Privacy Policy

Last updated: October 8, 2026

1. What We Collect

When you use Prybar, we collect:

  • Account info: Name, email, phone number, business name, trade type
  • Customer messages: SMS conversations between your customers and your Prybar text line
  • Lead data: Customer names, phone numbers, addresses, and service requests captured through conversations
  • Payment info: Processed securely by Stripe — we never see or store your full card number
  • Usage data: Message counts, conversation counts, feature usage for billing and product improvement

2. How We Use It

  • To operate and improve the Prybar service
  • To send and receive SMS messages on behalf of your business
  • To generate automated responses to your customers
  • To process payments and manage subscriptions
  • To send you notifications about your account and conversations
  • To provide customer support

3. How We Protect It

  • All data is encrypted in transit (TLS) and at rest
  • Database access is controlled via row-level security (RLS) — you can only see your own data
  • Payment processing is handled entirely by Stripe (PCI compliant)
  • We use Supabase for data storage — Supabase is ISO 27001 certified and encrypts all customer data with AES-256 at rest and TLS in transit
  • Access to production systems is restricted and logged

4. Third-Party Integrations

Prybar offers optional integrations that you can choose to connect:

  • Google Calendar (optional): If you connect your Google Calendar, Prybar can create events when appointments are booked and check for scheduling conflicts. We only access calendar data with your explicit permission, and you can disconnect at any time from your settings. We do not read, store, or share your calendar data beyond these purposes. Access can be revoked at any time via your Google Account permissions.

Google API Limited Use

Prybar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

  • Raw and derived Google user data is used only to provide and improve the single user-facing feature you enabled (booking appointments and preventing double-booking). It is never used or transferred to create, train, or improve generalized or foundational machine learning or artificial intelligence models.
  • We request exactly one Google scope — calendar.events — and read event times and titles solely to detect conflicts. We do not read, index, or retain the body of your calendar.
  • Data received from Google APIs is never sold, and never transferred to third parties for advertising, marketing, or model-training purposes.
  • Our use of Google user data is limited to providing the feature above and is never used for serving advertisements.

5. Who We Share With

We share data only with the services required to operate Prybar:

  • Telnyx: To send and receive SMS messages
  • OpenAI: To generate automated responses (message content is sent for processing)
  • Stripe: To process payments
  • Supabase: To store data
  • Vercel: To host the application

We do not sell your data. We do not use your customer conversations for advertising. We do not share your data with third parties for marketing purposes. No mobile information collected as part of our SMS messaging program will be shared with third parties or affiliates for marketing or promotional purposes.

6. Your Rights

  • You can export all your data at any time from the dashboard
  • You can delete your account and all associated data by contacting us
  • You can update your business information from the settings page
  • California residents have additional rights under CCPA — contact us to exercise them

7. Customer Data

You are responsible for your customers' data. By using Prybar, you agree to:

  • Only use Prybar to communicate with customers who have contacted your business
  • Comply with all applicable SMS and telemarketing regulations (TCPA, etc.)
  • Not use Prybar for spam or unsolicited messaging

8. Cookies

We use essential cookies for authentication (keeping you logged in). Google OAuth also sets a short-lived session cookie during sign-in via Google. We do not use advertising or tracking cookies.

9. Changes

We may update this policy from time to time. We'll notify you of significant changes via email.

10. Contact

Questions? Email us at hello@prybar.ai