StallWise

Last Updated: September 24, 2026

1. Introduction

This Privacy Policy describes how Showsafe LLC ("Company," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our StallWise service ("Service"), including our website at app.stallwise.com, our web application, and our mobile applications for iOS and Android.

This Privacy Policy applies to all users of the Service, including account holders, team members, clients, and visitors to our website.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

• Full name (first and last)
• Email address
• Phone number (optional)
• Business/facility name
• Business address
• Password (stored in hashed form; we never store plaintext passwords)
• Profile photograph (optional)

2.2 Facility and Operational Data

In the course of using the Service, you may enter and store:

• Horse Records: Names, breed, age, registration numbers, photographs, ownership details, medical history, vaccination records, farrier records, and training notes.
• Client Information: Client names, contact details, horse assignments, billing records, and communication history.
• Facility Data: Stall assignments, arena schedules, pasture management, and maintenance records.
• Event Data: Show entries, competition results, event schedules, and travel plans.
• Staff Information: Staff names, contact details, roles, schedules, and task assignments.
• Feeding Programs: Feed types, quantities, schedules, and supplement records.
• Training Logs: Session details, progress notes, rider information, and program outlines.
• Inventory Data: Feed, supplies, equipment, and tack records.

2.3 Financial Data

• Subscription Billing: Payment card details are collected and processed by our payment processor, Stripe. We do not store full credit card numbers on our servers. We retain only the last four digits and card type for your reference.
• Business Financial Records: Invoices, payments, expenses, and financial reports you create within the Service are stored on our servers.

2.4 Usage and Analytics Data

We automatically collect certain information about how you access and use the Service:

• IP address and approximate geographic location
• Browser type and version
• Device type, operating system, and screen resolution
• Pages visited, features used, and actions taken within the Service
• Date and time of access
• Referring URL
• Session duration and frequency of use
• Error logs and performance data

2.5 Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy.

2.6 Communications

We collect information from your communications with us, including support requests, feedback, and email correspondence.

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Legal Basis (GDPR)
Providing and operating the Service	Performance of contract
Processing payments and managing subscriptions	Performance of contract
Sending transactional emails (receipts, notifications, alerts)	Performance of contract
Providing customer support	Performance of contract / Legitimate interest
Improving and developing the Service	Legitimate interest
Analyzing usage patterns and trends	Legitimate interest
Preventing fraud, abuse, and security threats	Legitimate interest / Legal obligation
Sending marketing communications (with consent)	Consent
Complying with legal obligations	Legal obligation
Enforcing our Terms of Service	Legitimate interest

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share information with a limited number of third-party service providers who help us operate and improve the Service. These providers are contractually bound to use your information only as necessary to provide services to us and are required to maintain appropriate security measures:

Provider	Purpose	Data Shared
Stripe	Payment processing	Payment card details, billing address, transaction amounts
Anthropic	AI structuring of Barn/Horse Notes (optional feature)	The text of a note you choose to structure, the date, and the names of your horses, stalls, staff, clients, vendors, inventory items and areas so the note can be matched to your records. Audio is never sent: dictation happens on your device or in your browser. Anthropic does not use this data to train its models.
Twilio	Text message (SMS) delivery, only to people who opted in	Mobile phone number, message content
Email service provider	Transactional and marketing emails	Email address, name, email content
Cloud infrastructure provider	Hosting and data storage	All Service data (encrypted at rest)
Cloudflare	CDN, DDoS protection, SSL	IP addresses, request metadata

4.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, including to:

• Comply with a subpoena, court order, or similar legal process.
• Enforce our Terms of Service or other agreements.
• Protect the rights, property, or safety of Showsafe LLC, our users, or others.
• Detect, prevent, or address fraud, security, or technical issues.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice in the Service before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you have explicitly consented to the sharing.

4.5 Text Messages (SMS)

StallWise can send text messages about your account: a boarding request that was approved, declined, completed or cancelled, or a task that is overdue for the staff member it is assigned to. Texts are off by default. A boarder turns them on in the StallWise portal under More → Text messages → "Text me updates"; staff opt in on their staff record. Message frequency varies with activity in your barn. Message and data rates may apply. You can stop at any time by turning the switch off or by replying STOP to any message; reply HELP or email [email protected] for help. We use Twilio to deliver these messages. Your mobile phone number and your text message consent are used only to send these notifications. They are not sold, and they are not shared with third parties or affiliates for their marketing purposes.

4.6 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. For example, we may share statistics about overall usage trends within the equestrian industry.

5. Data Retention

5.1 Active Accounts

We retain your information for as long as your account is active and as needed to provide the Service.

5.2 After Account Termination

• Grace Period: After account cancellation or termination, we retain Your Data for 30 days to allow for data export and account reactivation.
• Deletion: After the 30-day grace period, Your Data is permanently deleted from our active systems within 30 days.
• Backups: Your Data may persist in encrypted backups for up to 90 additional days, after which backups are rotated and the data is permanently removed.

5.3 Legal Retention

We may retain certain information for longer periods as required by law (e.g., financial records for tax purposes) or to resolve disputes and enforce agreements.

5.4 Usage Data

Anonymized usage and analytics data may be retained indefinitely for product improvement and industry research purposes.

6. Your Rights

6.1 Access and Portability

You have the right to:

• Access the personal information we hold about you.
• Receive a copy of your data in a structured, commonly used, machine-readable format (CSV, JSON).
• Export your facility data, horse records, and financial records through the Service's built-in export tools.

6.2 Correction

You have the right to correct inaccurate or incomplete personal information. You can update most information directly through the Service settings. For information that cannot be updated through the Service, contact us at [email protected].

6.3 Deletion

You have the right to request deletion of your personal information. You can:

• Delete individual records within the Service.
• Request full account deletion, which will result in permanent removal of all your data (subject to legal retention requirements).

6.4 Restriction and Objection

You have the right to:

• Restrict the processing of your personal information in certain circumstances.
• Object to processing based on legitimate interests.
• Opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or updating your notification preferences in the Service.

6.5 Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

6.6 Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days (or within any shorter timeframe required by applicable law). We may ask you to verify your identity before processing your request.

7. Security Measures

We implement comprehensive technical and organizational security measures to protect your information:

7.1 Technical Safeguards

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (SSL/HTTPS).
• Encryption at Rest: All stored data is encrypted using AES-256 encryption.
• Password Security: Passwords are hashed using industry-standard bcrypt algorithms and are never stored in plaintext.
• Access Controls: Role-based access controls ensure users can only access data they are authorized to view.
• Session Management: Secure session tokens with automatic expiration and invalidation.
• DDoS Protection: Cloudflare-powered protection against distributed denial-of-service attacks.
• Firewalls and Intrusion Detection: Network-level security measures to prevent unauthorized access.

7.2 Organizational Safeguards

• Access to user data is restricted to authorized personnel on a need-to-know basis.
• All employees and contractors are bound by confidentiality agreements.
• Regular security reviews and vulnerability assessments.
• Incident response procedures for potential data breaches.

7.3 Breach Notification

In the event of a data breach that affects your personal information, we will notify you by email and through the Service within 72 hours of becoming aware of the breach (or as otherwise required by applicable law). We will also notify relevant supervisory authorities as required.

8. Children's Privacy

If we learn that we have collected personal information from a child under 13, we will take steps to promptly delete that information. If you believe we have collected information from a child under 13, please contact us at [email protected].

Users between the ages of 13 and 18 may use the Service only with the involvement and consent of a parent or legal guardian who agrees to be bound by these Terms.

9. International Data Transfers

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

For users in the European Economic Area (EEA), United Kingdom (UK), or other jurisdictions with data transfer restrictions:

• We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for transfers of personal data from the EEA to the United States.
• We implement supplementary measures as necessary to ensure an adequate level of data protection.
• Our Data Processing Agreement (available at Data Processing Agreement) includes the applicable SCCs.

10. Cookie Policy

We use cookies and similar tracking technologies to operate and improve the Service. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

11. CCPA Compliance (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

11.1 Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your information.

11.2 Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.

11.3 Right to Correct

You have the right to request correction of inaccurate personal information.

11.4 Right to Opt Out of Sale/Sharing

We do not sell your personal information and do not share it for cross-context behavioral advertising. Therefore, there is no need to opt out.

11.5 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

11.6 Categories of Personal Information

Under CCPA categories, we collect:

• Identifiers: Name, email, phone number, IP address.
• Commercial Information: Subscription records, payment history.
• Internet Activity: Browsing and usage data within the Service.
• Professional Information: Business name, role, facility information.

11.7 Exercising CCPA Rights

To exercise your CCPA rights, contact us at [email protected] or call us. We will verify your identity and respond within 45 days.

12. GDPR Compliance (EEA/UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), the following additional provisions apply:

12.1 Data Controller

Showsafe LLC acts as the data controller for personal information collected through the Service. For data entered by users about their clients, staff, and operations, we act as a data processor on behalf of the user (the data controller).

12.2 Legal Bases for Processing

We process your personal information based on the legal bases outlined in Section 3 above: performance of contract, legitimate interests, consent, and legal obligations.

12.3 Your GDPR Rights

In addition to the rights described in Section 6, EEA/UK residents have the right to:

• Lodge a complaint with a supervisory authority in your country of residence.
• Request information about our data processing activities.
• Object to automated decision-making, including profiling (we do not engage in automated decision-making that produces legal effects).

12.4 Data Protection Officer

For GDPR-related inquiries, contact our designated privacy contact at [email protected].

12.5 Data Processing Agreement

Enterprise customers who require a Data Processing Agreement (DPA) for GDPR compliance can access our standard DPA at Data Processing Agreement or request a customized version by contacting [email protected].

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will:

• Update the "Last Updated" date at the top of this page.
• Notify you of material changes via email or a prominent notice in the Service at least 30 days before the changes take effect.
• Obtain your consent for material changes where required by applicable law.

We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy Inquiries: [email protected]
• Legal Inquiries: [email protected]
• General Support: [email protected]
• Website: https://app.stallwise.com
• Company: Showsafe LLC