Draft — pending Australian legal review

This document is a working draft prepared to guide development. It has not been reviewed by an Australian legal practitioner, is not legal advice, and must be reviewed and finalised before Barvero accepts payments from or onboards real customers.

Privacy Policy

Draft — last updated 25 July 2026.Barvero is operated by Aero Studio (“we”, “us”). This policy explains how we handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Information we collect

  • Account & business details: your name, email, phone, business name, address and settings.
  • Customer records you enter:your customers’ names and contact details, appointments and notes. You are the controller of this data; we process it on your behalf.
  • Payment information: subscription billing is handled by Stripe. We do not store card numbers; we retain only a Stripe customer/subscription identifier and billing status.
  • Technical data: log and device information needed to operate and secure the service.

2. How we use information

To provide and secure the service, process subscriptions, send service-related communications, and meet legal obligations. We do not sell personal information.

3. Disclosure & third parties

We share information only with providers that help us run Barvero:

  • Supabase (database & authentication hosting)
  • Stripe (subscription payments)
  • Vercel (application hosting)

Some providers may process data outside Australia; we take reasonable steps to ensure comparable protection.

4. AI features

The AI website features only ever receive public business content (business name, services, staff bios, hours, location). Customer records, appointments and payment data are never sent to AI providers.

5. Security

Data is protected with row-level security so each business can access only its own data, encrypted connections, and server-only handling of secrets.

6. Your rights

You may request access to or correction of your personal information, or make a privacy complaint, using the contact details below. Unresolved complaints may be referred to the Office of the Australian Information Commissioner (OAIC).

7. Data retention & deletion

We retain data while your account is active. On request we will delete or de-identify personal information, subject to legal retention obligations.

8. Contact

Privacy enquiries: privacy@aerostudio.au.

[Legal review required: confirm entity name/ABN, overseas-disclosure list, retention periods, complaint-handling process and OAIC references before publishing.]