Privacy Policy

1. What we collect

• Account data: name, email address, venue name and country, provided at signup.
• Billing data: handled by Stripe (our payment processor); we store your subscription status and Stripe customer reference, never your card number.
• Usage data: menu items, prices, sales events you log (item, quantity, price, timestamp), game/session activity, and technical logs (IP address, browser type) needed to run and secure the service. Sales events describe transactions at your venue; they contain no data about your customers as individuals.
• Emails: transactional emails (verification, receipts, trial reminders) are sent via our provider Resend.

We do not collect personal data about your venue’s guests. The TV display requires no login and sets no tracking cookies.

2. Why we process it (legal bases)

To provide the service and fulfil our contract with you (Art. 6.1.b); to meet legal obligations such as bookkeeping (Art. 6.1.c); and for our legitimate interests in securing and improving the service and communicating with you about your account (Art. 6.1.f).

3. Processors and transfers

We use a small number of service providers (processors): Supabase (database and authentication, EU region), Stripe (payments), Resend (transactional email), Cloudflare (DNS, routing and security), and our hosting provider. Where a provider processes data outside the EU/EEA, transfers are protected by the EU Standard Contractual Clauses or an adequacy decision.

4. Retention

Account and venue data is kept while your account is active and for 90 days after termination, then deleted. Invoicing records are kept as required by Swedish bookkeeping law (7 years). Technical logs are kept up to 12 months.

5. Your rights

You have the right to access, rectify, delete and port your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority (in Sweden: Integritetsskyddsmyndigheten, IMY). Contact us at hello@barbull.io to exercise your rights.

6. Cookies

barbull.io uses only strictly necessary cookies (login session, preferences). We do not use advertising or cross-site tracking cookies. If we introduce analytics, we will use a privacy-preserving solution or ask for consent.

7. Marketing emails

If we contact your business by email about BarBull, we do so under legitimate interest for business-to-business communication. Every such email includes a working opt-out; if you opt out, we will not contact that address again.