1. Who we are
Barnstar is built and operated by AGROINTEL AS, a Norwegian company. We are the data controller for personal data processed through barnstar.dev, Barnstar cloud accounts, the Orbit farm app when connected to our cloud, Orion cloud and voice services, and Barnstar hardware orders.
- Controller
- AGROINTEL AS (trading as Barnstar)
- Organisation number
- 932901129
- Address
- Fåholmen 3, 4160 Finnøy, Norway
- Contact
- hello@barnstar.dev
2. What stays on your PC vs. the cloud
Orbit (our open-source desktop app, AGPL-3.0) and Orion (the AI agent inside it) run on your own farm computer. You can use Orbit offline with your own AI provider key without creating a Barnstar account. When you run Orbit offline without signing in, your herd records, camera passwords, and workspace files stay on your computer and never reach us.
Camera passwords, equipment connector secrets, and your own AI provider keys are stored in your computer's operating-system keychain or encrypted local storage. They are never stored in plain database tables, synced to our cloud, or sent in chat transcripts.
When you sign in to a Barnstar account, Orbit connects to Orbit Core (our cloud service) so you can back up your farm, keep multiple farm computers in step, use the Orbit phone app, invite team members, and use your plan's Orion and voice allowances.
3. Data we collect when you use Barnstar
Account and sign-in details
When you create an account on barnstar.dev/account/ or inside Orbit, we store your email address, your name (if you give one), an argon2id hash of your password or your Google account identifier when you use Sign in with Google, the date your email was confirmed, the Terms version you accepted (2026-11) with its timestamp, and whether you opted in to anonymised footage sharing. We also store hashed session tokens, device names for signed-in sessions, farm roles and email invites, and short-lived failed-login counters per email address to block password guessing.
Farm data you choose to sync
If you sign in and link a farm to the cloud, Orbit syncs your farm profile, animals (identifiers, ear tags, species, breed, birth dates, reproduction and lactation status, notes), devices and sensor bindings, connector settings (without passwords), observations and health or calving events, camera names, network addresses and barn-map layouts, and custom workspace pages, connectors, skills, and local app code changes so your farm computers stay in step. Files that look like passwords or API keys are blocked before upload.
Orion chats, voice calls, and usage metering
When you use Orion through Barnstar's cloud, your prompts and conversation context are sent through our gateway to the language model to answer you, and we record token counts and model status per request to meter your plan allowance. Signed-in conversations sync privately to your user account on that farm so other farm members cannot read your chats.
When you speak with Orion by voice in Orbit or on the phone, audio and text frames are relayed to our voice provider, connected seconds are metered against your voice allowance, and finished spoken turns and tool calls are saved into that conversation. If you try the public voice demo on our homepage without an account, we store a keyed cryptographic hash of your network address (never the raw IP address) to enforce talk-time limits.
Billing and hardware orders
Payments for plans and hardware (Barnstar box and tested cameras) are handled by Stripe in EUR. Card numbers and bank details stay with Stripe and never touch Barnstar servers. We store your Stripe customer and subscription IDs, plan tier, billing interval, subscription status, and—when you buy hardware—your order quantities, total amount, email address, and shipping address so we can ship your equipment and keep statutory accounting records.
Feedback, shared builds, and phone alerts
If you send feedback from Orbit, we receive your message, optional contact email, Orbit version, operating system, locale, and any diagnostics you include (rate-limited using a hashed network identifier if sent signed out). If you ask Orion to share a custom page, connector, or skill with other farms, we store your submitted text files and account details for manual review before anything is published. If you enable alerts on the Orbit Android app, we store your device push token and locale to send herd and Orion notifications, and relay live phone sessions to your farm PC while phone access is switched on.
Website storage
We do not use advertising trackers or third-party analytics cookies on barnstar.dev. Your browser stores only functional local settings: your light or dark theme choice, your signed-in session token, and your selected farm ID.
4. Camera video and footage
You own the video from your barn. When you run a Barnstar box or connect cameras locally to Orbit on your farm PC, camera streams are processed on the farm and keep working without internet. If you choose the 2-camera cloud option instead of a box, those two streams are processed on Barnstar's cloud servers to deliver tracking and alerts for your farm.
Model training is always separate and requires consent. Footage and animal outcomes only leave your farm to help train and improve Barnstar's vision models when you agree to share them: founding farms agree at signup to share anonymised footage and outcomes in exchange for founding hardware prices and can cancel sharing at any time; regular customers are off by default and opt in only if they choose to.
5. Where data is processed and service providers
We use a small set of infrastructure and service providers to run Barnstar. They process data only on our instructions to deliver the service you asked for:
| Provider | Role | Location / details |
|---|---|---|
| Google Cloud | Orbit Core API and Postgres database | Region europe-north1 (Finland, EEA) |
| Google Vertex AI | Cloud language and live voice models (Gemini) for Orion | Google Cloud / Vertex AI endpoints |
| Firebase | Website hosting (barnstar.dev) and Android push notifications (FCM) | Google Cloud infrastructure |
| Stripe | Plan subscriptions, hardware checkout, billing portal, and invoices | Card data stays with Stripe; prices in EUR |
| Resend | Transactional emails (email confirmation, password reset, order receipts) | Email delivery processor |
| Google Workspace | Our mailbox: emails you send to hello@barnstar.dev and our replies | Google Workspace (Gmail) |
| ElevenLabs | Conversational speech-to-text and voice synthesis for Orion voice calls | Authenticated through Barnstar Core without exposing your account keys |
| Google Sign-In | Optional single sign-on when you click Continue with Google | Used only when you choose Google sign-in |
| GitHub | Orbit desktop app installer downloads and automatic release updates | Public releases hosted on GitHub |
Where a provider processes personal data outside the European Economic Area (EEA), transfers rely on European Commission adequacy decisions (such as the EU-U.S. Data Privacy Framework) or Standard Contractual Clauses (SCCs). If you configure your own AI provider key inside Orbit, your computer sends requests directly to that provider under your own agreement with them.
6. Legal bases under GDPR
Under the General Data Protection Regulation (GDPR), as incorporated into Norwegian law, we rely on four legal bases:
- Contract (Article 6(1)(b)): creating and securing your account, syncing the farm records and chats you connect to Core, running Orion and voice allowances on your plan, and fulfilling hardware orders and subscriptions.
- Consent (Article 6(1)(a)): sharing anonymised barn footage and animal outcomes to improve our models. You can withdraw consent at any time on your account or by emailing hello@barnstar.dev.
- Legitimate interest (Article 6(1)(f)): protecting accounts and public endpoints against abuse (such as login throttling and hashed rate limits), fixing bugs reported through feedback, and keeping the service reliable.
- Legal obligation (Article 6(1)(c)): keeping payment, tax, and hardware order records required under Norwegian bookkeeping and tax law.
We never sell your personal data or farm data, and we never use it for third-party advertising.
7. How long we keep data
- Account and synced farm data: kept for as long as your Barnstar account remains open so your devices stay synced.
- When you delete your account: you can delete your account from Account & security. Your user profile and login records are deleted, and cloud copies of any farm you own alone are wiped from our database (local copies in Orbit remain on your own farm PC). Shared farms require another owner before you leave.
- Accounting and order records: invoices in Stripe and hardware order records are unlinked from your deleted user profile and kept for as long as required by mandatory accounting and tax law.
- Local PC data: records stored in Orbit on your own computer stay under your control until you delete them or uninstall the app.
8. Your rights
You have the right to:
- Access and export your personal data — you can download a JSON export of your account profile, sessions, farm memberships, invites, and hardware orders directly from barnstar.dev/account/, and export your herd records from Orbit at any time.
- Correct inaccurate account or farm details.
- Delete your account and cloud farm data.
- Object to or restrict processing based on legitimate interest.
- Withdraw consent at any time where processing relies on consent (such as footage sharing), without affecting earlier lawful processing.
- Complain to a supervisory authority if you believe we have handled your personal data unlawfully. In Norway, the supervisory authority is Datatilsynet (the Norwegian Data Protection Authority, datatilsynet.no), or you may contact the authority where you live or work.
To use any of these rights, use the tools on your account page or write to hello@barnstar.dev.
9. Security
Connections between Orbit, barnstar.dev, and Orbit Core are encrypted over HTTPS and WSS. Passwords are stored only as argon2id hashes, and session tokens, email verification links, password reset links, and farm invite codes are stored in our database only as SHA-256 hashes. Farm sync queries are scoped per farm and checked against each member's role (owner, manager, worker, or viewer).
10. Changes and contact
When we make material changes to this Privacy Policy, we will update the version and date at the top of this page and notify account holders by email or inside Orbit.
Questions, data requests, or privacy concerns: email hello@barnstar.dev or write to AGROINTEL AS, Fåholmen 3, 4160 Finnøy, Norway.