accessible.

Voice recordings are stored privately and used to produce transcripts. You can delete either at any time from the tasting they belong to.

How we use your data

To provide the core product: storing your cellar, tastings, and notes.

To power AI features (recommendations, the Margo concierge, label and tasting-note understanding) by sending the relevant content to our AI processors solely to generate your results.

To send transactional email you request (such as trip share emails).

Service providers

We use third parties strictly to operate the product: Supabase (database, auth, storage), Anthropic and Voyage AI (AI processing and embeddings), Resend (email), Mapbox (maps), and PostHog (analytics). They process data on our behalf under their own terms.

Your choices

You can edit or delete individual tastings, photos, and voice notes.

You can delete your entire account from Account settings. This is permanent: it removes your account, your tastings, your dinner parties (including their memory pages, share links, run-of-show, guest list, and any uploaded photos), your contacts, and all stored files. Anything we have already delivered to other recipients (such as invite or recap emails, or calendar entries previously downloaded as .ics files) persists outside our control.

You can toggle whether the concierge draws on your prior conversations.

Data retention

We keep your data while your account is active. When you delete your account, your records and stored files are removed. Backups and logs may persist for a limited period before rotating out.

How to reach us

We try to make it easy to reach a real human about your data.

For privacy and data requests — including access, correction, and deletion (GDPR Article 15 subject access requests and CCPA right-to-know / right-to-delete): support@margoknows.com. We acknowledge within 5 business days and respond within the applicable statutory window.

For concerns about specific Margo output — including producers, restaurants, or retailers requesting removal of evaluative content: support@margoknows.com. See the section below.

For security vulnerability disclosures: support@margoknows.com.

For general support: support@margoknows.com.

Reporting and enforcement

Producers, restaurants, retailers, and critics with concerns about specific Margo output may write to support@margoknows.com. Please include the producer or establishment name, the Margo output that prompts the concern (a screenshot or quoted text helps), and the action you are requesting.

We acknowledge within 5 business days and complete an initial review within 10. Resolutions range from no action — when Margo's output reflects taste-based opinion within our governance scope — to runtime suppression, where Margo routes around the named producer in future user conversations. Resolved or declined complaints stay in our internal audit log.