Privacy Policy
Effective date: April 8, 2026
1. Introduction
Tribarro ("we", "us", or "our") operates the website tribarro.com and provides a website builder platform for local businesses (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service.
By using Tribarro, you agree to the collection and use of information in accordance with this policy. This policy applies to residents of the United States (including California), the European Union and European Economic Area, Brazil, and other Latin American countries.
2. Information We Collect
Account data
When you create an account, we collect your email address and name through our authentication provider, Neon Auth.
Business data
When you create or edit a site, we store the business information you provide: business name, phone number, address, hours, menu or service items, photos, and other content you enter into the editor.
Payment data
Payments are processed by Stripe. We do not store your credit card number or full payment details. We store your Stripe customer ID, subscription ID, plan, and subscription status for billing management.
Usage data
We use Vercel Analytics, a privacy-preserving analytics tool that does not use cookies or collect personal identifiers. It collects aggregated data such as page views and referral sources.
3. How We Use Your Information
- To provide, operate, and improve the Service
- To process payments and manage your subscription
- To send transactional emails (receipts, subscription notices, password resets)
- To respond to your support requests
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising.
4. Third-Party Service Providers
We share data with the following sub-processors to operate the Service. Each is bound by their own data processing agreements:
- Neon — database hosting (United States)
- Stripe — payment processing (United States / global)
- Cloudflare R2 — file and image storage (global CDN)
- Vercel — hosting and privacy-preserving analytics (United States)
We do not share your personal data with any other third parties except as required by law.
5. Cookies
Strictly necessary cookies
We use an authentication session cookie to keep you logged in. This cookie is strictly necessary for the Service to function and is exempt from consent requirements under GDPR Article 6(1)(b) and equivalent laws.
Consent preference cookie
We store your cookie consent preference in a cookie named tribarro_cookie_consent (value: accepted or declined). This cookie expires after one year.
Analytics
Vercel Analytics uses cookieless, privacy-preserving measurement. No personal data or device fingerprints are collected.
6. Data Retention
We retain your account and business data for as long as your subscription is active, plus 90 days after cancellation to allow for reactivation. After that period, your data is deleted.
Payment records are retained for seven years to comply with tax and financial regulations, in accordance with Stripe's data retention policies.
7. Your Rights
Depending on where you are located, you may have the following rights:
California residents (CCPA)
- Right to know what personal information we collect and how it is used
- Right to request deletion of your personal information
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
EU / EEA residents (GDPR)
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time (where processing is based on consent)
Brazil and Latin America residents (LGPD and applicable laws)
- Right of access to your personal data
- Right to correction of incomplete or inaccurate data
- Right to deletion of data processed with your consent
- Right to data portability
- Right to information about third parties with whom data is shared
- Right to revoke consent
To exercise any of these rights, email us at legal@tribarro.com. We will respond within 30 days.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 30 days before the changes take effect. Your continued use of the Service after that date constitutes acceptance of the updated policy.
9. Contact
For privacy-related inquiries, contact us at legal@tribarro.com.