Trust, Security & Privacy
This page is maintained by the Baru Thrive team to answer common security and privacy questions about our website and checkout. It describes the controls and practices currently in place. It is not a certification or an independent audit.
Payments
Card payments are processed by Stripe, a PCI-DSS compliant payment provider. Card numbers, CVCs, and expiration dates are entered directly into Stripe's hosted fields and never touch our servers. We receive only a payment confirmation and the information needed to fulfill your order.
Data we collect
To process an order we collect your name, shipping address, email, and order details. We use this information solely to fulfill orders, provide customer support, and honor our 30-day money-back guarantee.
Subprocessors
- Stripe — payment processing
- Lovable Cloud — application hosting and backend infrastructure
Transport security
All traffic to our website and checkout is served over HTTPS/TLS. Backend access to our database is restricted by row-level security policies and authenticated APIs.
Your privacy rights
You can request a copy or deletion of your personal data, or ask any security or privacy question, by contacting us. We respond to requests within a reasonable timeframe.
Contact
Security or privacy questions: please reach out via the contact information on our homepage.
Last updated: June 2026. This page reflects our current practices and may be updated as our product evolves.