Privacy Policy
Effective August 3, 2026
This explains what Barrow Pay collects, why, and who sees it. Short version: we collect what's needed to run rent and compliance for venues, we don't sell your data, and vendors control which organizations see their documents.
What we collect
- Account basics — email, name, business name, phone if you provide it.
- Venue and billing records — venues, agreements, rates, invoices, payment status.
- Documents — permits, insurance certificates, and other files vendors upload, plus stated expiry dates.
- Payment metadata — payment status and identifiers from Stripe. Bank credentials and full account numbers go directly to Stripe; we never see or store them.
How we use it
- Running the product: invoices, autopay, reminders, document tracking.
- Sending transactional email and, if you opt in, SMS. Reply STOP to any text to opt out.
- Keeping the service secure and troubleshooting problems.
We do not sell personal data or use it for third-party advertising.
Who sees what
- Operators see the vendors on their roster: contact info, payment status, and the documents shared with them.
- Vendorscontrol their document locker. Accepting an organization's invite shares documents with that organization only — no organization can browse a vendor's locker.
- Service providers that run parts of the product under contract: Stripe (payments), Supabase (database and storage), Vercel (hosting), Resend (email), Twilio (SMS), Trigger.dev (scheduled jobs).
- We disclose data if the law requires it, and we'll tell you unless we're legally barred from doing so.
Retention and deletion
We keep records while your account is active and as long as needed for tax, payment, and dispute obligations. Email billing@barrowpay.comto request export or deletion of your data; we'll honor it except where the law requires us to keep specific records.
Cookies
We use only the cookies needed to keep you signed in. No third-party ad trackers.
Changes
If this policy changes materially, we'll email account holders and update the effective date here.