DOWNTOWN POUR COLLECTIVE

Downtown Pour Collective

Privacy Policy

Version 4.2Effective Date: [DATE]Last Updated: May 2026Table & Town LLC · Livermore, CA

1INTRODUCTION

Table & Town LLC, doing business as Downtown Pour Collective (“DPC,” “we,” “us,” or “our”), respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the DPC mobile application (the “App”), website at www.downtownpourcollective.com (the “Site”), and related services (collectively, the “Service”).

By using our Service, you consent to the data practices described herein.

2INFORMATION WE COLLECT

2.1 Information You Provide Directly

  • Full name, email address, phone number.
  • Date of birth (age verification and birthday perks).
  • Mailing address (Welcome Kit and membership card fulfillment).
  • Payment information (processed and stored by our third-party payment processor. DPC does not store full payment credentials).
  • Membership Circle selection and preferences.
  • Pause status and Pause-related preferences (start date, reason category, expected resume date if provided).
  • Support tickets and communications with DPC.
  • Receipt images uploaded for Boost Mission verification (containing purchase amounts, items, venue, and timestamps).
  • User-generated content submitted to DPC (Pour Stories, Coaster Passport content, social media posts tagged to DPC, testimonials, reviews) subject to the UGC license set forth in DPC's Terms of Service.

2.2 Information Collected Automatically

  • Device information (device type, operating system, unique identifiers).
  • Precise geolocation data (used only during active Pour redemption within the App, including the Handoff venue verification step. Not collected in the background).
  • App usage data (screens viewed, features used, redemption history, Pour status per Circle, Monthly Entitlement Period state, venue assignment history, Pause and resume events, Rewards Points balance and earning history).
  • Log data (IP address, browser type, access times, pages viewed).
  • Push notification interaction data.

2.3 Information from Third Parties

  • Payment processors (transaction confirmations, payment status, fraud signals).
  • Partner venues (POS transaction records used for settlement reconciliation, partner-reported dispute information regarding specific redemptions, and sponsor or mission verification inputs when applicable).
  • Sponsors and partner venues participating in Boost Missions (mission completion verification data, where applicable, processed under the B2B marketing services structure described in Section 4).
  • Analytics providers (aggregated usage patterns).

3HOW WE USE YOUR INFORMATION

3.1 Service Delivery

  • Process membership enrollment, billing, renewals, and Pause requests.
  • Issue, track, and manage Membership Pours and venue assignments per Circle.
  • Verify identity and location during Pour redemption (Handoff verification).
  • Administer Coaster Passport, milestones, birthday perks, Plus-One Pour, Boost Missions, DPC Rewards Points, and referral programs.
  • Deliver Welcome Kits and physical membership cards.
  • Process Founding Slot Deposits and manage conversion windows.
  • Verify Boost Mission completion using uploaded receipt images.
  • Process Pause initiation, cap tracking, resume actions, and cancellation-during-pause forfeit handling.

3.2 Communications

  • Transactional emails and notifications (venue assignments, Pour reset reminders, Pour expiry warnings (Day 25 and Day 28 of each Monthly Entitlement Period), blackout windows, billing, Pause confirmations and cap-approaching alerts, renewal reminders).
  • Marketing communications (event invitations, program updates, new venues).
  • Support request responses.

3.3 Program Integrity and Fraud Prevention

  • Geofencing verification at redemption.
  • Detection of account sharing, screenshot attempts, location spoofing, and misuse.
  • Rate limiting enforcement (1 redemption per Member per venue per 30 minutes cross-Circle, 1 per same-Circle per venue per calendar day).
  • Audit of Pour adjustments and DPC support-resolved redemption issues.

3.4 Analytics and Improvement

  • Understand usage patterns to improve features and experience.
  • Generate aggregated, de-identified analytics for internal reporting.
  • Provide aggregated performance reporting to partner venues and sponsors (no personally identifiable Member data is shared with venues or sponsors in standard reports).

3.5 Legal Compliance

  • Comply with applicable laws and legal processes.
  • Enforce our Terms of Service.

4HOW WE SHARE YOUR INFORMATION

We do not sell your personal information.

4.1 Partner Venues (Standard Operations)

During a standard Pour redemption, venue staff see the Member's first name and last initial on the live redemption screen, plus the venue name displayed for Handoff verification. No additional personal information (full last name, email, phone number, address, or payment details) is shared with venue staff during standard operations. Venues do not process backup verifications or exception-lane approvals. All redemption issue resolution is handled by DPC support. DPC may share aggregated, de-identified data with venues for performance reporting.

4.2 Partner Venues (Boost Mission Receipt Verification)

When a Member uploads a receipt for Boost Mission verification, the receipt image and associated mission data may be shared with the applicable Partner Venue solely for verification of qualifying transactions. Receipt verification data may not be retained, copied, or repurposed by the Partner Venue after verification is complete. Partner Venues participating in partner-funded Boost Missions are bound by the Partner Data Processing Addendum (Exhibit A to the Partner Venue Agreement). Boost Mission Campaign Management Fees are B2B marketing services payments and do not include any sale or transfer of Member personal information.

4.3 Sponsors

DPC provides sponsors with aggregated, de-identified reporting only (impression counts, verified action counts, completion rates). No personally identifiable Member data is shared with sponsors under any circumstances. Sponsorship operates as a Sponsored Product Marketing Co-Op program where sponsor funds flow through DPC's Campaign Management Fee structure and Sponsored Product Marketing Co-Op payments to participating venues. Sponsor payments are B2B marketing services payments and do not include any sale or transfer of Member personal information.

4.4 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

  • Payment processing (e.g., Stripe). Processes and stores payment credentials. Contractually restricted to payment-related use only.
  • Email and push notification delivery. Receives Member contact information for message delivery only.
  • Cloud hosting and data storage. Hosts application data under encryption-at-rest and access controls.
  • Analytics and performance monitoring. Receives anonymized or pseudonymized usage data.
  • Customer support tools. Receives support ticket data for issue resolution.

All service providers are contractually obligated to use information only as necessary to perform the services we request, maintain reasonable security, and are prohibited from using DPC Member data for their own unrelated marketing purposes.

4.5 User-Generated Content

User-generated content submitted to DPC (Pour Stories, Coaster Passport content, social media posts tagged to DPC, testimonials, reviews, and DPC event photography in which Member appears) is governed by the UGC license set forth in the DPC Terms of Service §20.3. Members grant DPC a perpetual, royalty-free, sublicensable license to use such content for DPC business purposes, with attribution at DPC's option. Full license terms, including takedown procedures and member representations, are set forth in the Terms of Service.

4.6 Legal Obligations

We may disclose information if required by law, in response to valid legal process, or to protect rights, safety, or investigate fraud.

4.7 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred. We will notify you prior to your information being subject to a different privacy policy.

5PAUSE-STATE DATA HANDLING

When you initiate a Membership Pause through the App:

  • We collect and process pause start date and (optionally) the reason you select from the pre-set categories (travel, illness, injury, family emergency).
  • No membership fees are charged during a Pause. No new Pours are issued. Any Pours issued for the then-current Monthly Entitlement Period that remain unused at the time the pause takes effect are forfeited in accordance with Member Terms of Service §4 and §13.3(a)(iii).
  • Geolocation data is not collected during a Pause (no redemption activity occurs).
  • Pause cap counter (cumulative pause days in the trailing twelve-month period for monthly members, or per annual term for annual members) is maintained for cap enforcement.
  • Pause history is retained as part of account history. Pause reason categories are not shared with venues, sponsors, or service providers beyond aggregated, de-identified reporting.
  • If you cancel during a Pause, cancellation takes effect immediately. Any unused pause days are forfeited and, for annual memberships, no refund or credit is issued for any remaining portion of the prepaid annual term, except where required by applicable law. No Pours are issued for any future period.

6GEOLOCATION DATA

The App collects precise geolocation data solely for verifying physical presence at a partner venue during Membership Pour redemption, within a 150-foot radius. Location data is not collected continuously or in the background. Geolocation data is considered sensitive personal information under applicable California law. Its use is strictly limited to service performance (redemption verification including Handoff venue confirmation) and fraud prevention. Geolocation verification logs are retained only in minimized, time-bound, event-based form.

Disabling location services on your device prevents in-app Pour redemption but does not affect other App features.

7RECEIPT DATA FROM BOOST MISSIONS

When Members upload receipt photographs for Boost Mission verification, those images may contain purchase details, venue information, transaction amounts, and timestamps. DPC collects this data solely for mission verification and reward processing. Receipt images may be shared with the applicable Partner Venue for verification under the Partner Data Processing Addendum. Receipt data may be manually reviewed by DPC support staff for verification purposes. DPC does not use receipt images for analytics, model training, or marketing. Receipt images are deleted within ninety (90) days after the mission verification window closes unless retention is required for an active dispute or audit.

Boost Mission Campaign Management Fee payments and Sponsored Product Marketing Co-Op payments are B2B marketing services payments. They do not constitute the sale or transfer of Member personal information to sponsors or to participating venues.

8DPC REWARDS POINTS DATA

DPC Rewards Points are non-monetary program benefits. We track Points balance, earning events (source activity, points awarded), and redemption events (catalog item, points used, fulfillment status). Points data is used solely for program administration. Points balance is not displayed alongside any dollar value in any Member-facing surface. Points expire on a schedule established by DPC and forfeit upon cancellation or termination of membership.

9DATA MINIMIZATION

  • Member-facing screens display first name and last initial only.
  • All Pour operations are server-authoritative and audit-logged with minimal PII.
  • Fraud detection uses system-level identifiers rather than exposing Member data to venue staff.
  • Venue staff have no access to Member personal information beyond what is displayed on the live redemption screen and the venue name for Handoff verification.
  • Schedule A reimbursement rates and per-Pour dollar values are partner-facing settlement data only and are not exposed in any Member-facing surface.

10DATA RETENTION

We retain personal information as follows:

  • Account and profile data: retained as long as account is active. Retained for twenty-four (24) months after account cancellation effective date, then deleted or anonymized. Pours expire monthly and forfeit on cancellation under the Pour architecture, so account data is not retained beyond the cancellation date for Pour-balance reasons. [PROPOSED, CONFIRM WITH COUNSEL]
  • Payment transaction records: retained for seven (7) years per tax and financial record-keeping requirements. [PROPOSED, CONFIRM WITH COUNSEL]
  • Support ticket records: retained for three (3) years after resolution. [PROPOSED, CONFIRM WITH COUNSEL]
  • Pour redemption log records: retained for three (3) years for audit and dispute resolution. [PROPOSED, CONFIRM WITH COUNSEL]
  • Monthly Entitlement Period close records (issued, redeemed, expired counts per Member per Circle per period): retained for three (3) years. [PROPOSED, CONFIRM WITH COUNSEL]
  • Pause history: retained for three (3) years for cap enforcement and audit. [PROPOSED, CONFIRM WITH COUNSEL]
  • Geolocation verification logs: retained for ninety (90) days after the redemption event. [PROPOSED, CONFIRM WITH COUNSEL]
  • Receipt images (Boost Missions): retained for ninety (90) days after mission verification closes. [PROPOSED, CONFIRM WITH COUNSEL]
  • DPC Rewards Points ledger and event history: retained for three (3) years after Member account closure for audit. [PROPOSED, CONFIRM WITH COUNSEL]
  • User-generated content: retained per the UGC license terms in the Terms of Service.
  • Fraud and audit investigation logs: retained for five (5) years or as required by law. [PROPOSED, CONFIRM WITH COUNSEL]
  • Aggregated, de-identified data: may be retained indefinitely for analytics and business planning.

11DATA SECURITY

We implement reasonable administrative, technical, and physical security measures including encryption in transit, secure access controls, and regular security reviews. No transmission method is 100% secure. We cannot guarantee absolute security.

12YOUR CALIFORNIA PRIVACY RIGHTS

12.1 Right to Know

You may request disclosure of the categories and specific pieces of personal information collected, sources, purposes, and third-party recipients.

12.2 Right to Delete

You may request deletion of personal information, subject to legal exceptions (e.g., information necessary to complete a transaction, detect fraud, or comply with legal obligations).

12.3 Right to Correct

You may request correction of inaccurate personal information.

12.4 Right to Opt Out of Sale or Sharing

DPC does not sell personal information or share it for cross-context behavioral advertising.

12.5 Right to Non-Discrimination

We will not discriminate against you for exercising privacy rights, though exercising certain rights may affect service functionality.

12.6 How to Exercise Your Rights

To submit a privacy rights request, you may:

  • Email: privacy@downtownpourcollective.com
  • Submit a request through the App (Settings > Privacy > Submit Request)
  • Mail: Table & Town LLC, 2601 Horseshoe Ct, Livermore, CA 94551

We will verify your identity before fulfilling requests using information already on file (email, phone, account details). You may designate an authorized agent to submit a request on your behalf with proper written authorization.

We will respond to verified requests within forty-five (45) calendar days. If additional time is needed, we will notify you of the extension and the reason. If a request is denied in whole or in part, we will explain the basis for the denial and inform you of your right to appeal by contacting us at the address above.

13CHILDREN'S PRIVACY

The Service is not directed to children. The DPC membership program is restricted to individuals who are at least twenty-one (21) years of age and legally permitted to purchase and consume alcoholic beverages in the State of California, as set forth in the Terms of Service. We do not knowingly collect personal information from anyone under the age of thirteen (13), and we do not knowingly collect personal information from anyone under the age of twenty-one (21). If we learn that we have collected personal information from a child under thirteen (13), or from any individual under twenty-one (21), we will delete that information promptly.

14THIRD-PARTY LINKS

The App and Site may link to third-party services. We are not responsible for their privacy practices.

15CHANGES TO THIS PRIVACY POLICY

Material changes will be communicated at least thirty (30) days before the effective date. Continued use constitutes acceptance. Where program changes occur in connection with discontinuation or wind-down of the DPC program, notice and timing follow the Member Terms of Service §19 (Program Discontinuation and Wind-Down).

16CONTACT INFORMATION

Operator: Table & Town LLC

DBA: Downtown Pour Collective

Address: 2601 Horseshoe Ct, Livermore, CA 94551

Website: www.downtownpourcollective.com

Privacy Inquiries: privacy@downtownpourcollective.com

Support: support@downtownpourcollective.com