Privacy Policy - Baforia

Who this policy covers

This Privacy Policy describes how Baforia, a product of Barlet Tech LLC, handles information in connection with the Baforia product. It does not describe any other Barlet Tech LLC product.

Information Baforia collects

Account and authentication data - such as your login identifier and a securely stored password credential.
Organization and Member data - the business information you or your Organization enter into Baforia, including Organizations, Members, roles, and authority assignments.
Business operating data - Conversations, Work Items, Knowledge Items, Playbooks, Projects, and related records your Organization creates while using Baforia.
Phone number and SMS consent data - if you choose to enable SMS notifications, the phone number you provide, your consent status, and a history of consent events (grants and withdrawals).
Message delivery metadata - records that a message was sent, to whom, through which channel and provider, and whether it succeeded. Baforia does not store the text content of SMS messages in this delivery record.
Security and audit records - records Baforia keeps of certain actions taken within the product, for security and accountability purposes.

How Baforia uses information

Baforia uses this information to operate the product for you and your Organization, authenticate your account, deliver the notifications you have configured (including SMS notifications you have opted into), maintain security and audit records, and improve Baforia over time.

SMS consent and delivery

If you enable SMS notifications, Baforia records your consent (including the specific disclosure you agreed to and when), and uses your phone number solely to deliver the notifications described in the SMS Communications Policy. See SMS Consent for the full consent contract.

Service providers Baforia shares information with

Baforia uses third-party service providers to deliver parts of the product. Information is shared with them only as needed to provide the requested functionality:

Twilio, to deliver SMS messages to a phone number you have provided and consented to.
An email delivery provider, to deliver email messages Baforia sends.
AI providers (for example, OpenAI or Anthropic), when a Baforia feature you use involves AI-assisted processing. Only the information necessary for that specific feature is sent, solely to provide the requested functionality.

SMS/mobile opt-in data is not shared for marketing. No mobile information - including your phone number, SMS consent status, or SMS/text messaging originator opt-in data and consent - is shared with third parties or affiliates for marketing or promotional purposes. This does not affect Baforia's use of Twilio, described above, solely to deliver the SMS messages you have consented to receive.

Baforia does not sell personal data. Information is disclosed to these providers only to deliver the product to you, and otherwise only where required by law or necessary to protect the security of Baforia or its users.

Retention

Baforia does not currently implement a fixed, published retention schedule. Information is generally retained for as long as your Organization's account remains active, plus any additional period reasonably needed for security, audit, or legal purposes. This section will be updated if Baforia adopts a specific retention schedule.

Security

Baforia uses reasonable administrative and technical measures intended to protect information in its care. No method of storage or transmission is completely secure, and Baforia does not guarantee absolute security.

Your rights

Depending on your location, you may have rights to access, correct, or request deletion of your personal information. To exercise any of these rights, contact Contact and describe your request; Baforia will respond.

Changes to this policy

Baforia may update this Privacy Policy as the product changes.