Privacy Policy
Last updated 27 September 2026
CiderPilot is production record-keeping software for cideries, operated by W12 Systems LLC d/b/a CiderPilot, a Colorado limited liability company. This policy covers the web application and the marketing site, and will cover the iOS app when it is released.
We sell software to businesses. We do not sell, rent or share your data with advertisers, and there is no advertising or third-party tracking in the product.
What we collect
| Data | Why |
|---|---|
| Name, email address, and a password stored only as a bcrypt hash | To create your account and sign you in |
| Your cidery's production records — fruit purchases, press runs, batches, measurements, packaging, inventory, vendors | This is the product. It is your data; we hold it for you |
| A device name and a hashed refresh token, per signed-in device | To keep the iOS app signed in, and to let you revoke a lost device |
| An audit record of changes to production data | Because TTB filings have to be traceable to the records behind them |
| A Stripe customer identifier and subscription status | To know whether your subscription is active |
We never see your card details. Payment happens entirely on Stripe-hosted pages; card numbers do not pass through our systems.
What we do not collect
- No advertising identifiers, ad networks or third-party trackers
- No location data
- No contacts, photos or files beyond what you attach to a batch
- Nothing from anyone who is not a user of a subscribing cidery
Who else processes it
Only the services needed to run the product. Each holds data solely to provide its service to us.
- Neon — database hosting (United States)
- Vercel — application hosting (United States)
- Stripe — subscription payments
- Resend — transactional email such as password resets
Keeping cideries separate
Every record belongs to exactly one organization, and that separation is enforced by the database itself rather than only by application code. A query that arrives without an organization returns nothing, rather than everything.
How long we keep it
Your production records are kept while your account is open, because they are records you are required to keep. If you close your account we delete your organization's data within 30 days, except where we are required to retain billing records.
Your data is yours
- Export — ask and we will send your organization's records as CSV or JSON
- Correction — you can edit your records in the app at any time
- Deletion — ask and we will delete your organization's data
Email support@ciderpilot.com for any of these. We respond within 30 days.
Security
Passwords are stored as bcrypt hashes and never in plain text. Password reset and device tokens are stored only as SHA-256 hashes, so a copy of our database does not yield a usable credential. Connections are encrypted in transit, and the application reaches the database through an account that cannot modify the schema.
Children
CiderPilot is a business tool and is not directed at anyone under 16. We do not knowingly collect data from children.
Changes
If this policy changes we will update the date above, and email account administrators about anything material.
Contact
W12 Systems LLC d/b/a CiderPilot — support@ciderpilot.com