Privacy Policy

Effective date: Oct. 30, 2026

The short version.

• We don't sell your information, and we don't use ad networks or track you across other sites.
• A barn owns the records it keeps in Pro. We never use them to market to its boarders, customers or staff.
• We name the companies that process personal information for us, including Stripe for payments, Resend for email, Twilio for texts and Anthropic for AI, and say what each one sees (section 5.2).
• The AI features in the Services use Anthropic, which does not train its models on what those features send it. Our authorized personnel also use AI coding assistants from Anthropic and OpenAI to maintain and support the Services, and those tools may see personal information during that work (section 6). Training on this data is switched off for those accounts.
• To see, correct, export or delete your information, email us (section 8).

Spur7 LLC, a Colorado limited liability company doing business as Board and Stable ("Board and Stable," "we," "us" or "our"), operates:

• the Board and Stable directory and website at www.boardandstable.com, including the barn owner and trainer dashboard (the "Site");
• Board and Stable Pro, barn management software at pro.boardandstable.com, including its staff app and the pages it provides to horse owners and customers of the barns that use it ("Pro"); and
• the My Horse app for horse owners, in Pro and at my.boardandstable.com ("My Horse").

Together these are the "Services." This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to everyone who uses the Services, and to people whose information a barn, trainer or other account holder enters into Pro.

1. Whose information, and our role

We handle information about three groups of people:

1. Account holders: barn owners, trainers, their managers and staff logins, directory account holders, and My Horse users.
2. People an account holder adds to Pro: boarders and other horse owners, co-owners and contacts, customers who pay a barn, event registrants, barn workers and emergency contacts. A barn decides what it records about these people and who at the barn can see it. We process that information for the barn to run the Services. If a barn entered your information, you may also want to contact the barn directly.
3. Visitors to the Site and people who send inquiries or submit forms.

2. Information we collect

2.1 Information you or an account holder give us

• Inquiry forms: your name, email address, phone number (optional) and message when you contact a facility or trainer, and details you choose to give, such as your horse's name, stall type and move-in date.
• Claims and submissions: your name, email address, phone number, role and supporting information when you claim a Listing or Trainer Profile, and business name, location, contact information and description when you submit a barn to be listed.
• Problem reports: your email address (optional) and a description of the issue.
• Lesson and booking requests: when you ask a barn for a lesson or booking from its public page, your name, email address, phone number and the time you asked for, sent to the barn.
• Search requests: the text you type into the Site's search box. We store it with a random session identifier, and with your account if you are signed in.
• Newsletter: your email address, and the state and disciplines you choose, when you subscribe to our market report.
• Dashboard content: photos, descriptions, pricing, amenities and other business information you upload or edit in the directory dashboard, and notes you give us to draft a Pro setup.
• Pro account information: name, email address, phone number, business name and address, sign-in credentials (passwords are stored hashed), and role.
• Records entered into Pro: owner, co-owner, contact and customer names, email addresses, phone numbers and mailing addresses; horse records, including health records, documents and photos; care logs, care photos, feed plans, tasks and training logs; staff names, contact details, roles, work days, task completions, pay rates and payments the barn records; invoices and payment history; messages; and documents, including boarding agreements and releases, which may list minors covered by a parent's or guardian's signature.
• Electronic signatures: when you sign a document in Pro, we record your typed name, your drawn signature, your email address, the time, and the network address and browser of the device you used. On a release form a barn shares by link, we also record your phone number (optional), your date of birth or your confirmation that you are 18 or older, an emergency contact, and the names of any minors your signature covers.
• Payments to a barn: when you pay a barn through Pro, Stripe collects your card or bank details. We receive only a token, the card or account type, the last digits, the amount and the status. When you pay a barn by card or bank through Pro, Stripe saves that payment method in the barn's Stripe account so you can turn on autopay. It is charged again only if you turn on autopay. If you turn on autopay, we record the version of the autopay authorization you accepted, when, and the network address and browser of the device you used.
• A barn's billing information: a barn that uses Pro past its free period keeps a card or bank account on file to pay its Board and Stable fees. The barn is set up as a billing customer of Board and Stable in Stripe. Stripe collects the card or bank details, including through its bank login if the barn links a bank account. We record the Stripe customer and payment method references, the payment method type and last digits, who added it and when, and the version of the payment authorization the barn accepted.
• Featured purchases: when you buy Featured placement, Stripe collects your payment details. We do not store your card number.
• Text message consent: your mobile number, and the time, network address, device and version of the consent wording you agreed to on the web form. We also record the time of your most recent opt-out or opt-in by text reply.
• My Horse: your name and email address, what you do in the app, such as the messages you send your barn and your notification choices, and any photos or documents you add. At my.boardandstable.com you can also keep records for your own horses without a barn: horse details, including the names and phone numbers of your vet, farrier, trainer and emergency contact, and the documents and photos you upload. There we also keep a one-way hash of the network address you signed up from. When you share records by link, we record the recipient you name, each time the link is opened or a document is downloaded (with the browser used, in plain text, and a one-way hash of the network address; only the network address is hashed), and the name and email address of anyone who asks you to renew it.
• Terms acceptance: the version of our terms you accepted and a fingerprint of their text, the time, your account or form, where you accepted, and the network address and browser of the device you used. In Pro, we also record when we showed you this Privacy Policy.
• Support, demos and other requests: the emails you send us, and the name, email address, phone number, business name and interests you give us when you ask for help, a demo or a consultation.

2.2 Information collected automatically

• Usage data: pages visited, links clicked, search queries, time spent and navigation, collected with Google Analytics and, on the Site and at my.boardandstable.com, PostHog. The user identifier we give these tools is a one-way hash of your email address or of your record number, never the address itself, and in Pro it is sent with the barn's record number.
• Device and log information: IP address, browser type, operating system, device type, language and the time of each request.
• Location: approximate location from your IP address. If you use "Near Me," your browser shares your precise location with the page. We use it only to sort results by distance and do not save it.
• Cookies: described in section 9.
• Email engagement: our email provider records when an email we send is opened and when a link in it is clicked (section 9.3).
• Push notifications: if you turn on push notifications in My Horse or the staff app, we store a device token.
• Usage metering for billing: in Pro, we record each billable action when it happens: the barn, the horse record, the type of action (such as a care log, care photo, completed task, invoice issued, document uploaded or requested, or training log), the user who performed it, the time, the billing month and the version of the fee schedule. We use these records to show each barn its running usage, to calculate its fees and to resolve fee disputes. They are kept separately from the records they describe. For a barn's lesson fee, we count the lessons held on the barn's schedule in Pro, grouped by the horse on the lesson, else by the client, else by the email address a public lesson request came from.

2.3 Information from public sources

Listings and Trainer Profiles are compiled from public sources, including Google Places data, the business's own website, state and association lists, and OpenStreetMap. This includes business names, addresses, phone numbers, websites, hours, photos and descriptions that are already public. On some Listings we show the Google star rating and rating count, and a short summary of public Google reviews written by artificial intelligence. We keep those summaries, ratings and rating counts. We do not store the text of Google reviews. Photos may be displayed directly from the business's own website.

2.4 Information from other sources

• Stripe sends us information needed to open and maintain a barn's connected payment account, and the status of payments.
• Email verification: we check whether business email addresses we plan to contact are deliverable, using ZeroBounce.

3. How we use information

We use information to:

• operate, maintain and improve the Services;
• answer search requests, and forward Inquiries to facilities and trainers;
• screen Inquiries and submissions for spam and scams;
• process and verify Claims, including by comparing a claimant's details with the business's website;
• keep a barn's records, send its invoices and messages, process payments to it, and share records with the people the barn chooses;
• show each barn its running usage, calculate and charge its Board and Stable fees, and send free-period reminders;
• process Featured payments;
• send transactional email, such as Inquiry confirmations, Claim updates, receipts, invoices, sign-in codes, care summaries and reminders;
• send outreach and marketing email to facility owners and trainers about their profiles and our products, and our market report to people who subscribe to it, which you can unsubscribe from at any time;
• understand how people use the Site, Pro and our dashboards so we can improve them;
• detect, prevent and address fraud, abuse and technical problems; and
• comply with legal obligations and enforce our terms.

We do not use information a barn enters about its boarders, customers or workers to market to those people.

4. Artificial intelligence

The Services use Anthropic's Claude models, through Anthropic's commercial API, for these tasks:

Under Anthropic's commercial API terms, inputs and outputs are not used to train its models. Anthropic may keep inputs and outputs for a limited period under its commercial terms, for example for safety review. In the Services themselves, no AI provider other than Anthropic receives personal information. Our authorized personnel's use of AI development and support tools is described in section 6. AI output can be wrong, and in Pro it is a suggestion the barn reviews.

5. How we share information

We do not sell personal information, and we do not share it with advertising networks.

5.1 Inside the Services

• Barns, owners and workers. A barn decides what its horse owners, customers and workers can see. Care logs, care photos, invoices, documents and messages a barn shares are visible to the owner of that horse. Workers see the tasks and notes for the horses they cover and their own pay, not invoices or other workers' pay.
• My Horse. My Horse is on by default for barns that use Pro. It shows a horse owner the horses they own at barns that use Pro, and the care each barn records for them. Where they are turned on for the barn, it also shows the horse's feed plan and a button to message the barn. At my.boardandstable.com, a horse owner can also share records with a barn through a link that expires. Anyone with the link sees what the owner chose to share, until the link expires or is revoked. Anything they download stays with them.
• Care summaries. If a barn turns on care summaries, its horse owners receive email summaries of their horse's care. Owners can change their notification choices in their settings.
• Messages. In-app messages between a barn and an owner are visible to the barn's authorized users and the owner in the conversation. In a group conversation the barn creates, every member sees the messages and the names of the other members. Messages between a barn and its staff are visible to the barn's authorized users and the staff in the conversation.
• Inquiries. When you send an Inquiry, your name, email address, phone number and message go to the facility or trainer. Problem reports and barn submissions come to us, not to the business.
• Public profiles. A claimed Listing or Trainer Profile is public by its owner's choice. A barn can publish selected profile information from Pro to its directory Listing.

5.2 Service providers

These providers process personal information for us. We update this list before a new provider begins handling personal information:

Stripe also acts for its own purposes under its own privacy policy, for example to verify identity and prevent fraud. Stripe's privacy policy governs its handling of payment data.

5.3 Other disclosures

We may disclose information when we believe the law requires it, such as in response to a subpoena or court order; to protect the rights, property or safety of anyone; or to enforce our terms. If Board and Stable is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will notify you by email or a prominent notice on the Site before your information becomes subject to a different privacy policy.

6. Who at Board and Stable can see information

Access to production data is limited to authorized personnel who operate the Services, and to the development and support tools they use to support, maintain and develop them. Those tools include AI coding assistants from Anthropic (Claude Code) and OpenAI (Codex). These assistants may read production data, including personal information, during sessions our authorized personnel run. Training on this data is switched off for those accounts. We do not give access to contractors or other third parties except the service providers listed in section 5.2.

7. Data retention

• Pro records (horses, owners, invoices, documents, care logs and messages) are kept while the barn's account is open. A barn can archive horses and owners; archiving is not deletion. A barn can also delete a horse or an owner, except an owner with an agreement attached. Deleting an owner deletes that owner's invoices and payment history. When a barn's account is closed, we delete its records within 90 days, except as listed below.
• Care photos taken in Pro are deleted from storage after 60 days. The care log text stays.
• Our billing records, including billing usage records and records of our fees to barns, are kept for 7 years after the transaction, for accounting, tax, fee disputes and legal compliance. A barn's own invoices and payment history are kept while its account is open, unless the barn deletes them. Stripe keeps its own records of the payments it processes.
• My Horse records at my.boardandstable.com are kept until you delete your account or ask us to delete them. Records added there without an account are deleted after 7 days unless you save them to an account.
• Search requests and email open and click records are kept for up to 24 months.
• Newsletter subscriptions are kept until you unsubscribe. We keep a record of an unsubscribe so we do not email you again.
• Text message consent records are kept for 4 years after the last message we send to that number.
• Inquiries, Claims and submissions are kept for as long as the related Listing or Trainer Profile exists, or until you ask us to delete them.
• Terms acceptance records are kept for as long as the account or relationship they relate to exists and as needed for legal purposes.
• Analytics data is kept under the retention settings of Google Analytics and PostHog.
• Backups: our database provider keeps a restore window of 1 day for Pro and My Horse and 6 hours for the Site. We also keep internal snapshots of directory Listings and Trainer Profiles, which may include business contact details.

8. Your rights and choices

You may ask us to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your information, subject to the exceptions in section 7 and the law;
• export your information in a structured, machine-readable format; and
• stop marketing email, using the unsubscribe link in any marketing email or www.boardandstable.com/unsubscribe.

To make a request, email legal@boardandstable.com with the subject "Privacy request." We will verify your identity and respond within 30 days. There is no self-service account deletion today, except in My Horse at my.boardandstable.com, where you can delete your account in Settings. We handle other deletion requests by hand. If a barn entered your information in Pro, we may refer your request to the barn or act on its instructions.

A barn can view its records at any time while its account is open, including while its paid features are paused. On request to hello@boardandstable.com, we will produce a full export of a barn's records at no charge within 30 days.

You can limit analytics collection with your browser's privacy controls, cookie settings, tracker blocking or private browsing. Some analytics are needed for security, fraud prevention, debugging and basic operation. You can turn push notifications off on your device and change email and text notification choices in your settings.

9. Cookies and tracking

9.1 Cookies

You can control cookies in your browser. Disabling cookies may stop some features from working. For more information, visit allaboutcookies.org.

9.2 No advertising tracking

We do not use advertising pixels or third-party ad networks, and we do not track you across other websites.

9.3 Email opens and clicks

Emails we send, including invoices, receipts, care summaries, agreements and sign-in codes, contain a small image that tells our email provider when the email is opened, and links that pass through our email provider so it can record clicks. We receive and keep some of these open and click records, with the recipient's address and the link clicked, to measure and improve our email.

10. California privacy rights

If you are a California resident, then to the extent the California Consumer Privacy Act applies to us, you have the right to know what personal information we collect, use and disclose; to request deletion; to request correction; to opt out of the sale or sharing of personal information (we do not sell personal information or share it for cross-context behavioral advertising); and not to be discriminated against for exercising these rights. To make a request, email legal@boardandstable.com with the subject "CCPA Request."

11. Data security

We use reasonable technical and organizational measures to protect information, including:

• HTTPS encryption for data in transit;
• password hashing with bcrypt;
• signed tokens for email verification and self-service actions;
• rate limiting on account registration, password resets, sign-in codes and links, and our main public forms;
• signature verification on incoming payment and text message webhooks;
• payment processing by Stripe, so we never store card numbers; and
• encryption at rest provided by our database, storage and payment providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your credentials and private links confidential, and tell us at once at hello@boardandstable.com if you think your account has been accessed without permission.

12. Children

The Services are for adults 18 and older. We do not knowingly collect personal information directly from children under 13, and account holders may not create accounts for anyone under 18. Barns may record information about minors who ride or board with them, such as the names of minors covered by a release a parent or guardian signs. That information is entered and controlled by the barn. We do not ask for children's birthdates. A release form a barn shares by link asks the adult signer either to confirm they are 18 or older or to give their date of birth, and may ask for an emergency contact. If you believe a child under 13 has given us personal information directly, email legal@boardandstable.com and we will delete it.

13. Email communications

We send:

• Transactional email: Inquiry confirmations, Claim updates, receipts, invoices, payment and autopay notices, sign-in codes, agreements, and Pro notices such as free-period and payment-method reminders. These are needed to provide the Services.
• Featured email: a confirmation when Featured starts on a Listing. Stripe emails a receipt for each Featured payment.
• Care summaries: emails to horse owners summarizing their horse's care, sent only for barns that turn them on.
• Digests: summaries of Inquiry and listing-view activity for owners of claimed Listings.
• Outreach and marketing: emails to facility owners and trainers about their profiles on Board and Stable and our products, including invitations to claim a Listing and our monthly market report, which also goes to anyone in the United States who subscribes on the Site. We do not send marketing email to businesses outside the United States.

You can unsubscribe from outreach, marketing and digest emails at any time with the unsubscribe link in every such email or at www.boardandstable.com/unsubscribe.

14. Text messages

Horse owners, co-owners, other contacts a horse owner adds, and barn staff whose facility uses Pro may opt in to text messages through a web form, by entering a mobile number and checking a consent box. Owners, co-owners and contacts may receive messages about their horse's care and training, schedule reminders, billing and payment reminders, and document requests. Staff may receive reminders about overdue horse-care shifts assigned to them and links to the staff app. Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to opt out, or opt out by any other reasonable means, and reply HELP for help. Text messages are sent only for facilities in the United States. We record the time, network address, device and version of the consent wording you agreed to on the web form, and the time of your most recent opt-out or opt-in by text reply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding vendors and aggregators that assist us in delivering text messages.

15. Where information is processed

The Services are operated from the United States. Our providers store and process information mainly in the United States. Files are stored by Cloudflare in Western North America, and PostHog processes analytics for the Site and my.boardandstable.com in its United States cloud. Some providers, such as our email verification provider, may process information in other countries. Map images are served by the OpenStreetMap Foundation from the United Kingdom and other countries. Our internal alert service, ntfy, is hosted in Germany and receives only the limited information described in section 5.2. The directory includes some businesses in Canada and Mexico. If you use the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country.

16. Changes to this policy

We may update this policy. We will post the new version with a new effective date. For material changes, we will show you the new version in the Services the next time you use them, or notify you by email.

17. Contact us

Privacy requests and legal notices: legal@boardandstable.com General questions: hello@boardandstable.com

Spur7 LLC, doing business as Board and Stable 2519 S Shields Street, Suite 1K #757, Fort Collins, CO 80526 www.boardandstable.com