Privacy Policy

Cantr Technologies LLC (“Cantr”, “we”, “us”) provides a barn-management platform used by equestrian facilities to run their business. This Privacy Policy explains what personal information we collect from the two audiences that interact with Cantr — the barns that subscribe to Cantr, and the end users (riders, boarders, parents, guardians, staff) invited into a barn.

Information we collect

When a barn signs up for Cantr, we collect:

• Barn name, address, phone, and business type.
• Administrator name, email, and password (hashed with bcrypt — never stored in plaintext).
• Payment details for Cantr's subscription (processed by Stripe; we never see your card number).

When an end user is invited by their barn, we may collect:

• Name, email, phone number, and role at that barn.
• Horse records, lesson bookings, invoices, and any documents the user uploads.
• Notification preferences (email, SMS, push) — SMS defaults to off; the user must opt in explicitly.

How we use it

Only for running Cantr:

• Delivering the features the subscribing barn asked for (schedules, invoices, records, contracts).
• Sending transactional notifications (lesson reminders, booking confirmations, invoice notices).
• Product analytics on our own operations (uptime, error rates) — aggregated, never sold.

We do not sell, rent, or share your personal information with advertisers or data brokers. Full stop.

Who runs the data

The barn you belong to is the “controller” of the information about you.

• Your barn admin can see, edit, and export records you create inside their tenant.
• Other barns on Cantr cannot see your data — every record is scoped by barn_id.
• Cantr staff will only access your data with a support case open, and every access is logged and shown to your admin under Reports → Audit.

Third-party processors

• Stripe — payment processing.
• SendGrid — transactional email delivery.
• Twilio — SMS delivery to opted-in recipients only.
• Google — optional Google Sign-In.
• Emergent object storage — encrypted at rest, tenant-scoped.

Each is contractually bound to process data only on our instructions.

Your rights

You can, at any time:

• Log in and edit or delete records you created.
• Ask your barn admin to archive your account.
• Email info@cantr.us to request a data export or full deletion — we respond within 30 days.
• Reply STOP to any SMS to unsubscribe (see the SMS Consent page for detail).

Security

Passwords are bcrypt-hashed. Sessions use httpOnly cookies plus signed bearer tokens. Every tenant is isolated by barn_id, enforced at both the database layer and every API route. File uploads are scoped to the tenant that uploaded them and served through authenticated URLs.

Retention

We retain your data for as long as your barn stays on Cantr, plus 90 days after cancellation so admins can re-activate without losing history. After that we delete or fully anonymize the records on request.

Changes to this policy

Material changes are announced by email to every barn admin at least 30 days before they take effect. Continued use after the effective date means you agree.

Contact

Cantr Technologies LLC — info@cantr.us. We reply to every email from a real human, usually within a few hours.