Privacy Policy

1. Who we are

Bario is operated by Barael LLC, a California limited liability company. This policy describes how we collect, use, and protect your information when you use Bario ("the Service"). Questions? Email eddie@barael.com.

2. What we collect

Account information. When you sign up, we collect your email address and the display name you provide. Workspace owners also provide a workspace name.

Content you create. To-dos, message threads, replies, check-ins, files, and notes you add to the Service. This content is stored in your workspace and visible only to workspace members.

Usage data. We collect basic usage information (pages visited, features used, timestamps) to improve the Service. We do not sell this data.

Payment information. We do not store payment card details. All billing is handled by Stripe, which is PCI-DSS compliant. We store only your Stripe customer ID and subscription status.

3. How we use your information

We use your information to provide and improve the Service — including delivering email notifications, generating AI summaries and digests from your workspace content, and processing payments.

We do not use your content to train AI models. When AI features process your content (to generate summaries, check-ins, or digest emails), that processing happens on demand and is not retained by the AI provider beyond the completion of the request.

4. Third-party services

We use the following third-party services to operate Bario:

• Supabase — database, authentication, file storage. Your data is stored in Supabase's US-East infrastructure.
• Anthropic — AI features (thread summaries, check-in drafts, digest emails). Content sent for AI processing is subject to Anthropic's data usage policies.
• OpenAI — semantic search. Content is embedded via text-embedding-3-small for search indexing within your workspace.
• Stripe — payment processing. Stripe handles all payment card data; we never see or store it.
• Resend — transactional email (invites, notifications, digest emails).
• Vercel — hosting and edge delivery.

5. Data sharing

We do not sell your personal information. We share data with third-party providers only as necessary to operate the Service (as described above). We may disclose information if required by law or to protect the rights and safety of our users.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, your data will be removed from our systems within 30 days, except where retention is required by law (e.g. billing records, which are retained for 7 years per standard accounting requirements).

7. Security

We use industry-standard security practices including row-level security on all database tables, encrypted connections (TLS), and access controls that limit which team members can see which workspace data. No system is 100% secure; we encourage you to use a strong, unique password.

8. Your rights

You may access, correct, or delete your personal data at any time. To request deletion of your account and associated data, email eddie@barael.com. California residents have additional rights under the CCPA, including the right to know what personal information we collect and to opt out of its sale (we do not sell personal information).

9. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising cookies or track you across third-party sites.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or in-app notice at least 14 days before they take effect. The "last updated" date at the top of this page reflects the current version.

11. Contact

Privacy questions or data requests: eddie@barael.com