1. Introduction

Basis Technologies, Inc. ("Basis," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cost estimation and quoting platform, website, and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, company name, job title, and phone number. If you sign up via SSO, we receive your identity attributes from your identity provider.

2.2 Usage Data

We automatically collect information about how you interact with the Service, including pages viewed, features used, actions taken, timestamps, and session duration. This data helps us understand product usage patterns and improve the Service.

2.3 Device and Technical Information

We collect device type, operating system, browser type and version, IP address, time zone, and language preferences. This information is used for security, analytics, and to optimize the Service for your environment.

2.4 Customer Data

You may input cost estimates, rate tables, proposals, and other business data into the Service ("Customer Data"). You retain full ownership of your Customer Data, and we process it solely to provide the Service to you.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Improve, personalize, and expand our Service based on usage patterns
• Communicate with you about updates, security alerts, and support
• Process transactions and send related information
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms
• Provide customer support and respond to your requests

We do not use your Customer Data for any purpose other than providing and improving the Service. We do not use Customer Data to train machine learning models unless you explicitly opt in.

4. Data Sharing and Disclosure

We do not sell your personal information or Customer Data. Ever.

We may share information in the following limited circumstances:

• Service Providers: We share data with third-party vendors who help us operate the Service (hosting, analytics, customer support). These providers are contractually bound to use data only for the services they provide to us.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your data.
• With Your Consent: We may share information with third parties when you explicitly consent to such sharing.

5. Data Retention

We retain your account information and Customer Data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

Usage data and analytics may be retained in aggregate, de-identified form for up to 24 months after account deletion for product improvement purposes.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a machine-readable copy of your data for transfer to another service.
• Opt-Out: Opt out of marketing communications at any time by clicking the unsubscribe link or contacting us.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Cookie Policy

We use cookies and similar tracking technologies to operate and improve the Service. The types of cookies we use include:

• Essential Cookies: Required for the Service to function, including authentication and security cookies.
• Analytics Cookies: Help us understand how users interact with the Service so we can improve it.
• Preference Cookies: Remember your settings and preferences across sessions.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

8. Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and multi-factor authentication
• Regular security audits and penetration testing
• Incident response procedures with notification within 72 hours of a confirmed breach
• SOC 2 Type II certified infrastructure

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. International Transfers

Our primary data processing facilities are located in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States.

For transfers from the European Economic Area, we rely on Standard Contractual Clauses and adequacy decisions as approved by the European Commission. Our Data Processing Agreement, available upon request, includes the necessary safeguards for international data transfers.

10. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page, updating the "Last updated" date, and sending an email notification to active account holders at least 30 days before significant changes take effect. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Data Protection Officer: [email protected]
• Mail: Basis Technologies, Inc., Attn: Privacy Team, 1234 Innovation Drive, Suite 500, Wilmington, DE 19801