What we collect, and what we refuse to.

Barkrow replaces detected sensitive identifiers before AI processing. Automated detection has limits, and some names or other identifying information may remain. The marketing site never sees a customer file. Nothing on this site sets a tracking cookie that follows you across the web; see our Cookie Policy for the short list of cookies we do use.

Information you give us. Name, work email, brokerage or company, role, and anything you write when you use a contact, demo, pricing, partnership, support, or newsletter form, book a meeting, email us, or talk with us on a call.

Information from your account. If you use Barkrow, the account, membership, and authentication data needed to operate your seats, and the billing identity and subscription status needed to bill you. Payment card details go directly into Stripe; we never see or store them.

Information collected automatically. The standard server and security logs we need to run and protect the site and the service (IP address, browser type, pages requested, timestamps), aggregate page-view measurement, and usage data about how the product performs. No ad-network pixels, no cross-site tracking.

Information from others. Your organization’s administrator may invite you and assign your role. If you sign in with Google, Apple, or your company’s single sign-on, that provider tells us who you are. Stripe tells us whether a payment succeeded. We do not buy contact lists.

When you open an application map, Google Maps Platform receives map coordinates plus ordinary network and browser request data such as your IP address and referring page. When you search for an address, Barkrow sends the entered address text to Google Places or Geocoding from our authenticated API. When you save, Barkrow stores the address fields you selected. Provider-returned map coordinates are used transiently for the active map and are not written to your tenant record. We do not send customer document bodies, prompts, citations, tenant identifiers, or model data through the map path. Google processes this data under the Google Privacy Policy and Google Maps Platform Terms.

To respond to demo, access, and support requests, to provide and secure the service, to send the newsletter if you subscribe, to follow up on a sales conversation you started, to take payment on paid plans, to improve the product within the controls below, and to meet our legal and tax obligations. The legal bases we rely on are your consent (for the newsletter and non-essential cookies), the performance of our contract with you, and our legitimate interest in running, securing, and growing the business. We do not sell or share your personal information for cross-context behavioral advertising. We never have. We do not use it to make decisions about you that have legal or similarly significant effects.

We disclose personal information only for the purposes below. Service providers act on our instructions under contract; they may not use it for their own purposes.

The named providers and what each receives are on the Subprocessors page.

Four settings govern what happens to the data in your workspace. Organization policy controls organization-owned data; user policy controls personal workspaces.

Security, billing, and audit processing is always on. It is what keeps the service running, invoiced, and accountable, so it cannot be switched off while you use Barkrow.

Quality monitoring is on by default, and you can turn it off. It measures how the product performs so we can find and fix failures.

De-identified product improvement is on by default, and you can turn it off. It uses de-identified signals about how features behave. It never carries raw customer content.

Training models on raw customer content is off. No setting turns it on. Offering one would take an explicit opt-in from you and a separate legal review first.

You can unsubscribe from the newsletter from any issue, and decline non-essential cookies in the cookie banner.

Our support-access policy requires an open case, a recorded purpose, time-limited authorization, and an audit record. Contact us for the current controls and evidence applicable to your agreement. Customer content is not copied into our telemetry.

Wherever you live, you can ask us what personal information we hold about you, ask us to correct or delete it, ask for a copy, and withdraw a consent you gave. Depending on where you live, you may have more:

• California and other US states with privacy laws: the rights to know, access, correct, delete, and port your information, to opt out of sale or sharing (we don’t sell or share), and to limit use of sensitive information (we use it only to provide the service). You may use an authorized agent, and you may appeal a decision by replying to it.
• European Economic Area, United Kingdom, and Switzerland: the GDPR rights of access, rectification, erasure, restriction, portability, and objection, including to processing based on legitimate interests, and the right to complain to your supervisory authority. Non-essential cookies wait for your consent, as the ePrivacy rules require.
• Canada: the rights under PIPEDA to access and correct your information and to withdraw consent, and to complain to the Office of the Privacy Commissioner of Canada.
• Australia: the rights under the Australian Privacy Principles to access and correct your information, and to complain to the Office of the Australian Information Commissioner if we don’t resolve your concern.

Email us to make a request. We confirm your identity by checking that you control the email address we hold, and we answer within the time the applicable law sets. We won’t discriminate against you for exercising a right. If your information came to us as part of a customer’s documents, we will pass your request to that customer, who decides what happens to it.

Do Not Track and Global Privacy Control. Because we don’t track you across sites or sell or share your information, there is no cross-site tracking for these browser signals to switch off. We don’t change how the site behaves when it receives them.

Barkrow is operated from the United States. Account and application data, including document metadata, extracted text, and citations, live in a managed Postgres database in the us-west-2 (Oregon) region in the United States. Uploaded documents are stored in object storage with a western North America location preference, and the service’s compute runs in western North America. Model inference runs with a United States processing preference. Text embeddings are computed on our edge provider’s network, which is not pinned to a region.

Edge delivery runs on a global network. Alongside network traffic and request metadata, the edge caches workflow job state so a run survives a reload, and that cache can include short quoted excerpts from your documents where a result cites them. Where we receive personal data from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses and equivalent safeguards, available on request.

Account data is kept while your relationship with us is active and for the period your contract specifies, then deleted. Sales and newsletter contact records are kept while the conversation or subscription is active and deleted on request. Operational logs and traces are kept for 30 days or less; security and audit records are kept for up to a year. Customer documents are kept for the period your agreement specifies and are deleted or returned when it ends, as set out in the DPA. Barkrow does not offer a configurable document-retention schedule.

We protect personal data with encryption in transit and at rest, least-privilege access, and the controls described on the Security page. No system is perfectly secure, but security is the architecture here, not an afterthought.

The service is for professional use and isn’t directed at anyone under 18, and the site is not directed at children under 13. We don’t knowingly collect personal information from children. If you believe a child has given us information, tell us and we will delete it.

We may update this policy. Each change is dated here, and material changes are communicated in advance through the account or by email where we have a relationship with you. Continued use after a change takes effect means you accept it.

Write to legal@barkrowsystems.com with any question or request about this policy or your information.