Privacy Policy
1. What We Collect
We collect only what is necessary to operate and improve the service:
Account Information
- Name, email address, and password (hashed, never stored in plain text)
- Profile information you choose to provide
Usage Data
- Pages visited and features used within the application
- Device type, browser, and operating system
- IP address and approximate location (country/region level)
- Date and time of access
Your Content
- Data you enter about your horses, health records, rides, training, trips, and competitions
- Files and media you upload (photos, documents)
- Communications you send through the platform
Cookies
- We use cookies and similar technologies to maintain your session and improve your experience. See our Cookie Policy for details.
2. How We Use Your Data
We use the information we collect to:
- Operate the service — authenticate your account, display your data, and provide core functionality
- Improve the service — understand how features are used, identify bugs, and prioritize development
- Communicate with you — send account-related notifications, security alerts, and service updates
- Ensure security — detect and prevent fraud, abuse, and unauthorized access
We do not use your data for advertising. We do not build advertising profiles. We do not sell your data.
3. Data Sharing
We do not sell your personal data. We share data only in these limited circumstances:
- Service providers — We use third-party services to operate the platform (hosting, email delivery, error monitoring). These providers process data on our behalf under contractual obligations to protect your information.
- Legal requirements — We may disclose information if required by law, regulation, legal process, or government request.
- Business transfers — If Blue Rhino Group, Inc. is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.
- With your consent — We may share data in other circumstances with your explicit consent.
4. Data Retention and Deletion
- Active accounts — We retain your data for as long as your account is active and as needed to provide the service.
- Deleted accounts — When you delete your account, we remove your personal data from active systems within 30 days. Some data may persist in encrypted backups for up to 90 days.
- Usage logs — Anonymized usage data may be retained indefinitely for service improvement.
To request deletion of your data, contact support@steward.horse or use the account deletion feature in your settings.
5. Your Rights
You have the right to:
- Access your personal data — request a copy of the data we hold about you
- Export your data — download your content in a portable format
- Correct inaccurate data — update your profile and records at any time
- Delete your data — request complete removal of your account and associated data
- Object to processing — opt out of non-essential data processing
To exercise any of these rights, contact support@steward.horse. We will respond to requests within 30 days.
6. Data Security
We implement industry-standard security measures to protect your information:
- Passwords are hashed using modern cryptographic algorithms and never stored in plain text
- Data is encrypted in transit using TLS/SSL
- Access to production systems is restricted and monitored
- Regular security reviews and updates are performed
While we strive to protect your data, no system is perfectly secure. You acknowledge this inherent risk and agree to notify us immediately if you suspect any security issues with your account.
7. International Users
Steward Horse is operated from the United States. If you access the service from outside the United States, your data may be transferred to and processed in the United States. By using the service, you consent to this transfer.
For EU/EEA users (GDPR): Our legal basis for processing your data is your consent (provided at account creation) and our legitimate interest in operating and improving the service. You have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with your local data protection authority.
For California users (CCPA): You have the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising your privacy rights. We do not sell personal information as defined by the CCPA.
8. Children's Privacy
Steward Horse is not intended for use by children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at support@steward.horse.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or an in-app notification. The "Last updated" date at the top of this page indicates when this policy was last revised.
10. Contact
For privacy-related questions or requests: support@steward.horse
For security concerns: security@steward.horse