Privacy Policy

Frostburn ("we," "us") is operated by Spar-Tex Ventures LLC. This policy explains what we collect, why, and how it's handled when you use frostburn.io (the "Service").

1. Information we collect

Account information — your name, email, company name, and password, when you sign up.

Business data you enter — your customers' names and contact details, equipment records, job and service history, quotes, agreements, and invoices. This is your data; we store it on your behalf to operate the Service.

Payment information — handled entirely by Stripe, our payment processor. We never see or store your card number.

Usage data — basic technical logs (e.g. request timestamps, error logs) needed to run and troubleshoot the Service.

2. How we use it

• To provide, maintain, and improve the Service
• To process payments and manage your subscription
• To send transactional email — welcome messages, invoice reminders, and your morning briefing
• To respond to support requests
• To answer questions you ask the in-app AI Assistant, using your own account's data as context

We do not sell your data, or your customers' data, to anyone.

3. Third parties we share data with

We use a small number of subprocessors to run Frostburn. Each only sees what it needs to do its job:

• Supabase — hosts our database and handles authentication. Your account and business data lives here.
• Stripe — processes subscription payments.
• Resend — delivers transactional email on our behalf.
• Anthropic — powers the in-app AI Assistant. When you ask it a question, a snapshot of your account's relevant data (e.g. overdue invoices, upcoming renewals, today's jobs) is sent to Anthropic's API to generate the answer. It is not used to train Anthropic's models.
• Vercel — hosts the application itself.

4. Data retention

We keep your data for as long as your account is active. If you close your account, we delete or anonymize your data within a reasonable period, except where we're required to retain records (e.g. billing history) for legal or accounting purposes.

5. Security

Your data is stored in a database with row-level security, meaning each Frostburn account can only access its own records — never another company's. Data is encrypted in transit.

6. Your rights

You can view and correct most of your account's data directly in the Service. To request a full export or deletion of your data, email us at the address below and we'll handle it directly. If you're in a jurisdiction with additional data protection rights (e.g. GDPR, CCPA), we'll honor requests consistent with those laws.

7. Cookies

We use essential cookies to keep you signed in and to protect against cross-site request forgery. We don't use third-party advertising or tracking cookies.

8. Children

The Service is intended for business use and is not directed at children under 16.

9. Changes to this policy

If we make material changes, we'll notify you by email or through the Service before they take effect.

10. Contact

Questions about this policy or your data? Email j_tristan@me.com.