Effective October 12, 2026

Privacy Policy

Next Wave Beverage · Website and Caseflow ordering service

This policy describes how Next Wave Beverage ("we," "us," or "our") handles personal information through nextwavebev.com, our business inquiry forms, and the Caseflow service used to manage beverage ordering. Next Wave Beverage is the seller identified on our storefront; Caseflow is the software supporting the ordering service. This policy covers our handling of information, not the independent practices of websites or services you visit separately.

1. Information we collect

• Account information: your name, email address, account identifiers, and profile information supplied when you register or sign in, including through Google.
• Business and delivery information: business name, contact details, billing or delivery addresses, authorized contacts, business approval information, and resale-certificate information or documents you submit.
• Ordering information: cart contents, products, quantities, order references, delivery instructions, transaction amounts, payment status, and related correspondence.
• Inquiries: the name, company, email, phone number, service interest, and message you choose to send through a contact form or by email.
• Technical information: information needed to operate and secure the service, such as IP address, browser and device details, session identifiers, request and error logs, and records of account or administrative activity. Cookies or similar storage can retain sign-in sessions and interface preferences.

Please provide only information relevant to your request or business use. Do not include passwords, full payment details, or unrelated sensitive personal information in free-text messages.

2. Google sign-in

If you choose Google sign-in, the service requests only basic identity permissions: openid, email, and profile. Google may provide your Google account identifier, email address and verification status, name, and profile image. We use this information to authenticate you, associate you with your service account, and support account security.

Google sign-in does not request access to your Gmail messages, Google Drive files, contacts, or calendar. Signing in establishes your identity; it does not itself approve a business, authorize purchases, or grant a role within Caseflow. Those permissions are managed separately.

You may review or revoke the service's Google access through your Google Account connections. Revoking Google access does not automatically delete an existing Caseflow account or business records. To request deletion, contact us as described below.

3. How we use information

We use information to provide and secure accounts; review business eligibility and resale information; display relevant products and prices; process and administer orders; coordinate delivery and supplier fulfillment; respond to inquiries; provide service communications and support; investigate errors, misuse, and disputes; and meet applicable recordkeeping or legal obligations. We do not use Google sign-in information to train generalized artificial-intelligence models or to build advertising profiles.

4. How information is shared

Information is disclosed only where relevant to operating the service or for the purposes described in this policy:

• Service providers: authentication, hosting, database, storage, email, and payment providers process information needed to perform their services. The service uses Clerk for authentication and Convex for application data. Where online payment collection is offered, payment details are handled through the applicable payment provider, such as Stripe.
• Your organization: authorized business administrators and users can access information according to their role and organization permissions.
• Suppliers and fulfillment partners: relevant order, recipient, and delivery information may be shared to fulfill an order or resolve a delivery issue. This does not give a supplier unrestricted access to your account.
• Legal and safety purposes: information may be disclosed when required by law or reasonably necessary to protect rights, prevent fraud, respond to lawful requests, or address security incidents.
• Business transfers: information may be transferred in connection with a merger, acquisition, or transfer of the relevant business, subject to applicable legal protections and notice requirements.

We do not sell personal information or share Google sign-in information for third-party targeted advertising. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

5. Cookies and preferences

The service uses cookies and similar technologies for authentication, security, and saved interface preferences. Your browser can manage or remove cookies, but disabling essential cookies may prevent sign-in or other service functions. This policy does not authorize advertising trackers or optional analytics that are not otherwise disclosed.

6. Retention and security

We retain information for as long as reasonably needed for the purposes described here, including operating accounts, administering orders, resolving disputes, maintaining security and audit records, and complying with legal, tax, or accounting obligations. Retention depends on the type of record and the reason it is needed. Closing an account may not remove records we must retain for these purposes.

We use access restrictions and technical and organizational safeguards intended to protect information. No system or transmission method can be guaranteed completely secure. Service providers may process information in the United States or other places where they operate, subject to applicable safeguards.

7. Your choices and requests

You may ask us to access, correct, or delete your personal information, or to close your account, by emailing Info@paxom.ai with the subject "Next Wave privacy request." Include the email associated with your account and describe your request. We may need to verify your identity and authority before acting. Do not send identity documents unless we request them through an appropriate channel.

We will respond as required by applicable law. Some requests may be limited by legal recordkeeping requirements, security needs, the rights of others, or your organization's control of business records. Depending on your location, you may have additional rights to object to processing, restrict processing, obtain a portable copy, appeal a decision, or complain to a relevant authority. We will not unlawfully discriminate against you for exercising privacy rights.

8. Children

The service is intended for adults acting for businesses. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information so we can investigate and take appropriate action.

9. Changes and contact

We may update this policy as the service or applicable requirements change. The published policy will show its effective or last-updated date. We will provide additional notice where required by law.

For privacy questions, contact Next Wave Beverage at Info@paxom.ai, using "Next Wave Beverage privacy" in the subject line.