Scope
This policy explains how Washa LLC ("Washa", "we") handles information for Washa Beverage Label Precheck when you:
- contact us, including through our Microsoft Marketplace listing once it is published;
- take part in a guided pilot; or
- use the Washa Beverage Label Precheck web application (the "Application").
It describes our practices as they are today. Washa's general website is covered by the separate website privacy notice.
Information we receive
When you contact us
- Microsoft Marketplace "Contact me" requests. If you select Contact me on our Microsoft Marketplace listing and agree to share your details, Microsoft sends them to us. They may include your name, email address, phone number, country, company, job title and any note you write. We receive them in Microsoft Partner Center.
- Email. When you email us, we receive your message, your contact details and anything you attach.
When you take part in a guided pilot
- Under a finalized pilot agreement (see Guided pilots): label artwork and the matching label application details, such as brand name, class/type, alcohol content, net contents, producer or bottler name and address, and country of origin.
- The order and invoice records for the pilot.
When you use the Application
- Sign-in. When you sign in with a work or school Microsoft account, Microsoft Entra ID sends us your name, email address, user ID and your organization's tenant ID. We never see or store your password.
- Account records and usage counts. The Application keeps a record of the subscription or access arrangement under which it is used, including notifications Microsoft sends about that subscription, and counts completed label checks so that allowances can be applied.
- Technical logs. The Application logs each request: time, requesting IP address, page address without its query parameters, and response status. It also logs errors.
Label checks in the Application
To check a label, you upload one or two images of it and enter its application details. The Application uses them only to produce the result you see.
- They are processed in memory in Microsoft Azure (East US 2 region). They are not written to disk, saved in our storage, or included in our logs.
- The result is returned to your browser with an instruction not to cache it. The Application does not retain the result after processing.
- We record only that a check was completed.
Text recognition and AI
The Application runs on Microsoft Azure infrastructure in the United States (East US 2 region). It reads text from label images with open-source optical character recognition software (Tesseract), which runs inside the Application's own container on that Azure infrastructure, not on your device.
The Application processes submitted label artwork and application details within its Microsoft Azure-hosted environment. It does not transmit those materials to a separate AI inference service or external AI model provider for label analysis.
This statement describes the Application only. How material you send us for a guided pilot is handled is described in the next section.
Guided pilots
Washa LLC does not accept label artwork or application materials for guided-pilot processing until a written pilot agreement with you has been finalized. That agreement sets out the data-handling arrangements for the pilot, including:
- how materials are transferred to us;
- how and where they are processed, and who can access them;
- whether and how they are stored;
- how they are returned and deleted; and
- any third-party processing involved.
Materials received under a pilot agreement are used to prepare your screening report and are handled as that agreement provides. Please do not send label artwork until the agreement is in place and we have sent you instructions for sending it.
How we use information
We use this information to:
- reply to your enquiries, and arrange and deliver pilots;
- sign you in and operate the Application;
- apply allowances;
- answer support requests; and
- keep our services secure and working.
We do not sell personal information, use it for advertising, or share it except with the service providers listed below or where the law requires.
Cookies
The Application uses one strictly necessary cookie, washa_session, which keeps you signed in. It is sent only over HTTPS, cannot be read by scripts, and expires after 8 hours or when you sign out. The Application uses no analytics, advertising or third-party cookies.
Microsoft's sign-in pages are covered by the Microsoft Privacy Statement.
Service providers
- Microsoft. Azure hosts the Application in the United States (East US 2 region) and stores its account records, usage counts, signing key and technical logs. Microsoft Entra ID provides sign-in. Microsoft Marketplace and Partner Center provide our listing and Contact me requests.
- Google. Google Workspace provides our email.
These providers process information for us under their own terms.
Security
- All traffic to the Application uses HTTPS.
- Azure encrypts the Application's stored data.
- The Application reaches storage and Microsoft's services with Azure managed identities instead of stored passwords or keys.
- Within Washa, access to information is limited to authorized individuals with a legitimate business need.
How long we keep information
- Label images, application details and results in the Application: not kept; they are discarded when the check finishes.
- Application technical logs: 30 days.
- Application session cookie: up to 8 hours.
- Guided-pilot material: as set out in the pilot agreement.
- Contact me requests, correspondence, order and invoice records, and Application account records and usage counts: these may be kept after a pilot or subscription ends, for account administration, billing, security, support and legal obligations. We do not currently delete them automatically.
Your choices and privacy requests
To ask for access to your information, or for it to be corrected or deleted, email accounts@washallc.com. We review each request and handle it subject to verifying the requester's identity, applicable law and legitimate record-keeping requirements.
Children and changes
Our services are for businesses and are not directed to children. We will post any changes to this policy on this page and update the date above.
Contact
Washa LLC · accounts@washallc.com
Washa LLC is not affiliated with or endorsed by the Alcohol and Tobacco Tax and Trade Bureau (TTB) or any other government agency.