Privacy, in plain language.

Last updated: October 26, 2026

This page covers the barformpos.com website — waitlist included — and Barform POS as venues use it: the iPad app, the back office and the booking pages. It's short because we ask for little and do nothing sneaky with it.

The website: what we keep

When you join the waitlist we ask for your email and, optionally, your bar's name. If you use Ask Barform, we also keep your conversation for a while (see below). This site sets no cookies and runs no third-party trackers or analytics.

The website: what we use it for

To write to you about your access to Barform POS: your spot on the list, founder terms, and launch news. Nothing else. We never sell or share the list.

The website: where it lives

Your email is stored with Resend (resend.com), the service we use to send email, on servers in the United States.

The website: how to leave

Write to access@barformpos.com — or reply to any email from us — and we'll take you off the list. No hidden steps, no delays.

The website: Ask Barform

Ask Barform is an AI assistant that answers questions about Barform from our help pages and this website. When you use it, here or in the web demo, we send your question, the conversation so far and the page's language to Anthropic (anthropic.com), the AI provider that writes the answers, in the United States, and in the web demo also the demo bar's made-up figures it looks up to answer. Anthropic doesn't use it to train its models and deletes it within 30 days, unless it's flagged for breaking Anthropic's usage rules, in which case it can be kept for up to 2 years. We keep each conversation for 90 days to check the answers and improve the help pages, then delete it; after that we keep only counts, such as how many questions were asked and about what. We use your IP address only to limit abuse, stored as a scrambled code that changes every day and deleted with the conversation. Ask Barform sets no cookies and stores nothing on your device. Please don't type personal or payment details into it.

The app: whose data it is

Every bar that runs Barform POS operates its own system: the staff accounts, customer house accounts, sales and shifts inside it belong to that venue. Barform (Third Space Ventures LLC) stores and processes that data on the venue's behalf — and for nothing else. If you're a guest at, or work for, a bar that uses Barform, that bar is your first stop for questions about your data, and we back it on every request.

The app: what it records

What it takes to run service: staff names, IDs and pay rates (who rang what, plus time-clock and shift records), the email each back-office user signs in with, the names on customer house accounts and their free-text contact line (which may hold a phone or an email), and purchase history (orders and payments). For each booking it keeps the guest's name, phone number, email and notes — so the bar can take and manage its bookings, and so the booking messages described below reach the guest — plus any reply the guest sends to those messages. For each paired iPad it keeps one device identifier, sent once at pairing, and the app and iPadOS versions the iPad reports while it's in use, with the last time it checked in, so the back office can show which iPads are online and up to date. All of it stays linked to the venue's accounts, because that's what a point of sale is for.

The app: where the data goes

Everything operational travels encrypted, and only to these services, each for its own job:

• Supabase (supabase.com) — Barform's backend, in the United States: the database, where each venue's records are kept apart from every other's, the sign-ins and the pictures venues upload.
• Cloudflare (cloudflare.com) — a copy of that database, backed up every night so a bar's records survive even losing the backend. The backup runs on GitHub (github.com), which keeps nothing once it's done.
• Vercel (vercel.com) — runs the back office and the booking pages, and counts their page views, without cookies.
• Sentry (sentry.io) — crash and error reports from the iPad and the back office, used only to find and fix problems. No user details are attached, and email addresses are scrubbed out before a report is sent. An iPad's report is tied to the venue's account — it carries the venue and the app's build and version — never to a guest or a staff member.
• Stripe (stripe.com) — the bar's subscription, and the booking deposits a bar asks for. Cards are typed on Stripe's own page, so Barform never sees the number, and a deposit goes straight to the bar's own Stripe account.
• Twilio (twilio.com) and WhatsApp (Meta) — the texts and WhatsApp messages a bar sends its guests about their bookings, and the alerts to the bar's own phone.
• Resend (resend.com) — every email: the ones staff get to open their account, sign in or reset their access, guests' booking emails and the bar's notices.
• Anthropic (anthropic.com) — the AI provider that writes Ask Barform's answers, in the United States. When an admin or manager asks it a question in the back office, the question, the conversation so far and what it looks up to answer go there: the figures, staff names where a report shows them (who counted a drawer or the safe, who approved a no-sale), and the explanations and reasons staff type beside them (why a drawer was short or over, why cash went in or out). Anthropic doesn't use any of it to train its models. No one's pay rate or individual pay, no PINs, and no guests' names, contact details, notes or replies ever reach it.

Apart from those page counts there are no analytics, no ad networks, and nothing else phones home.

The app: what it never does

No tracking, no ads, and never selling or sharing data for advertising. The app doesn't read your location or your address book, and payment cards never touch it: at the bar, card payments live on the venue's terminal, as always, and a subscription or a booking deposit is paid on Stripe's own page.

How long we keep it

Operational records — sales, shifts, counts — stay for as long as the venue's subscription is active, for its own closes and books. When a subscription ends, the venue's account turns read-only so it can export what it needs, and three months after the end we delete the venue and all its data; subscribing again before then brings everything back as it was. Conversations with Ask Barform — in the back office and on this site — are kept for 90 days, then deleted. Waitlist emails stay until you ask off the list. A venue can also ask us to delete its data at any time, and we do.

Your rights

You can ask what we hold about you, have it corrected, or have it deleted (the ARCO rights under Mexico's data-protection law — and simply the decent thing anywhere else). If your data lives in a venue's Barform system, the fastest route is that venue; either way, access@barformpos.com reaches us.

Minors

Barform POS is a tool for running bars. It isn't directed at minors, and we don't knowingly collect their data.

Changes to this page

If our data practices change, this page changes with them — the date at the top tells you when. Nothing gets loosened quietly.

Reservation text messages

If you book a table at a bar that runs Barform POS and tick the messages box on the booking form, that bar sends you, by SMS or WhatsApp, messages about that booking: that your request arrived, the confirmation, a reminder before your visit, any change or cancellation, a deposit request if the bar asks for one, and a thank-you the day after if the bar sends one. Message frequency varies: one message for each of these that happens to your booking. Message and data rates may apply depending on your mobile plan. To stop them, reply STOP at any time: by text, Barform's number stops texting you; on WhatsApp — where ALTO and BAJA work too — that booking's messages stop. By text, reply HELP for help. If you also give an email, the same messages can reach you by email too; the box covers only texts and WhatsApp. When you book by phone or in person, the bar can also send these messages to the number or email you give it; there's no box to tick in that case. Your number and your consent are used only for those messages and are not shared with third parties for marketing. Texts and WhatsApp messages are sent through Twilio (twilio.com) on the bar's behalf — WhatsApp messages then travel through WhatsApp, a Meta service — and emails through Resend (resend.com).

Who answers

Barform POS is a product of Third Space Ventures LLC. If anything on this page isn't being honored, write to us and we'll fix it.