Joy CorkPrivacy policy
What Joy Cork keeps about you, why, who else sees it, and for how long.
Last updated October 12, 2026
Who we are and what this covers
Joy Cork is a service of Boffo Digital LLC, a Texas limited liability company ("we", "us"). This policy covers the Joy Cork app at app.joycork.com and the Joy Cork connection for AI assistants (the MCP server at https://app.joycork.com/mcp, used from ChatGPT, Claude and other assistants). The marketing site at joycork.com has its own privacy policy.
When you use Joy Cork from an AI assistant, the assistant handles your conversation under its own privacy policy. We never receive the conversation: only the requests the assistant sends to Joy Cork's tools.
At a glance
| What | Why | Who receives it | How long it's kept |
|---|---|---|---|
| Account details: your name, email address, account name and role, settings such as the weekly briefing | To sign you in and run your account | Us; Postmark sends our emails to you | Until the account is closed, then 30 days |
| Saved winery details (voice, wines, club, calendar, rules and similar), whether you save them in the app or your assistant saves them when you agree | So planning and drafting start from your winery's facts | Us, and the people on your Joy Cork account | Until you delete them or the account is closed |
| Emails you upload (your winery's past marketing emails) | To fill in your winery's history in Joy Cork | Us; Amazon Web Services stores the files; TypeSafe and OpenRouter process them for analysis (see below) | Until you ask us to delete them or the account is closed |
| Draft text you ask Joy Cork to check | To compare the draft with winery email and your saved details | TypeSafe, to analyze it | Not stored by Joy Cork; our logs record only its length |
| Assistant requests: which tool was used, its inputs (draft text, subjects and saved content reduced to their length), the outcome and timing, and a session identifier we hash with a key that changes monthly | Security, rate limits, support and improving Joy Cork | Us | 30 days, then deleted automatically |
| Assistant connections: the assistant's registration (its name and callback address) and the access tokens it holds, which we store only in hashed form | So the assistant you linked can use your account | Us | Until you unlink the assistant |
| Winery coverage requests: the winery's name, website and your note | To follow the winery and tell you when it's covered | Us; Postmark sends the update email | Until the account is closed |
| Usage events: actions you take in Joy Cork, such as signing up, finishing a Get started step, linking or unlinking an assistant, saving winery details, uploading emails, requesting coverage or saving to a board, with the time and categories only (never email text, drafts or saved content), and weekly totals of your account's activity | To see whether Joy Cork is useful week to week, support your account, and improve Joy Cork | Us | 13 months, then deleted automatically; weekly totals are counts only |
| Email engagement: whether you opened our weekly briefing and which of its links you clicked | To know whether the briefing is useful, and improve it | Postmark, which records opens and clicks for us | As long as Postmark keeps our message history under its retention settings; you can turn the briefing off in Settings |
| Request details: IP address, time and page requested | Delivering pages, rate limits, preventing abuse | Cloudflare and Hetzner, our network and hosting providers | Our server logs rotate automatically and are kept for a few days at most; Cloudflare keeps its own under its policy |
What we collect
Only what's in the table above. Joy Cork doesn't ask for payment details, your customers' or subscribers' personal information, or your email platform login, and you shouldn't share them with it.
Joy Cork's archive is made of marketing emails that wineries send to a public subscriber address we control. Before anyone sees them, we remove anything that would identify a recipient. If you upload your winery's past emails, they're cleaned the same way and become part of the archive as your winery's emails, so other Joy Cork users can see and compare them like any other winery's emails.
How we use it
- To sign you in, run your account and send the emails you've asked for (sign-in codes, weekly briefings, coverage updates).
- To answer your assistant's requests and the pages you open.
- To keep Joy Cork secure and within its limits, and to fix problems.
- To improve Joy Cork, from the request logs, usage events and briefing engagement described above. We don't use Google Analytics or any other third-party analytics in the app.
We don't use your information for advertising, we don't build profiles of you, and we don't sell or rent personal information.
Who receives it
- TypeSafe analyzes email text and drafts (what kind of email it is, its offer types, its sections).
- OpenRouter sends images from collected and uploaded emails to an Anthropic Claude model, which describes them.
- Postmark sends our emails to you and receives the winery emails Joy Cork collects.
- Amazon Web Services stores archived images, screenshots and uploaded files.
- Hetzner hosts our servers and database.
- Cloudflare carries traffic to Joy Cork and caches its images.
We don't share your information with anyone else, except where the law requires it.
How long we keep it
As in the table above: assistant request logs for 30 days; assistant connections until you unlink them; saved winery details and uploaded emails until you delete them (or ask us to) or close the account; account details until the account is closed, then 30 days.
Your choices
- Unlink an assistant in Settings → Connected assistants. Its tokens stop working at once.
- Change or delete saved winery details in Settings, or ask your assistant to change them.
- Turn off the weekly briefing in Settings.
- Delete uploaded emails, close your account, or get a copy of your data: email hello@joycork.com.
Children
Joy Cork is a business tool for winery marketing staff and their agencies. It isn't directed at children or at consumers.
Security
Joy Cork is served over HTTPS only. Sign-in codes and assistant tokens are stored only as hashes. Draft text isn't stored. A linked assistant can read Joy Cork's archive and your account's winery details, save winery details you agree to, and request that Joy Cork follow a winery when you ask; nothing else.
Changes
We'll update this page and its date before a change takes effect.
Contact
Boffo Digital LLC, hello@joycork.com. Help: support.