Privacy policy

Updated September 24, 2026

Introduction

This policy explains how Section Co., the operator of Burvo, collects, uses, and discloses personal information through https://burvo.com, sign-up, and our communications, including text messages. Section Co. is referred to as “we,” “us,” or “our” in this policy. This policy provides information about our practices; it does not constitute consent to receive text messages.

Information We Collect

We collect information you provide and technical information generated when you use our website or communicate with us:

Cookies

Our sign-up flow uses a browser-session cookie containing a sign-up identifier so we can resume your verification progress. Your phone number is stored on our server, not in that cookie. When you sign in, we use a secure, host-only cookie containing an opaque session token to keep you authenticated; the database stores only a hash of that token. You can control cookies through your browser settings; blocking them may prevent sign-up or sign-in from working. We use Cloudflare Turnstile to help detect automated abuse. Embedded third-party content, such as YouTube videos, may also collect device and usage information and use cookies under the provider's privacy policy.

Use of Collected Information

We use the information we collect to:

Service Providers

We use service providers to host and operate our services, store information, secure our systems, and communicate with customers. These providers process personal information as needed for those purposes:

Hosting and file storage Summit HQ provides data center hosting for our servers and object storage for files and application data. Record and data storage Turso and Temporal provide hosted services that store customer records and application data. Network and security Cloudflare routes traffic to our services and processes technical information, including IP addresses, to help detect and prevent automated abuse. Customer communications Quo and Twilio process customer contact information and communications, including phone verification, text messages, and future phone and text communications. Project management and collaboration Basecamp, Box, Miro, and HEY store customer information, project communications, files, emails, and related work used to manage projects and collaborate internally. Payment processing and accounting Stripe and Mercury process and store payment, financial, billing, and transaction records.

Other Disclosures

Telecommunications carriers process information needed to route, deliver, and secure text messages.

We may also disclose information when required by law or valid legal process, or when necessary to investigate fraud or protect legal rights and safety. These disclosures do not authorize recipients to use SMS consent for their own marketing.

Mobile Information and SMS Privacy

We do not sell personal information. We do not share mobile numbers, SMS opt-in data, or SMS consent records with third parties or affiliates for their marketing or promotional purposes. We do not sell, rent, or transfer your SMS consent. We may provide this information to service providers that help operate our messaging program and as legally required, as described above.

Requesting a verification code or contacting us does not enroll you in marketing texts. Service updates and marketing require their own opt-in. Verification message frequency depends on your requests; conversation and service message frequency depends on your interactions and project; recurring marketing message frequency varies. Standard message and data rates may apply.

You may withdraw SMS consent by replying STOP to the sender or contacting [email protected]. We also honor other clear requests to stop. For help, email us at that address. See our Text Messaging Terms for details.

Retention

We retain personal information for as long as reasonably necessary to provide our services, maintain appropriate business records, honor communication preferences, prevent fraud, resolve disputes, and comply with legal obligations. Retention periods vary based on the information and the purpose for which we use it. You may contact us about deletion as described below.

Your Choices and Privacy Requests

You may contact [email protected] to request access to, correction of, or deletion of your personal information, or to ask about your communication preferences. Depending on your location and applicable law, you may also have rights to obtain a portable copy, opt out of certain processing, or appeal a denied request. We may need to verify your identity and will respond as required by applicable law. To appeal, reply to our decision at the same email address and explain your concern. Certain records may be retained where legally permitted or required. We will not discriminate against you for exercising applicable privacy rights.

Data Security

We take the security of your information seriously and have implemented appropriate technical and organizational measures to protect your information from unauthorized access, use, or disclosure. Please note that no method of transmission over the internet, or method of electronic storage, is 100% secure.

Children's Privacy

Our website is not intended for children under the age of 16, and we do not knowingly collect personal information from children under this age. If you are under the age of 16, please do not use our website.

Changes to the Privacy Policy

We may update this policy as our practices or applicable laws change. We will post the revised policy with an updated date and provide additional notice or obtain consent when required. Updating this policy does not change your SMS preferences or supply consent for a new messaging purpose.

Contact Information

If you have any questions about this Policy or our practices, please get in touch with us at [email protected].