Privacy Policy

1. Scope and Roles

This Policy applies to information processed through Barrio-controlled Services. For business workspaces, Barrio generally acts as a service provider or processor for the business customer that uses Barrio to manage its own customers and operations. The business is responsible for the customer relationships, service delivery, and any notices or consents it must provide to its own customers. For Barrio account administration, marketing, platform billing, security, analytics, and support, Barrio may act as an independent controller of information.

2. Information We Collect

We collect information you provide directly, information generated through use of the Services, and information received from service providers or integrations.

Account and profile information

This may include names, business names, email addresses, phone numbers, workspace names, staff member details, customer profile information, saved service addresses, notification preferences, account status, authentication codes, and account settings.

Business and service information

Businesses may provide service catalogs, pricing, add-ons, prep instructions, customer questions, FAQs, business hours, policies, tax settings, scheduling settings, staff roles, team assignments, locations, and public storefront information.

Customer relationship and operational information

The Services process customer records, account-customer relationships, messages, chat threads, SMS-related content and delivery status, estimates, invoices, jobs, appointments, schedules, notes, addresses, staff assignments, status changes, review requests, timeline events, reminders, recurring services, waitlist entries, refund records, payment retry state, tax reporting data, and similar operational records.

Payment and billing information

Payments are processed through Stripe. Barrio may receive and store payment-related metadata, such as Stripe customer IDs, connected account IDs, checkout session IDs, payment intent IDs, subscription IDs, invoice IDs, payment status, card brand and last four digits, amounts, tax amounts, refund amounts, retry status, and webhook event status. Barrio does not intentionally store full payment card numbers or card security codes.

Device, technical, and usage information

We may collect IP address, browser or device type, operating system, app version, referral or page information, approximate region, log data, request paths, session information, authentication and security signals, crash or error information, and usage events needed to operate, secure, debug, and improve the Services.

Mobile and notification information

If you use the mobile app or enable push notifications, we may process device push tokens, platform information, notification preferences, and notification delivery data. You can disable push notifications through your device settings and, where available, through Barrio profile controls.

3. How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Services.
• Create and manage business workspaces, customer accounts, staff access, customer portals, and mobile sessions.
• Authenticate users, send verification codes, prevent unauthorized access, and secure accounts.
• Enable storefronts, service checkout, estimates, invoices, recurring services, appointments, schedules, staff assignments, reminders, reviews, refunds, payment retries, and tax reporting.
• Deliver customer and business communications, including chat, SMS-related workflows, email, push notifications, appointment reminders, payment updates, and review requests.
• Process platform subscriptions and connected business payments through Stripe.
• Provide support, troubleshoot issues, enforce our Terms, detect abuse, and maintain audit logs.
• Generate operational reporting, analytics, billing exports, CSV downloads, calendar exports, and workspace summaries.
• Comply with legal obligations, accounting requirements, tax requirements, dispute processes, and law enforcement requests where applicable.
• Send administrative, transactional, product, and limited marketing communications, subject to applicable law and communication preferences.

4. How We Share Information

We do not sell personal information in the traditional sense. We share information as needed to provide and operate the Services, including with:

• Businesses and customers: information is shared between a business workspace and its customers as necessary for service booking, scheduling, messaging, payment, updates, support, and service delivery.
• Staff and authorized workspace users: business owners may invite or configure staff access. Staff may see customer, job, schedule, message, and payment-related context depending on role and workflow.
• Payment processors: Stripe processes card payments, connected accounts, subscriptions, invoices, checkout sessions, refunds, and related financial workflows.
• Communications providers: SMS, email, push notification, and chat-related providers may process contact details, message content, delivery status, and device tokens to deliver communications.
• Infrastructure and software providers: hosting, database, logging, monitoring, security, storage, analytics, and development providers help us operate and protect Barrio.
• Compliance and safety recipients: we may disclose information when required by law, subpoena, court order, regulator, payment network rule, tax authority, or to protect rights, safety, security, and integrity.
• Business transfers: information may be transferred in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate protections.

5. Communications, SMS, Email, and Push Notifications

Barrio supports business-customer communications, including in-app chat, SMS-related workflows, email reminders, and push notifications. Message content, sender/recipient information, timestamps, delivery status, and related metadata may be stored so businesses and customers can see conversation history and operational updates.

Messaging and notification features may be subject to carrier, provider, platform, and legal requirements. Customers can manage certain notification preferences, such as schedule updates, business messages, payment updates, and review requests. SMS opt-out or carrier controls may also apply depending on the message channel.

6. Cookies and Similar Technologies

We use cookies, local storage, session storage, and similar technologies to keep users signed in, remember preferences, support security features, measure site and product usage, and improve the Services. Browser settings may allow you to block or delete cookies, but some Services may not work correctly without them.

7. Data Retention

We retain information for as long as reasonably necessary to provide the Services, maintain accurate business and customer records, comply with legal and tax obligations, resolve disputes, enforce agreements, support security, and preserve audit history. Retention periods vary based on the type of information and context.

Customer account closure currently removes saved customer addresses, verification codes, and device tokens, and replaces core customer identifying fields with a closed-account placeholder while preserving certain transactional, operational, financial, and audit records needed for businesses, compliance, fraud prevention, tax, accounting, and dispute handling.

8. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information. Customers may access profile controls, notification preferences, billing exports, and account deletion features where available. Businesses may update workspace and customer records through the dashboard.

If your information is controlled by a business using Barrio, we may direct your request to that business or assist the business in responding. To protect privacy and security, we may need to verify your identity before fulfilling a request.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, and alteration. These safeguards include access controls, session security, rate limiting for sensitive mobile APIs, secure headers, logging, and reliance on specialized providers for payment processing. No internet or storage system is completely secure, and we cannot guarantee absolute security.

10. Children

Barrio is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Barrio, contact us so we can take appropriate action.

11. International Use

Barrio is operated from the United States. If you access the Services from outside the United States, your information may be processed in the United States or other jurisdictions where our service providers operate. Those jurisdictions may have data protection laws different from where you live.

12. Third-Party Links and Services

The Services may link to or integrate with third-party services, such as Stripe checkout or billing portals, maps or address tools, app stores, messaging providers, and business websites. Those third parties process information under their own terms and privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by updating the date above, posting notice in the Services, or using another reasonable method. Continued use of the Services after an update means the updated Policy applies going forward.

14. Contact

For privacy questions or requests, contact Barrio through the support or account contact available in your workspace, or contact Barrio, Inc. using the business contact information provided on Barrio communications or contracts.