What this site collects, why, and what you can do about it.

The short version

• The only personal information this site collects is what you type into the beta application or the support form, plus, for an application, where your visit came from — and nothing is sent until you press send.
• We use it to review your application, contact you about the beta and plan your onboarding. We never sell it.
• Marketing email is a separate, unticked choice. Leaving it unticked changes nothing about your application.
• This site sets no cookies and has no advertising pixels and no session replay. Plausible, a cookieless analytics service, counts visits and how far visitors get through our forms without keeping anything that identifies you or anything you type, and Cloudflare Turnstile checks that a submission was not made by a robot.
• You can see, correct or delete what we hold at any time, through our privacy officer.

What the beta application asks, and why

• Your name, role, work email and, if you choose, a phone number — so the right person can reply to you in the way you prefer.
• Your company or legal name, and province or territory — so we know which producer we are talking about and which board, markups and deposits apply.
• What you run, your annual volume as a band, and how many sites — so we can tell whether BrewCraft fits and plan onboarding. Volume is a band, never an exact figure.
• Where you sell, what you use today, what you want fixed first, when you would start, how many people would use it, and how you heard about us — all optional, all to make the first conversation useful.
• Anything else you choose to tell us, in a free-text box. Please leave recipes and customer names out of it.

What it deliberately does not ask

Revenue. Recipes. Customer names. Board listing numbers. Anything resembling a credit check.

What the support form asks, and why

• Your name, email and company — so we know who is asking and where to reply.
• Whether you need technical support, or accounting and excise support — so the right person answers.
• Your message — which we use only to answer it. Please leave recipes and customer names out of it.

The support form does not ask for marketing consent and does not carry the campaign tags or the site that sent you. Asking for help never adds you to a mailing list. A support message is delivered to us by email and is not stored anywhere else on our systems: once it is in our support inbox, ordinary email retention is all that applies to it.

Where your visit came from

When you arrive, the page notes the campaign tags in the link you followed (the five utm_ parameters), the site that sent you — reduced to its address without any search terms — and the page you landed on. That note is kept in your browser's session storage under bc-attribution, disappears when you close the tab, and is included in your application only if you send one. If you never apply, it never reaches us.

Marketing email is a separate, unticked choice

The last step of the application offers product news, beta updates and invitations by email. It is never pre-ticked, sending the application does not imply it, and declining it has no effect on how we treat your application. If you tick it, we record the exact wording you agreed to and when, so we can show your consent if asked. Every message carries a one-click unsubscribe, and you can also withdraw by asking our privacy officer.

Where the information goes

Applications and support requests are received on our behalf by DigitalOcean (Toronto, Canada) and SendGrid (United States). Our staff and contractors who read applications and support requests may be located elsewhere in Canada, which is to say outside Québec, and we tell you so before you type anything.

Two further services touch this site without ever receiving what you typed into either form: Plausible, a cookieless analytics service, counts visits and tells us which pages are read, how quickly they load, which buttons and links are used, and how far visitors get through the two forms — which step was reached and the name of the last question touched, never the answer — keeping nothing that identifies a visitor; and Cloudflare Turnstile checks that a form was sent by a person rather than a robot. Neither is given your name, your email address or anything you wrote.

We do not sell personal information, trade it, or send it to an advertising network. There is no advertising network involved in this site at all.

Cookies, storage and profiling

This site itself sets no cookies. Your browser keeps two small preferences in local storage — whether you dismissed the beta notice and whether you chose a light or dark theme — and the visit note above in session storage. None of them identifies you, and the first two never leave your device. The Cloudflare Turnstile widget on the beta and support forms runs in its own frame from Cloudflare's domain, not ours, and only while you are on one of those two pages.

There is no session replay, no heatmap and no tag manager on any page. Plausible counts visits without cookies and without collecting anything that identifies you. Nothing here profiles you.

How long we keep it

We keep a beta application until you ask us to delete it. There is no fixed deletion date. To have yours deleted, email support@brewcraft.io and we will remove it. If you become a customer, your contact record moves to the retention terms in your agreement. Consent to marketing email lasts until you withdraw it. A support message is kept only in our support inbox, as email, and nowhere else on our systems: see what the support form asks, and why.

How we protect it

Everything you send travels over an encrypted connection, and only the people who review applications and answer support requests can read it.

Your rights

• See what we hold about you.
• Correct it if it is wrong.
• Have it deleted. An application is not a compliance record, and there is nothing in it we need to keep against your wishes.
• Withdraw consent to marketing email, without affecting anything else.
• Get it in a portable, structured, machine-readable format.

Your privacy officer

Our privacy officer is the person in charge of protecting personal information at BrewCraft, and every request above goes to them at hello@brewcraft.io. This is the one address we publish: a request about your own information should never have to go through a sales form. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d'accès à l'information.

Changes to this page

This page changes only through a reviewed and dated change, and the “last reviewed” date at the top is real. This notice is version 2026-10-03+9375071b7e9b: the date, and a fingerprint of who receives what you send. That version is recorded with every application and support request, so a consent can always be matched to the exact notice that was shown.

Nothing on this page is legal advice, and it does not describe your obligations as a producer. It describes ours as the operator of this website.