Privacy Policy

Who this policy covers

This Privacy Policy describes how BAF, a product of Barlet Tech LLC, handles information in connection with the BAF product. It does not describe any other Barlet Tech LLC product.

Information BAF collects

Account and authentication data - such as your login identifier and a securely stored password credential.
Organization and Member data - the business information you or your Organization enter into BAF, including Organizations, Members, roles, and authority assignments.
Business operating data - Conversations, Work Items, Knowledge Items, Playbooks, Projects, and related records your Organization creates while using BAF.
Phone number and SMS consent data - if you choose to enable SMS notifications, the phone number you provide, your consent status, and a history of consent events (grants and withdrawals).
Message delivery metadata - records that a message was sent, to whom, through which channel and provider, and whether it succeeded. BAF does not store the text content of SMS messages in this delivery record.
Security and audit records - records BAF keeps of certain actions taken within the product, for security and accountability purposes.

How BAF uses information

BAF uses this information to operate the product for you and your Organization, authenticate your account, deliver the notifications you have configured (including SMS notifications you have opted into), maintain security and audit records, and improve BAF over time.

SMS consent and delivery

If you enable SMS notifications, BAF records your consent (including the specific disclosure you agreed to and when), and uses your phone number solely to deliver the notifications described in the SMS Communications Policy. See SMS Consent for the full consent contract.

Service providers BAF shares information with

BAF uses third-party service providers to deliver parts of the product. Information is shared with them only as needed to provide the requested functionality:

Twilio, to deliver SMS messages to a phone number you have provided and consented to.
An email delivery provider, to deliver email messages BAF sends.
AI providers (for example, OpenAI or Anthropic), when a BAF feature you use involves AI-assisted processing. Only the information necessary for that specific feature is sent, solely to provide the requested functionality.

BAF does not sell personal data. Information is disclosed to these providers only to deliver the product to you, and otherwise only where required by law or necessary to protect the security of BAF or its users.

Retention

BAF does not currently implement a fixed, published retention schedule. Information is generally retained for as long as your Organization's account remains active, plus any additional period reasonably needed for security, audit, or legal purposes. This section will be updated if BAF adopts a specific retention schedule.

Security

BAF uses reasonable administrative and technical measures intended to protect information in its care. No method of storage or transmission is completely secure, and BAF does not guarantee absolute security.

Your rights

Depending on your location, you may have rights to access, correct, or request deletion of your personal information. OWNER REVIEW REQUIRED - the specific regulatory frameworks BAF's privacy practices are intended to satisfy (for example GDPR, CCPA, or another framework), and the exact process for exercising these rights, have not yet been finalized. To ask a question about your information, see Contact.

Changes to this policy

BAF may update this Privacy Policy as the product changes.