Privacy Policy - Basebright

This Privacy Policy ("Policy") describes how Basebright Inc., a Delaware corporation ("Basebright," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you use our website (including https://basebright.ai) and services (collectively, the "Service"). By using the Service, you agree to the collection, use, and disclosure of your information as described in this Policy.

This Policy applies to information we collect from visitors to our website and users of our Service. It does not apply to information we process on behalf of our customers as a service provider, which is governed by our customer agreements and Data Processing Agreement.

IF YOU DO NOT AGREE TO THIS POLICY, PLEASE DO NOT USE THE SERVICE.

Information We Collect
How We Use Your Information
How We Share Your Information
Cookies and Tracking Technologies
Data Retention
Data Security
Your Choices and Rights
California Privacy Rights
Children's Privacy
International Data Transfers
Third-Party Links
Changes to This Policy
Contact Information

1. INFORMATION WE COLLECT

We collect information in several ways: directly from you, automatically when you use the Service, and from third-party sources.

1.1 Information You Provide to Us

Account Information. When you create an account, we collect:

Email address
Username
Password (stored in encrypted form)
Profile picture (if provided or obtained through third-party sign-in)
Company name
Company website

Third-Party Sign-In. If you choose to register or log in using a third-party identity provider (such as Google Sign-In), we receive certain profile information from that provider, which may include your name, email address, and profile picture. We do not receive or store your third-party account password.

Payment Information. When you subscribe to a paid plan, payment information (such as credit card details and billing address) is collected and processed by our third-party payment processor, Stripe. We do not directly collect or store your full payment card information. For enterprise customers with alternative billing arrangements, we may collect billing contact information and company details necessary to process invoices.

Communications. When you contact us for support, provide feedback, or communicate with us, we collect the information you provide, including your name, email address, and the content of your messages.

Customer Data. When you use the Service, you may submit data including company information, product details, and prompts for analysis by AI systems. This Customer Data is governed by our Terms of Service and any applicable Data Processing Agreement.

1.2 Information We Collect Automatically

When you access or use the Service, we automatically collect certain information:

Device and Browser Information. We collect information about the device and browser you use to access the Service, including:

IP address
Device type and operating system
Browser type and version
Device identifiers
Screen resolution

Usage Information. We collect information about how you interact with the Service, including:

Pages and features accessed
Actions taken within the Service
Date and time of access
Referring website or source
Session duration

Location Information. We collect your IP address and use it to determine your geographic location (country, region, and city) for analytics purposes. This helps us understand where our users are located and improve our Service. We do not collect precise geolocation data (such as GPS coordinates). You may request deletion of this data as described in Section 7.

Analytics Data. We use analytics tools (described in Section 4) to collect aggregated information about Service usage patterns.

2. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

2.1 Providing and Maintaining the Service

Creating and managing your account
Processing transactions and sending related information
Providing customer support and responding to inquiries
Delivering the features and functionality of the Service

2.2 Improving and Developing the Service

Analyzing usage patterns to improve the Service
Developing new features and functionality
Conducting research and analysis
Troubleshooting technical issues

2.3 Communications

Sending transactional emails related to your account and use of the Service (e.g., account verification, subscription confirmations, billing notifications)
Sending marketing communications about new features, updates, and promotions (with your consent where required)
Responding to your comments, questions, and support requests

2.4 Security and Compliance

Protecting against unauthorized access, fraud, and abuse
Enforcing our Terms of Service and other policies
Complying with legal obligations
Protecting our rights and the rights of others

2.5 Analytics and Aggregated Data

Generating aggregated, de-identified data for analytics purposes
Understanding trends in Service usage
Measuring the effectiveness of our Service
Analyzing the geographic distribution of our users to understand where our Service is used and to inform product decisions

3. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

Provider	Purpose
Amazon Web Services (AWS)	Cloud infrastructure and hosting
Supabase	Database infrastructure and authentication
Stripe	Payment processing
Twilio	Email delivery services
Sentry	Error tracking and monitoring
Google Analytics	Website and Service analytics
Amplitude	Product analytics

These providers are contractually obligated to use your information only for the purposes of providing services to us and in accordance with this Policy.

3.2 Third-Party AI Service Providers

To deliver our Service, we share certain Customer Data—including company information, product details, and prompts you submit—with third-party artificial intelligence service providers. These AI providers process data according to their own privacy policies and terms of service. We do not control the AI providers or their outputs. For more information about how we use AI services, please refer to our Terms of Service.

3.3 Affiliates

We may share your information with our current or future affiliates (entities that control, are controlled by, or are under common control with Basebright) for the purposes described in this Policy. Any such affiliates will be required to honor this Policy.

3.4 Legal Requirements and Protection of Rights

We may disclose your information if we believe it is necessary to:

Comply with applicable laws, regulations, legal processes, or governmental requests
Enforce our Terms of Service and other agreements
Protect the rights, property, or safety of Basebright, our users, or others
Detect, prevent, or address fraud, security, or technical issues

3.5 Business Transfers

If Basebright is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

3.6 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

3.7 Aggregated or De-Identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any lawful business purpose.

4. COOKIES AND TRACKING TECHNOLOGIES

4.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They help websites remember your preferences and understand how you interact with the site.

4.2 Types of Cookies We Use

We use the following categories of cookies:

Essential Cookies. These cookies are necessary for the Service to function properly. They enable core functionality such as authentication, session management, and security. You cannot opt out of essential cookies as the Service cannot operate without them.

Analytics Cookies. These cookies help us understand how visitors interact with the Service by collecting information about pages visited, time spent on pages, and other usage metrics. We use analytics cookies to improve the Service and user experience.

4.3 Analytics Tools

We use the following analytics tools:

Google Analytics. We use Google Analytics to analyze website traffic and usage patterns. Google Analytics uses cookies to collect information about your use of the Service. We have enabled IP anonymization, which means your IP address is truncated before being transmitted to Google. You can learn more about Google's privacy practices at https://policies.google.com/privacy and opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Amplitude. We use Amplitude for product analytics to understand how users interact with the Service, including geographic usage patterns. Your IP address is processed by Amplitude to derive your location (country, region, and city). This location data helps us understand where our users are located. You can learn more about Amplitude's privacy practices at https://amplitude.com/privacy.

Sentry. We use Sentry for error tracking and performance monitoring. Sentry helps us identify and fix technical issues. IP anonymization is enabled. You can learn more about Sentry's privacy practices at https://sentry.io/privacy.

4.4 Email Tracking

Our emails may contain small transparent images (pixels) or tracked links that help us understand email engagement, such as whether an email was opened and which links were clicked. This information helps us improve our communications. You can disable image loading in your email client to prevent pixel tracking.

4.5 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can typically:

View what cookies are stored on your device
Delete some or all cookies
Block cookies from being set
Configure your browser to notify you when cookies are being set

Please note that if you disable essential cookies, some features of the Service may not function properly.

4.6 Do Not Track

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. There is currently no universally accepted standard for how to respond to DNT signals. At this time, we do not respond to DNT signals, but you can manage your cookie preferences through your browser settings as described above.

5. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Account Information. We retain your account information for as long as your account is active. If you request account deletion or your account is terminated, we will retain your data for up to thirty (30) days following termination to allow for data export requests, after which your data will be deleted from our active systems.

Usage and Analytics Data. We retain usage and analytics data in aggregated or de-identified form for longer periods to analyze trends and improve the Service.

Legal Requirements. We may retain certain information for longer periods as required by law, such as for tax, legal reporting, or compliance purposes.

6. DATA SECURITY

We take the security of your information seriously and implement appropriate technical and organizational measures to protect it, including:

Encryption in Transit: All data transmitted between your browser and our servers is encrypted using SSL/TLS encryption.
Authentication Security: We use Supabase Authentication with industry-standard security practices for user authentication.
Access Controls: We implement row-level security in our database to ensure users can only access their own data.
Infrastructure Security: Our Service is hosted on Amazon Web Services (AWS), which maintains comprehensive security certifications and controls.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we continuously work to improve our security measures.

7. YOUR CHOICES AND RIGHTS

7.1 Account Information

You can access and update your account information at any time by logging into your account settings. If you wish to delete your account, you can do so through the Service or by contacting us at [email protected].

7.2 Marketing Communications

You can opt out of receiving marketing emails from us by:

Clicking the "unsubscribe" link in any marketing email
Contacting us at [email protected]

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your account and use of the Service (such as billing notifications and security alerts).

7.3 Data Access and Deletion

You may request access to, correction of, or deletion of your personal information—including your IP address and any location data derived from it—by contacting us at [email protected]. We will respond to your request within thirty (30) days.

For data export requests, we will work with you on a case-by-case basis to provide your data in a usable format where technically feasible.

7.4 Cookies

You can manage your cookie preferences through your browser settings as described in Section 4.4.

8. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

8.1 Your Rights

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
Right to Correct: You have the right to request that we correct inaccurate personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

8.2 How to Exercise Your Rights

To exercise your California privacy rights, please contact us at [email protected]. We may need to verify your identity before processing your request.

8.3 Sale of Personal Information

We do not sell your personal information. We do not share your personal information with third parties for their own direct marketing purposes.

8.4 Categories of Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information:

Category	Examples
Identifiers	Name, email address, username, IP address
Commercial Information	Subscription and payment history
Internet or Network Activity	Browsing history, interactions with the Service
Professional Information	Company name, company website

9. CHILDREN'S PRIVACY

The Service is not directed to children under the age of eighteen (18), and we do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such information from our systems.

10. INTERNATIONAL DATA TRANSFERS

Basebright is based in the United States, and the Service is hosted on servers located in the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

By using the Service, you consent to the transfer of your information to the United States and acknowledge that your information will be subject to United States laws.

11. THIRD-PARTY LINKS

The Service may contain links to third-party websites, services, or applications that are not operated by us. This Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

We are not responsible for the privacy practices or content of third-party services.

12. CHANGES TO THIS POLICY

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

Update the "Last Updated" date at the top of this Policy
Notify you by email or through a notice on the Service prior to the changes taking effect

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy. If you do not agree to the changes, you should stop using the Service before the changes take effect.

13. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Basebright Inc.
2810 N Church St
Wilmington, Delaware 19802 US
Email: [email protected]
Website: https://basebright.ai

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.

Table of Contents