Privacy Policy

• Bar owners and managers who sign up and pay for BarOS.
• Staff (bartenders, servers, kitchen and others) whose employer adds them to BarOS.
• Website visitors to proofbaros.com.

When a bar puts its staff's information into BarOS, the bar decides what is entered and how it is used. We store and process it for the bar so the app works. If you are a staff member with a question about your data, ask your employer first. We will help them, and you, as described in Section 7.

• Account details: name, email address, role, which bar you belong to, password (stored only as a scrambled hash we cannot read) and two-factor settings. These come from you or the owner who invited you.
• Work schedule: shifts, availability, time-off requests and their reasons, and shift swap requests, from you and your managers.
• Tips and hours: hours worked, tip payouts, team, and the night's credit tips, cash tips and sales entered to calculate tip-outs, from you and your managers.
• Bar operations: recipes, prep, inventory counts, orders, distributors, sales figures and point-of-sale imports (such as Toast CSV files, which can include staff names, hours and tips), uploaded documents, notes, comments and @mentions, from you and your coworkers.
• Billing: the owner's name and email, bar name and subscription status. Card details go straight to Stripe. We never see or store your full card number.
• Agreement records: which version of these terms you accepted, and when.
• Technical: IP address, browser type and request logs, used to keep the service secure and working, and a login token stored in your browser so you stay signed in.
• Messages to us: anything you send to our email addresses.

We do not ask for Social Security numbers, bank details, home addresses, phone numbers, birth dates or pay rates.

• To run BarOS: showing schedules, calculating tip-outs, tracking inventory, sending notes.
• To create accounts, send invites, password resets and service emails.
• To bill the bar's subscription.
• To keep the service secure: preventing abuse, investigating problems, limiting repeated login attempts and keeping an audit record of changes to tips and staff roles.
• To support you when you contact us.
• To improve BarOS using combined data that does not identify any person or bar.
• To follow the law and enforce our Terms.

We do not use your information to train AI models, and we do not use automated decision-making that has legal effects on you.

We share information only with the service providers that run BarOS for us, and only what each one needs:

• Supabase: database, login and file storage. Receives all app data.
• Vercel: hosts the app and website. Receives requests and technical logs.
• Stripe: payment processing. Receives the owner's email, bar name and card details (collected by Stripe directly).
• Resend: sends app emails. Receives names, email addresses, and invite and reset messages.
• Google Workspace: our company email. Receives anything you email us.
• Google Fonts: supplies the app's fonts. Receives your IP address and browser details when the app loads.

Inside your bar: what your coworkers see depends on the roles and permissions your bar sets. For example, managers can see all tip-outs and staff can see their own.

Other cases: we may disclose information if the law requires it, to protect someone's safety, to investigate fraud or security problems, or as part of a merger or sale of our business. We would tell affected customers about a sale.

• While the bar's account is open, we keep its data so the app works.
• When an owner closes the bar's account, its data, profiles and logins are deleted from the live system right away. Copies may remain in our database provider's backups until those backups expire.
• When a staff member is removed, their login ends. Records they are part of, like past schedules and tip history, stay with the bar because they are the bar's records.
• Billing records are kept by Stripe and by us as long as tax law requires.

• Everything travels over encrypted connections (HTTPS), and our database provider encrypts stored data.
• We use access controls designed to keep each bar's data separate and to limit what each user can see and change based on their role.
• Passwords are stored only as scrambled hashes. Two-factor login is available.
• Access to production systems is limited to us.

No system is perfectly secure. If a breach affects your information, we will notify affected bars, and individuals where the law requires it, without unreasonable delay and within the time Ohio law sets.

• See or correct your information: most of it is visible and editable in the app. Owners and managers can update staff details.
• Export: owners and managers can export inventory, ordering and tip records.
• Delete: owners can close the bar's account from Settings. Staff can ask their employer to remove them, or email us.
• Emails: you can't opt out of service emails like password resets, because the app needs them. We do not send marketing email without asking.

To make a request, email support@proofbaros.com. We may need to confirm who you are, and for staff requests we may check with your employer.

BarOS is for workplaces and is not meant for anyone under 16. We do not knowingly collect information from children under 13. If you think we have, contact us and we will delete it.

BarOS is operated from the United States. Our providers may process and store data in the United States or other countries.

If we make a material change to this policy, we will email owners or show a notice in the app before it takes effect.

Questions about your information? Write to us at the address below.