Privacy Policy

1. Who We Are

BarnwellHub, Inc. ("BarnwellHub," "we," "us," or "our") operates the BarnwellHub marketplace platform at barnwellhub.com and associated mobile applications. We are a technology company headquartered in Austin, Texas, dedicated to connecting rural farms, artisans, and small businesses with customers nationwide.

This Privacy Policy applies to all personal information collected through our website, mobile apps, and any related services (collectively, the "Platform"). By using our Platform, you acknowledge you have read and understood this policy.

2. Information We Collect

2.1 Account Information

When you register as a buyer or seller, we collect: full name, email address, phone number, business name (for sellers), profile photo (optional), and password (stored as a secure hash).

2.2 Store and Listing Information (Sellers)

Sellers provide: product names, descriptions, photos, pricing, inventory counts, and shipping policies. This information is publicly displayed on the Platform to facilitate commerce.

2.3 Transaction Data

When a purchase is made, we collect: order details, quantities, purchase price, payment method type (last 4 digits only), billing address, and order status. Full payment card data is processed by our PCI-compliant payment processor (Stripe) and never stored on our servers.

2.4 Shipping and Logistics Data

To fulfill orders, we collect: delivery address, preferred carrier, package dimensions and weight submitted by sellers, tracking numbers, and delivery confirmations. This data is shared with our carrier partners as necessary to complete delivery.

2.5 Communications

Messages sent through our in-platform messaging system between buyers and sellers are stored to facilitate dispute resolution, support, and fraud prevention. We do not read your messages unless a dispute, support request, or safety concern is raised.

2.6 Usage and Device Data

We automatically collect: IP address, browser type and version, device type, operating system, pages visited, time spent on pages, referring URLs, and search queries within the Platform. This data is used solely for improving Platform performance and security.

2.7 Location Data

With your permission, we may collect precise GPS location to show nearby sellers or estimate delivery costs. You can disable location access at any time in your device settings.

3. How We Use Your Information

• Operating the marketplace: Matching buyers with sellers, processing orders, facilitating payments, and coordinating logistics.
• Account management: Creating and maintaining your account, authenticating logins, and sending account-related notifications.
• Customer support: Responding to inquiries, resolving disputes between buyers and sellers, and investigating fraud or policy violations.
• Platform improvement: Analyzing usage patterns to identify bugs, improve features, and develop new tools for rural commerce participants.
• Marketing communications: Sending newsletters, promotional offers, and platform updates — only with your consent, and always with an unsubscribe option.
• Legal compliance: Meeting obligations under applicable laws, including tax reporting, fraud prevention, and responding to lawful government requests.
• Safety and security: Detecting, preventing, and investigating fraudulent transactions, identity theft, and other harmful activities.

4. How We Share Your Information

4.1 Between Buyers and Sellers

When a transaction occurs, the buyer's shipping address and first name are shared with the seller to fulfill the order. The seller's business name, contact information, and store policies are visible to buyers. Neither party receives the other's full financial or account credentials.

4.2 Service Providers

We work with trusted third-party vendors to operate the Platform, including: payment processors (Stripe), shipping carriers (UPS, FedEx, USPS, regional carriers), cloud infrastructure (AWS), analytics providers, and customer support tools. All service providers are contractually bound to use data only for the purposes we specify.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government authority; to protect the rights, property, or safety of BarnwellHub, our users, or the public; or to enforce our Terms of Service.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, user data may be transferred as part of that transaction. We will notify affected users by email and/or a prominent notice on the Platform before data is transferred and becomes subject to a different privacy policy.

4.5 What We Never Do

We do not sell, rent, or trade your personal information to third-party marketers or data brokers. Period.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide services. Specifically:

• Active account data: retained for the life of the account plus 2 years after closure.
• Transaction records: retained for 7 years for tax and legal compliance.
• Support communications: retained for 3 years.
• Usage/analytics data: retained in anonymized form indefinitely; identifiable usage data deleted after 24 months.

You may request deletion of your account and personal data at any time (see Section 7). Legal and financial records may be retained longer as required by law.

6. Data Security

We implement industry-standard security measures including: TLS/HTTPS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication options for accounts, regular third-party security audits, and role-based access controls limiting employee access to data.

However, no system is 100% secure. In the event of a data breach affecting your information, we will notify you within 72 hours as required by applicable law.

7. Your Rights and Choices

Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate data through your account settings or by contacting us.
• Deletion: Request deletion of your account and associated personal data, subject to legal retention requirements.
• Portability: Request your data in a machine-readable format.
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the link in any email, or through your account notification settings.
• Restrict processing: In certain circumstances, request that we limit how we use your data.

To exercise any of these rights, contact us at privacy@barnwellhub.com. We will respond within 30 days.

8. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information is collected, used, shared, or sold; the right to delete personal information; and the right to opt out of the sale of personal information. BarnwellHub does not sell personal information. To submit a CCPA request, contact privacy@barnwellhub.com.

9. Children's Privacy

BarnwellHub is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by sending an email to your registered address and/or posting a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after changes take effect constitutes acceptance.

11. Contact Us

For privacy-related questions or to exercise your rights:

BarnwellHub Privacy Team
Email: privacy@barnwellhub.com
Mail: 123 Main St Suite 100, Austin TX 78701
Phone: +1 512 555 1825