Skip to main content
Skip to content
BarabaraPost a job

Privacy Policy

Last updated: 17 July 2026

Who we are

Barabara is operated by Burdtec Industries Ltd, a company registered in England and Wales (company number 17069644) with its registered office at 69 Toxteth Street, Manchester, England, M11 1EQ (“we”, “us”). We are the data controller for the personal data described here. Contact: privacy@barabara.app.

What we collect

  • Account & profile — name, email address, and (if you sign in with Google) your Google account identifier; your bio, skills, trading name, profile photo, and location, including approximate coordinates so jobs and professionals can be shown near you.
  • Marketplace activity — jobs you post (including photos), applications and cover letters, messages, reviews and star ratings, saved jobs, and team membership.
  • Verification data — if you choose to get verified: identity checks are performed by Stripe Identity, which processes your photo ID document and a selfie (biometric data) on our behalf — we receive and store only the outcome (verified / needs review), not the images. Trade qualification and insurance documents you upload are stored by us and read by automated text-recognition software running on our own infrastructure to pre-fill details for review.
  • Payments — handled by Stripe. We store your Stripe customer and subscription identifiers and your plan; we never see or store your card number. If you join our affiliate programme, the payout bank details you provide are stored encrypted (AES-256) and are only decrypted to process payouts.
  • Technical & safety data — error reports and performance data (with message text, inputs, and media masked before they leave your browser), push-notification subscriptions you opt in to, and the IP address recorded when an account is created through a referral link (used only for fraud prevention).

The AI job planner

If you use the AI planner (Pro and above), we send your bio, skills, location, your typed goal, and a shortlist of matching job posts to OpenAI to generate your plan. OpenAI processes this as our service provider under API terms that do not permit it to use your data to train its models. Your last 50 planner results are stored in your account history and are deleted when you delete your account.

How we use your data, and on what basis

  • To run the marketplace (profiles, jobs, matching, messaging, payments, verification badges) — necessary to perform our contract with you.
  • To keep the platform safe (fraud prevention, moderation, rate limiting, error monitoring) — our legitimate interest in a safe, working service.
  • To send you emails and push notifications — job alerts and digests only with your consent, and every email includes an unsubscribe link; essential service emails (e.g. payment failure) are sent as part of our contract.
  • To meet legal obligations — tax and accounting records for paid subscriptions.

We do not sell your personal data, and we do not use it for advertising.

Who we share it with

Service providers acting under contract for us:

  • Clerk — sign-in and account security
  • Convex — our database, hosted in the EU (eu-west-1)
  • Vercel — website hosting
  • Stripe — billing, and Stripe Identity for optional ID verification
  • Resend — transactional email delivery
  • Sentry — error monitoring (masked as described above)
  • OpenAI — AI planner requests (as described above)
  • UploadThing — storage for job photos
  • CARTO / OpenStreetMap — map tiles and location search: when you view a map or search for a place, your IP address (and the place name you typed) is sent to these services to return results
  • Companies House — if you verify a business, we look up the company number you provide on the public register
  • Your browser’s push service (Apple, Google, or Mozilla) — if you enable push notifications

Some of these providers process data outside the UK (including in the United States). Where they do, transfers are protected by UK-approved safeguards such as the UK International Data Transfer Agreement / Addendum or the UK–US Data Bridge.

Retention

We keep your data while your account is active. If you delete your account (Settings), your profile, jobs, applications, conversations, planner history, and push subscriptions are removed. We retain invoicing records (legal obligation), and minimal fraud-prevention and audit records, for as long as the law requires.

Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data; ask us to restrict or object to processing; and request a portable copy. Email privacy@barabara.app and we will respond within one month. You can also complain to the ICO at ico.org.uk.

Age

Barabara is for adults. You must be 18 or over to use it.

Changes

If we make material changes to this policy we will notify you by email or in-app before they take effect.

Contact

Questions? Email privacy@barabara.app.