Privacy Policy
Last updated: July 20, 2026
Blackhorse Publishing Inc ("we", "us") operates Palomino at blackhorsepalomino.com and related client apps. This policy explains what we collect, why, and your choices. By using Palomino you agree to this policy and our Terms of Service.
Information we collect
- Account data: email address and display name, used to create and secure your account.
- VPN configuration: device profiles and connection settings needed to provision and manage your tunnels.
- Connection receipts: signed attestation records associated with your account for audit use under your plan (not a full packet log of your browsing content).
- Usage data: plan entitlements, device counts, and operational metrics used to run and secure the service.
- Billing data: handled by Stripe; we store only a Stripe customer reference and subscription status, never card numbers.
- Device data (app): if you enable notifications, a push token; biometric unlock happens on-device and is not transmitted to us.
How we use information
To operate your workspace, provision VPN access, issue connection receipts, enforce subscription entitlements, provide support, secure the service, and comply with law. We do not sell your personal information. We do not sell browsing histories.
Security
Tunnel traffic is encrypted between your device and our endpoints. Access to account data is protected by authentication and row-level security so tenants are isolated. No method of transmission or storage is perfectly secure.
Service providers
We share data only with processors that run the service: Supabase (authentication and database), Stripe (payments), Vercel (hosting), cloud infrastructure for VPN endpoints, and Resend (transactional email). Each processes data on our behalf under their terms.
Data retention
We retain account and service data for as long as your account is active and as needed to operate your plan. You may request deletion of your account and associated data by contacting us.
Your rights
You may access, correct, export, or delete your data. To exercise these rights, email privacy@blackhorsepalomino.com.
Children
The service is intended for professional and adult use and is not directed to children under 13.
Changes
We may update this policy from time to time. The "Last updated" date will change when we do. Material changes will be posted on this page.
Contact
Questions about this policy: privacy@blackhorsepalomino.com or contact@blackhorsepalomino.com.