Privacy Policy

Who we are

The Barndo & Co Build Concierge (the “Service”) is operated by Barndo & Co (“we”, “us”). This policy explains what personal information we collect through the Service, why we collect it, and how we handle it. We operate in Canada and comply with PIPEDA and, where applicable, CASL and U.S. state privacy laws.

What we collect

• Account information — your email address, name, and (if you provide it) phone number.
• Build information you enter — project details such as location, land answers, budgets, tasks, selections, expenses, quotes, and milestone records. This includes your financing readiness answers and the credit score range you pick from a list. We never pull your credit file and never see a real score.
• Files you upload — receipts, quotes, documents, and milestone photos.
• Concierge questions — messages you send to the AI concierge, processed to generate answers.
• Usage signals — in-product events (for example, that you priced out a plan) used to personalize your experience and, with your consent, to follow up with you.
• Crash and diagnostic reports — when something breaks we record the error message, the technical trace, the screen it happened on, and your device and browser type, so we can find the fault and fix it. These reports go only to our own systems.

How we use it

• To provide the Service: estimates, readiness scores, roadmaps, budgets, and the concierge.
• To follow up on your build inquiry — our team may contact you about plans, land, financing, or quotes you request.
• To send marketing or re-engagement email only where permitted, always with a working unsubscribe link.
• To operate, secure, and improve the Service.

We do not sell your personal information.

Staff access to your account

Authorised Barndo & Co staff can open your account and view it the way you see it — your build, tasks, budget, and documents. We do this only to run the Service: answering a support request, investigating a fault, or checking that your build data is correct.

Every time a staff member opens a customer account, and every time they leave it, we record it in an internal audit log with who did it and when. Staff cannot see your password, which is stored only as an irreversible hash, and they cannot see full payment card details, which stay with our payment processor.

If you would like a record of when your account has been accessed this way, email info@barndoandco.ca and we will provide it.

Service providers

We rely on a small set of processors to run the Service:

• Supabase — database, authentication, and file storage (hosted in Canada, ca-central-1).
• Anthropic — AI responses for the concierge, and reading receipts and quotes you choose to scan. When you use an AI feature, your typed message, your build's region, budget band and stage, and any receipt or quote image you scan are sent to Anthropic (processed in the United States) to generate the response. Anthropic is contractually bound to protect this data equivalently to this policy, retains it only as needed to provide the service, and does not use it to train its models. AI features run only after you agree in the app, and you can withdraw that permission anytime in Profile → Account & plan.
• Resend — transactional and (with consent) marketing email delivery.
• Google Maps — address lookup where you use location features.
• Stripe — card payments made on the web. Stripe takes your card details directly; we never see or store your full card number.
• Apple — if you subscribe inside the iPhone app, Apple takes the payment and tells us only that your subscription is valid and when it renews. Your card details never reach us.
• Open-Meteo — weather forecasts. So we can warn you about rain or snow before a pour, framing, or roofing task, your build site's coordinates are sent to Open-Meteo. No name, email, or account information is sent with them.
• Apple and Google push services — delivering notifications to your device. Each receives a device token and the text of the notification.

Retention & your rights

We keep your information while your account is active or as needed to provide the Service and meet legal obligations. You may request access to, correction of, or deletion of your personal information at any time by contacting us — we will act on verified requests within 30 days. You can unsubscribe from marketing email with one click in any message.

Cookies & local storage

The Service uses browser local storage to keep you signed in. We do not run third-party advertising trackers.

Children

The Service is not directed to children under 18, and we do not knowingly collect their information.

Changes & contact

We will post any changes to this policy on this page with a new “last updated” date. Questions or requests: concierge@barndoandco.ca.