Privacy Policy
Darooh LLC, a Delaware limited liability company headquartered in Virginia. This policy covers darooh.net and the portal. See the Terms of Service.
What we collect
- Name, email, and password. Optional: customer type, business name, phone, city, state.
- Contact name and email on a distillery or brand invitation.
- Filings (formula, labels, facility, packaging, listing) and buyer demand (quantity, frequency, state, notes).
- Email to hello@darooh.net. Confirmation codes are deleted after use.
How we use it
- Accounts, listings, shipments, filings, and replies.
- Email. Marketing messages have an unsubscribe link, and we keep opt-outs.
- Visit counts, without query strings or unsubscribe links.
Legal bases: the services you ask for, alcohol-regulation duties, site security, and measuring visits.
Sharing
- Companies that host the site, store accounts and files, send email, and measure visits.
- Agencies such as the TTB and the FDA, when you ask us to file.
- Licensed trade parties, only for an order or shipment.
- No sale of personal information, and no sharing for cross-context advertising.
Automated review
- Software we operate checks formula answers against federal rules. It is advisory.
- A person reviews before filing.
- We do not send documents to a separate artificial-intelligence vendor.
Cookies and local storage
- Session cookie for portal sign-in. Page scripts cannot read it.
- Sign-in token from the authentication service. Staff may store which account they are viewing.
darooh_age_verifiedin local storage for about 30 days after you confirm your age.- Analytics cookies that count visits. Blocking site data may sign you out or show the age question again.
Retention and security
Account and filing records, including opt-outs, stay while the account is open and as long as alcohol rules require. Passwords are not in the portal database. Email us about misuse.
Your rights
Email hello@darooh.net to access, correct, delete, copy, or appeal. We will not discriminate for asking.
California (CCPA/CPRA)
You may know, delete, correct, and opt out of sale or sharing, including through an authorized agent. We do not sell personal information, share it for cross-context behavioral advertising, or knowingly sell information of anyone under 16.
Virginia (VCDPA)
Access, correct, delete, copy, and opt out of targeted advertising and sale. We do not sell or use data for targeted advertising. Reply to a denial to appeal.
GDPR
Outside the United States, you may restrict or stop processing and complain to your authority.
Age
For adults 21 or older in the United States. We delete information we learn came from a minor.
International transfers
Stored and processed in the United States, including information sent from another country.
Changes
We post updates on this page and change the effective date.