← Back

Privacy Policy

Last updated: June 10, 2026

1. Information We Collect

We collect information you provide directly:

  • Partners: Name, email, phone number, Instagram handle, business description, Stripe account information, and store details.
  • Customers: Name, email, shipping address, and payment information (processed by Stripe — we never store card numbers).
  • Applicants: Name, email, phone, Instagram handle, and business information submitted via the application form.

We also automatically collect standard web analytics data: IP address, browser type, device type, pages visited, and timestamps. This data is used for security and performance monitoring only.

2. How We Use Your Information

  • To operate the Platform — processing orders, managing reservations, facilitating payments, and shipping products.
  • To communicate with you — transactional emails, SMS notifications, shipping updates, and platform announcements.
  • To improve the Platform — analytics, performance monitoring, and feature development.
  • To protect the Platform — fraud prevention, dispute resolution, and enforcing our Terms of Service.

3. Information Sharing

We do not sell your personal information. We share data only with:

  • Stripe: Payment processing and partner payout management. Stripe's privacy policy governs their handling of payment data.
  • Resend: Transactional email delivery.
  • Twilio: SMS and MMS notifications.
  • Vercel: Platform hosting and infrastructure.
  • Supabase: Database hosting and authentication services.
  • Law enforcement: When required by law or to protect our legal rights.

4. Data Retention

We retain your data as long as your account is active or as needed to provide services. Order records are retained for 7 years for tax and legal compliance. You may request deletion of your account data by contacting us, subject to legal retention requirements.

5. Cookies and Tracking

We use essential cookies for authentication, session management, partner attribution, and storing your consent preferences. With your consent we also use the following third-party services:

  • Meta Pixel and Conversions API (Meta Platforms, Inc.): Marketing measurement and retargeting. Loaded only after you grant marketing consent. Server-side events sent via the Conversions API use hashed email/phone identifiers.
  • Microsoft Clarity (Microsoft Corporation): Anonymous heatmaps and session replay used to improve the user experience. Loaded only after you grant analytics consent.
  • Vercel Analytics and Speed Insights: Aggregated, anonymous performance metrics. No personal identifiers.
  • Sentry (Functional Software, Inc.): Error monitoring. Captures stack traces and request metadata when something breaks. No PII is intentionally attached.

On your first visit a banner asks you to accept or reject analytics and marketing cookies. Until you make a choice, no third-party trackers are loaded. You can change your decision at any time by clearing the pedra_consent cookie and reloading the site, or via your browser's cookie settings. See the Cookie Policy for the full per-cookie inventory.

6. SMS and Notifications

Partners may receive SMS notifications for sale alerts, shipping updates, weekly recaps, and milestone achievements. Partners can manage their notification preferences in their account settings at any time. Message and data rates may apply.

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), Row Level Security on all database tables, secure authentication via Supabase Auth, and timing-safe secret validation. Payment data is handled entirely by Stripe and never touches our servers.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal requirements).
  • Opt out of non-essential communications.
  • Export your data in a portable format.

To exercise any of these rights, contact us at the address below.

9. Children's Privacy

The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. Continued use of the Platform after changes constitutes acceptance.

11. Contact

For privacy-related questions or data requests, contact us at admin@barriosamethysts.com.