Base75 AI Technologies ("Base75," "we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website, platform, applications, and services (collectively, the "Services").

We are based in Lucknow, Uttar Pradesh, India, and we provide AI automation platform services to users across India and around the world. We have written this Privacy Policy in plain language so that you can understand exactly what data we collect, why we collect it, and what choices you have regarding your information.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms of this policy, please do not use our Services.

This Privacy Policy applies to all users of our Services, including visitors to our website, registered users of our platform, and customers who use our workflow automation and AI tools. If you are using our Services on behalf of an organization, you represent and warrant that you have the authority to bind that organization to this Privacy Policy.

We collect several types of information to provide and improve our Services. The categories of information we may collect include:

Account and Registration Information: When you create an account, we collect your full name, email address, password (stored in encrypted form), company name, job title, phone number (if provided), and profile preferences.

Usage and Activity Data: We automatically collect information about how you interact with our Services, including the features you use, workflows you create, pages you visit, the date and time of your visits, time spent on pages, click data, search queries, and API calls made.

Device and Technical Information: We collect your IP address, browser type and version, operating system, device type and identifiers, screen resolution, language preferences, referring URLs, and similar technical data that helps us understand how you access our Services.

Content and Data You Provide: When you use our AI assistant, workflow builder, or other tools, we collect the content you create, the data you upload, the prompts you submit to AI models, and the outputs generated by those models. This includes text, files, images, and any other data you process through our platform.

Communications Data: When you contact us for support, send feedback, or communicate with our team, we collect the content of your messages, your contact information, and any attachments you provide.

Billing and Payment Information: If you purchase a paid plan, we collect billing address, company details, and payment method information. Payment card data is processed by our payment providers, and we do not store full card numbers on our servers.

Integration Data: If you connect third-party services (such as Salesforce, Slack, GitHub, or Google Workspace) to your Base75 AI account, we may receive and process data from those services as authorized by you and as necessary to provide our Services.

We collect information through several methods:

Information You Provide Directly: When you register for an account, update your profile, contact our support team, or otherwise interact with us, you provide information directly to us. This includes information you enter into forms, settings you configure, and content you create using our tools.

Automatic Collection: We automatically collect certain information when you visit our website or use our platform. This includes usage data, device information, and technical data collected through cookies, log files, and similar technologies.

From Third-Party Services: When you connect external integrations or sign in using third-party authentication (such as Google or GitHub), we receive information from those services as authorized by you and permitted by their respective privacy policies.

From Public Sources: In limited circumstances, we may collect information from publicly available sources to improve our Services or verify information you have provided.

From Our Service Providers: We may receive information from the service providers we work with, such as analytics providers, payment processors, and infrastructure partners, in connection with the services they provide to us.

We use the information we collect for the following purposes:

• Providing, operating, and maintaining our AI platform and Services

• Creating and managing your account and user profile

• Processing transactions and managing your subscription

• Sending you service-related communications, including security alerts, technical notices, and administrative messages

• Responding to your comments, questions, and customer support requests

• Analyzing usage patterns to understand how users interact with our Services and to improve user experience

• Developing new features, products, and services based on user needs and feedback

• Detecting, preventing, and addressing fraud, abuse, security incidents, and other harmful activities

• Complying with our legal obligations and enforcing our Terms of Service

• Personalizing your experience and delivering relevant content and recommendations

• Conducting research and analysis to improve our AI models and platform capabilities

• Sending you marketing and promotional communications (only with your consent, which you can withdraw at any time)

• Facilitating integrations with third-party services you have connected

• Generating AI-powered content and responses based on your inputs and instructions

We do not use your personal data to train our AI models without your explicit consent. Your workflow data, AI prompts, and generated content are used to provide the Services to you, not to improve our underlying models without permission.

We process your personal data under the following legal bases:

Consent: We process certain data based on your consent, which you provide when you register for an account, connect integrations, or opt in to receive marketing communications. You can withdraw your consent at any time.

Contract Performance: We process data that is necessary to provide the Services you have requested under our Terms of Service. This includes creating and managing your account, processing payments, and delivering the platform features you have subscribed to.

Legal Compliance: We process data to comply with our legal obligations, including tax and accounting requirements, data protection laws, and other regulatory mandates.

Legitimate Interests: We process certain data based on our legitimate interests in operating and improving our business, such as analyzing usage patterns, detecting fraud, and ensuring platform security, provided that your rights and freedoms do not override these interests.

Vital Interests: In rare circumstances, we may process data to protect the vital interests of individuals, such as in emergency situations or to prevent serious harm.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data protection laws that recognize specific legal bases for processing, the above bases apply to you. You have the right to object to processing based on legitimate interests and to withdraw consent at any time.

We do not sell your personal information. We may share your data in the following circumstances:

With Service Providers: We share information with trusted third-party vendors who assist us in operating our business, such as cloud hosting providers, payment processors, analytics services, email delivery providers, and customer support tools. These providers are bound by confidentiality obligations and are only permitted to use your data to provide services to us.

For Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our platform before your data is transferred under different ownership.

With Your Consent: We may share information with third parties when you have explicitly given us permission to do so, such as when you connect a third-party integration or participate in a referral program.

For Legal Compliance: We may disclose your information when required by law, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to comply with applicable laws and regulations.

To Protect Rights and Safety: We may share information to investigate, prevent, or take action regarding suspected illegal activities, fraud, security concerns, or violations of our Terms of Service.

With Affiliates and Subsidiaries: We may share information within our corporate family for internal business purposes, subject to the same protections described in this Privacy Policy.

In Aggregate or De-Identified Form: We may share aggregate or de-identified data that cannot reasonably be used to identify you, such as usage statistics or industry trends, for research, analytics, and marketing purposes.

Our platform allows you to connect to various third-party services and integrations, including but not limited to Salesforce, Slack, GitHub, Google Workspace, HubSpot, Jira, Microsoft Teams, and others listed in our integration marketplace.

When you connect a third-party service to your Base75 AI account, you authorize us to access and process data from that service on your behalf. The data we receive depends on the permissions you grant and the integration you configure.

Third-party services have their own privacy policies and data practices. We are not responsible for how third-party services collect, use, or share your data. We encourage you to review the privacy policies of any third-party service you connect to our platform.

You can disconnect a third-party integration at any time through your account settings. When you disconnect an integration, we stop receiving new data from that service, but data already processed may be retained in your workflows and account as described in our data retention section.

We do not share your Base75 AI data with third-party services beyond what is necessary to provide the integration you have configured, and we do not authorize third-party services to use your data for their own purposes without your consent.

Base75 AI Technologies provides AI-powered features including an AI assistant, content generation, data analysis, and workflow automation. We want to be transparent about how your data is used in connection with these AI features:

Your Prompts and Inputs: When you use our AI assistant or AI-powered workflow steps, the prompts, instructions, and data you provide are processed to generate responses and perform tasks. This data is used to provide the Services to you and is associated with your account.

AI-Generated Content: Content generated by our AI models in response to your prompts is associated with your account and is treated as your data. You retain ownership of the content you create and the AI-generated outputs produced through your use of our Services.

Model Training: We do not use your personal data, workflow data, or AI prompts to train our AI models without your explicit consent. If we offer features that involve learning from your data (such as custom model training), we will clearly disclose this and obtain your consent before proceeding.

Third-Party AI Models: Some of our AI features may use models provided by third-party AI providers. When we use third-party models, your data is processed according to our instructions and the provider's terms. We select providers that maintain appropriate data protection standards.

Data Processing for AI: When you submit data to our AI features, it is processed to generate responses in real time. This processing may involve sending your data to AI model providers, but we take steps to ensure that your data is handled securely and in accordance with this Privacy Policy.

Transparency: We strive to be transparent about how our AI features work, what data they use, and what their limitations are. If you have questions about our AI data practices, please contact us at privacy@base75.ai.

We implement industry-standard security measures to protect your personal information from unauthorized access, use, alteration, or disclosure. Our security practices include:

• Encryption of data in transit using secure transmission protocols

• Encryption of data at rest to protect stored information

• Role-based access controls that limit data access to authorized personnel only

• Regular security reviews and assessments of our systems and practices

• Secure development practices throughout the software development lifecycle

• Authentication and session management controls

• Logging and monitoring to detect and respond to security events

• Incident response procedures to address potential security breaches

• Regular data backups to protect against data loss

• Employee training on data protection and security best practices

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining and continuously improving our security practices.

If we become aware of a data breach that affects your personal information, we will notify you and the appropriate authorities in accordance with applicable laws and our internal incident response procedures.

Our team members and service providers are bound by confidentiality obligations and are only granted access to personal data when necessary to perform their duties.

We retain your personal data for as long as your account is active or as needed to provide our Services to you. Specifically:

Active Accounts: We retain your account information, workflow data, and related information for as long as your account remains active. You can access, export, and manage this data through your account settings at any time.

Closed Accounts: If you close your account, we will delete or anonymize your personal data within 90 days of account closure, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Legal and Regulatory Retention: We may retain certain data beyond account closure if required by law, regulation, or legal process, or if necessary to establish, exercise, or defend legal claims. Such data is retained only for as long as necessary and is then deleted or anonymized.

Backup Data: Data may exist in backup systems for a limited period after deletion from our primary systems. Backup data is deleted in accordance with our standard backup retention schedule.

Usage and Log Data: Usage data, log files, and technical data are retained for a shorter period than account data, typically 12 to 24 months, unless longer retention is required for security, legal, or compliance purposes.

Deletion Requests: You can request deletion of your personal data at any time by contacting us at privacy@base75.ai. We will process your request in accordance with applicable data protection laws and our internal procedures.

When we delete your data, we take reasonable steps to ensure it is permanently removed from our active systems. However, residual copies may exist in backup systems for a limited time before being permanently deleted.

We use cookies, web beacons, pixels, and similar tracking technologies to operate, maintain, and improve our Services. These technologies help us:

Essential Cookies: These cookies are necessary for our Services to function properly. They enable core functionality such as user authentication, session management, security features, and load balancing. You cannot opt out of essential cookies without affecting the basic functionality of our platform.

Preference Cookies: These cookies remember your settings and preferences, such as your language, theme (light or dark mode), and display preferences. They enhance your experience by reducing the need to re-enter information.

Analytics Cookies: These cookies help us understand how visitors interact with our website and platform. We use this information to analyze usage patterns, identify trends, and improve our Services. Analytics data is typically aggregated and de-identified.

Functional Cookies: These cookies enable enhanced functionality, such as remembering your login state, integrating with third-party services, and providing personalized content based on your activity.

Marketing Cookies: With your consent, we may use marketing cookies to deliver relevant content and advertisements on third-party websites. You can opt out of marketing cookies at any time.

Managing Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, if you disable certain cookies, some features of our Services may not function properly.

Third-Party Tracking: Some third-party services we use (such as analytics providers) may set their own cookies on your device. These are subject to the respective third-party privacy policies, and we encourage you to review them.

For more detailed information about the specific cookies we use and how to manage them, please contact us at privacy@base75.ai.

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you and information about how we process it.

• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data we hold about you.

• Right to Erasure (Right to Be Forgotten): You can request that we delete your personal data, subject to certain exceptions such as legal retention requirements.

• Right to Data Portability: You can request to receive your personal data in a structured, machine-readable format and, where technically feasible, have it transmitted to another service provider.

• Right to Object: You can object to certain types of processing, including processing based on legitimate interests or for direct marketing purposes.

• Right to Restrict Processing: You can request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of your data or assess your objection.

• Right to Withdraw Consent: Where we process your data based on your consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

• Right to Be Informed: You have the right to be informed about how your data is collected, used, and shared, as described in this Privacy Policy.

• Right to Not Be Subject to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, unless certain conditions are met.

To exercise any of your privacy rights, please follow these steps:

Contact Us: Send an email to privacy@base75.ai with the subject line "Privacy Rights Request." Include your name, email address, and a description of the right you wish to exercise. We may need to verify your identity before processing your request.

Response Time: We will respond to your request within 30 days of receipt. If we need more time, we will inform you of the reason and the expected timeframe, which may extend up to an additional 60 days in complex cases.

Verification: To protect your data, we may need to verify your identity before processing certain requests. This may involve asking you to provide additional information or complete a verification process.

Account Settings: Many of your privacy preferences can be managed directly through your account settings, including updating your profile information, managing notification preferences, and disconnecting integrations.

Authorized Agents: You may authorize an agent to submit requests on your behalf. If you use an authorized agent, we may require proof that the agent has been authorized to act on your behalf and may need to verify your identity directly.

No Fee: We do not charge a fee for processing privacy rights requests, unless the request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline to process the request.

Appeals: If we decline to process your request, you have the right to appeal our decision. To appeal, please contact us at privacy@base75.ai with the subject line "Privacy Rights Appeal."

Data Protection Authority: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. You can find your local authority through the appropriate government website for your jurisdiction.

Our Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16.

If you are under 16, please do not use our Services or provide any personal information to us. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at privacy@base75.ai.

Upon receiving a verified request from a parent or guardian, we will promptly delete the child's personal information from our systems, except where we are required to retain it for legal purposes.

We take children's privacy seriously and have implemented measures to prevent the collection of data from minors. However, due to the nature of online services, we cannot always determine the age of users. If you become aware that a minor has provided us with personal data, please notify us so we can take appropriate action.

For users in jurisdictions with specific child privacy laws (such as COPPA in the United States or the age of digital consent under GDPR in the European Union), we comply with all applicable requirements regarding the collection and processing of data from minors.

Base75 AI Technologies operates from India and provides Services to users around the world. Your personal information may be transferred to and processed in countries other than your own, including India and countries where our service providers are located.

When we transfer your data across borders, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Standard Contractual Clauses: Where required, we use standard contractual clauses or other appropriate legal mechanisms approved by relevant authorities to ensure that international transfers comply with applicable data protection requirements.

Service Provider Locations: Some of our service providers (such as cloud hosting and analytics providers) may be located in countries outside India. We select providers that maintain appropriate data protection standards and enter into agreements that ensure adequate protection of your data.

Your Rights in International Transfers: If you are located in a jurisdiction with specific requirements for international data transfers (such as the European Economic Area or the United Kingdom), we will ensure that your data is transferred only to countries or organizations that provide an adequate level of data protection, or that appropriate safeguards are in place.

Notification of Changes: If there are material changes to how we handle international data transfers, we will update this Privacy Policy and notify you as appropriate.

For more information about international data transfers or if you have questions about where your data is processed, please contact us at privacy@base75.ai.

We work with various third-party service providers to deliver our Services. These providers may process your personal data on our behalf as data processors. The categories of third-party providers we work with include:

Cloud Infrastructure Providers: We use cloud hosting services to store and process data. These providers host our servers and infrastructure but do not access your data for their own purposes.

Payment Processors: We use payment processing services to handle billing and transactions. These providers process payment information according to their own security and compliance standards.

Analytics Providers: We use analytics tools to understand how users interact with our Services. These providers may collect and process usage data on our behalf.

Communication Providers: We use email delivery and communication services to send transactional and marketing emails. These providers process email addresses and message content as necessary to deliver communications.

AI Model Providers: Some of our AI features use models provided by third-party AI providers. When we use these models, your data is processed according to our instructions and the provider's terms.

Customer Support Tools: We use customer support and helpdesk tools to manage support requests. These tools may process your communications and account information.

All of our service providers are subject to data processing agreements that define their responsibilities and obligations regarding your personal data. We require our providers to maintain appropriate security measures and to process data only as necessary to provide services to us.

We regularly review our third-party relationships to ensure that they continue to meet our data protection standards. If a provider's practices do not meet our requirements, we may terminate the relationship and seek alternative providers.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services we offer. When we make changes, we will:

Notification of Material Changes: We will notify you of material changes to this Privacy Policy by emailing registered users and posting a prominent notice on our platform at least 30 days before the changes take effect.

Non-Material Changes: For non-material changes (such as clarifications, formatting updates, or minor corrections), we may update the policy without prior notice. The "Last updated" date at the top of this document will reflect when the policy was last revised.

Review Period: We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your data. The most current version will always be available on our website.

Continued Use: Your continued use of our Services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should stop using our Services and close your account.

Version History: We maintain a version history of our Privacy Policy. If you would like to review a previous version, please contact us at privacy@base75.ai.

Effective Date: The effective date of this Privacy Policy is stated at the top of this document. All changes are effective as of the effective date unless otherwise noted.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below:

Base75 AI Technologies

Email: privacy@base75.ai

Address: Lucknow, Uttar Pradesh, India

Data Protection Inquiries: For questions about how we handle your personal data, to exercise your privacy rights, or to file a complaint about our data practices, please email privacy@base75.ai.

General Inquiries: For general questions about our company, products, or services, please visit our Contact page or email hello@base75.ai.

Security Concerns: If you have identified a security vulnerability or have security-related concerns, please contact us at security@base75.ai. We take all security reports seriously and will investigate promptly.

Response Commitment: We are committed to responding to all privacy-related inquiries within 30 days of receipt. For urgent matters, we will make every effort to respond more quickly.

We value your trust and are committed to protecting your privacy. If you feel that we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority.

Base75 AI Technologies is committed to complying with applicable data protection laws. While we may not have a formally appointed Data Protection Officer (DPO) at all times, we have designated a team responsible for overseeing our data protection practices and ensuring compliance with this Privacy Policy.

The responsibilities of our data protection team include:

• Monitoring compliance with this Privacy Policy and applicable data protection laws

• Serving as a point of contact for data protection inquiries and requests

• Conducting data protection impact assessments for new features and services

• Coordinating responses to data subject requests

• Managing data breach response procedures

• Reviewing and updating our data protection practices

• Training staff on data protection and privacy best practices

If you wish to contact our data protection team, please email privacy@base75.ai. We will ensure that your inquiry is directed to the appropriate person and handled in accordance with applicable data protection requirements.

For users in jurisdictions that require a formally appointed DPO (such as certain organizations under the GDPR), we will provide the contact information for our DPO upon request. Please contact us at privacy@base75.ai for this information.

You have several choices regarding how your information is collected, used, and shared:

Account Information: You can update your account information, including your name, email address, and profile details, through your account settings at any time.

Communication Preferences: You can manage the types of communications you receive from us by updating your notification preferences in your account settings. You can also unsubscribe from marketing emails by clicking the unsubscribe link in any marketing email we send.

Cookie Preferences: You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling certain cookies may affect the functionality of our platform.

Integration Management: You can connect or disconnect third-party integrations through your account settings. When you disconnect an integration, we stop receiving new data from that service.

Data Sharing: You can control what data is shared with third-party services by managing your integration settings and the permissions you grant to each integration.

Marketing: You can opt out of marketing communications at any time by updating your preferences or clicking the unsubscribe link in our emails. Opting out of marketing does not affect transactional or service-related communications.

Analytics: You may have the option to opt out of certain analytics tracking through your browser settings or through opt-out tools provided by our analytics partners.

AI Features: You can choose whether to use AI-powered features and what data to submit to AI models. You are always in control of the prompts and data you provide to our AI tools.

We are committed to giving you meaningful choices about your data and will continue to expand the options available to you as our platform evolves.

We follow the principles of data minimization and purpose limitation in all our data processing activities:

Data Minimization: We only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. We regularly review our data collection practices to ensure we are not collecting more data than needed.

Purpose Limitation: We collect data for specified, explicit, and legitimate purposes, and we do not process it further in a manner that is incompatible with those purposes. When we need to use your data for a new purpose, we update this Privacy Policy and obtain your consent where required.

Storage Limitation: We do not keep personal data in a form that permits identification of individuals for longer than is necessary for the purposes for which the data is processed. We have established retention schedules and deletion procedures to ensure data is deleted or anonymized when no longer needed.

Accuracy: We take reasonable steps to ensure that personal data is accurate and, where necessary, kept up to date. We provide tools for you to review and update your personal information, and we correct inaccurate data promptly upon request.

Integrity and Confidentiality: We process personal data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.

Accountability: We are responsible for and able to demonstrate compliance with these principles. We maintain documentation of our processing activities and conduct regular reviews of our data protection practices.

Data Protection by Design: We implement appropriate technical and organizational measures designed to implement data protection principles and safeguard the rights of individuals. This includes pseudonymization, encryption, and privacy-enhancing technologies.

Data Protection by Default: We ensure that, by default, only personal data necessary for each specific purpose is processed. We configure our systems to minimize data exposure and to protect privacy by default, without requiring any action from you.

Special categories of personal data (also known as sensitive data) include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, and data concerning sex life or sexual orientation.

Our General Practice: We do not knowingly collect or process special categories of personal data through our Services. Our platform is designed for business automation, workflow management, and AI-assisted content generation, and we do not require sensitive personal data to provide our Services.

User-Uploaded Data: If you upload or process data through our platform that contains special categories of personal data (for example, in files you process through our AI tools or in data you transfer through integrations), you are responsible for ensuring that you have the legal right to process that data and that your processing complies with applicable data protection laws.

Legal Basis for Sensitive Data: If special categories of personal data are processed through our Services, the processing must be based on one of the limited legal bases permitted under applicable law, such as explicit consent, vital interests, or other legally recognized grounds. We do not provide a legal basis for your processing of sensitive data — you must establish your own.

Safeguards: When special categories of personal data are processed through our platform, we apply enhanced security measures, including encryption, access controls, and audit logging, to protect this data from unauthorized access.

Notification: If you become aware that special categories of personal data are being processed through our platform in a manner that may not comply with applicable law, please notify us immediately at privacy@base75.ai.

Data Minimization for Sensitive Data: We encourage all users to minimize the processing of special categories of personal data through our platform. Where possible, anonymize or pseudonymize sensitive data before processing it through our Services.

Health and Biometric Data: We do not provide features specifically designed for processing health or biometric data. If you use our platform to process such data, you do so at your own risk and are responsible for ensuring compliance with all applicable health data protection laws, including HIPAA in the United States or equivalent laws in your jurisdiction.

Children's Data: As stated in our Children's Privacy section, our Services are not directed to individuals under 16, and we do not knowingly collect data from minors. Data about children is treated as a special category and handled with the highest level of protection.

We use automated processing, including AI and machine learning, to provide our Services. The following describes how automated decision-making and profiling work on our platform:

AI-Powered Features: Our AI assistant, content generation tools, and workflow automation features use automated processing to generate responses, create content, and perform tasks based on your inputs. These features are designed to assist you, not to make decisions about you without your involvement.

No Solely Automated Decisions: We do not make solely automated decisions that produce legal or similarly significant effects on you. All AI-generated outputs are provided for your review, and you decide whether and how to use them. You are always in the loop when it comes to decisions based on AI outputs.

Profiling: We may analyze your usage patterns and preferences to improve your experience, such as personalizing recommendations or optimizing interface elements. This profiling does not produce legal or similarly significant effects on you and is based on your interactions with our platform.

AI Model Behavior: Our AI models generate responses based on patterns in their training data and the prompts you provide. These models may reflect biases present in their training data, and their outputs should be reviewed and verified before use. We do not represent that AI outputs are objective, neutral, or free from bias.

Your Right to Object: You have the right to object to automated processing, including profiling, that is based on legitimate interests or direct marketing. You also have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, unless the processing is necessary for a contract, authorized by law, or based on your explicit consent.

Human Review: If you believe that an automated decision has affected you in a way that requires human review, you can contact us at privacy@base75.ai to request human intervention. We will review the decision and provide you with the ability to express your point of view and contest the decision.

Transparency: We strive to be transparent about how our AI features work, what data they use, and what their limitations are. We provide documentation and explanations of our AI capabilities to help you understand how automated processing works on our platform.

Model Updates: Our AI models may be updated or retrained over time, which can affect the outputs they produce. We do not guarantee that AI outputs will be consistent over time, as models evolve and improve.

Third-Party AI Models: Some of our AI features use models provided by third parties. The automated processing performed by these models is subject to the respective provider's terms and practices, in addition to our own. We select providers that maintain appropriate transparency and data protection standards.

We are committed to the principles of privacy by design and privacy by default in the development and operation of our platform:

Privacy by Design: We integrate privacy considerations into the design and development of our products and services from the earliest stages. This means:

• Conducting privacy impact assessments for new features and services

• Minimizing data collection to what is strictly necessary

• Implementing privacy-enhancing technologies, such as encryption and pseudonymization

• Designing features with user control and transparency in mind

• Regularly reviewing and updating our privacy practices

Privacy by Default: We configure our platform to protect your privacy by default, without requiring any action from you. This includes:

• Defaulting to the most privacy-protective settings

• Minimizing data sharing with third parties unless you opt in

• Limiting data retention to the minimum necessary period

• Using data only for the purposes for which it was collected

• Requiring explicit consent for optional data processing activities

Data Protection Impact Assessments: For new features, services, or processing activities that may result in high risk to your privacy, we conduct data protection impact assessments (DPIAs) to identify and mitigate risks before deployment.

Privacy-Enhancing Technologies: We use technologies such as encryption, pseudonymization, and data minimization to protect your privacy throughout the data lifecycle, from collection to deletion.

User Control: We provide tools and settings that allow you to control your data and privacy preferences. You can access, update, export, and delete your data through your account settings at any time.

Transparency: We are committed to being transparent about our data practices. This Privacy Policy, our documentation, and our communications are designed to help you understand how we handle your data.

Continuous Improvement: We continuously review and improve our privacy practices based on user feedback, technological developments, and changes in applicable laws. We invest in privacy as an ongoing commitment, not a one-time effort.

Training and Awareness: We train our team on privacy and data protection best practices, ensuring that everyone involved in building and operating our platform understands their role in protecting user privacy.

Vendor Management: We select service providers that meet our privacy standards and enter into agreements that ensure they protect your data in accordance with our policies and applicable laws.

If you wish to exercise your data subject rights, we have established a detailed process to handle your requests:

Step 1 — Submit Your Request: Send an email to privacy@base75.ai with the subject line "Data Subject Request." Include your full name, email address associated with your account, and a clear description of the request you are making (access, rectification, deletion, portability, objection, or restriction).

Step 2 — Identity Verification: We will verify your identity to ensure we are responding to the correct person. This may involve asking you to confirm account details, provide additional identifying information, or complete a verification process. We do not process requests from unverified individuals.

Step 3 — Request Review: We will review your request to determine what data is involved, what action is required, and whether any exceptions apply. We may need to contact you for clarification or additional information.

Step 4 — Processing: We will process your request within 30 days of receipt. In complex cases, we may extend this period by up to 60 additional days, in which case we will inform you of the extension and the reasons for it.

Step 5 — Response: We will provide you with a written response to your request. For access requests, we will provide a copy of your personal data in a structured, commonly used, and machine-readable format. For other requests, we will confirm the action taken.

Step 6 — Follow-Up: If you are not satisfied with our response, you can appeal by contacting us again at privacy@base75.ai with the subject line "Appeal." We will review your appeal and provide a final response.

Types of Requests:

• Access Request: You can request a copy of all personal data we hold about you, along with information about how we process it, who we share it with, how long we retain it, and what rights you have regarding it.

• Rectification Request: You can request that we correct any inaccurate or incomplete personal data. We will update your data promptly upon verification.

• Deletion Request: You can request that we delete your personal data. We will delete your data subject to certain exceptions, such as legal retention requirements or ongoing legal proceedings.

• Portability Request: You can request to receive your personal data in a structured, machine-readable format and, where technically feasible, have it transmitted to another service provider.

• Objection Request: You can object to certain types of processing, such as processing for direct marketing or processing based on legitimate interests. We will stop the processing unless we have compelling legitimate grounds that override your interests.

• Restriction Request: You can request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of your data or assess your objection.

• Withdrawal of Consent: Where we process your data based on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Authorized Representatives: You can authorize another person to submit a request on your behalf. If you use an authorized representative, we may require proof of authorization and may need to verify your identity directly.

Fees: We do not charge a fee for processing data subject requests, unless the request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline to process the request.

Complaints: If you are not satisfied with our handling of your request, you have the right to lodge a complaint with your local data protection authority.

In certain situations, we may act as a data controller, a data processor, or a joint controller with other parties. The following describes these relationships:

Base75 AI as Data Controller: When we determine the purposes and means of processing your personal data (such as managing your account, processing payments, and sending communications), we act as a data controller. This Privacy Policy applies to all processing where we are the controller.

Base75 AI as Data Processor: When you use our platform to process personal data of individuals (such as your customers or employees) through workflows and integrations, you are the data controller and we are the data processor. We process data only on your instructions and in accordance with our Terms of Service. You are responsible for ensuring you have the right to process that data.

Joint Controllers: In limited circumstances, we may act as a joint controller with another party, such as when we co-develop a feature or service with a partner. In such cases, we will define our respective responsibilities in an agreement and provide you with information about how to exercise your rights.

Your Responsibilities as a Controller: If you use our platform to process personal data of third parties, you are responsible for:

• Obtaining necessary consents from individuals whose data you process

• Providing privacy notices to those individuals

• Ensuring your processing complies with applicable data protection laws

• Responding to data subject requests from those individuals

• Maintaining records of your processing activities

Data Processing Agreement (DPA): For customers who require a DPA for compliance with data protection laws (such as the GDPR), we may provide one upon request. The DPA defines our responsibilities as a data processor and your responsibilities as a data controller. Contact us at privacy@base75.ai to request a DPA.

Sub-Processors: We use sub-processors (such as cloud hosting and AI model providers) to help us provide our Services. We maintain a list of sub-processors and ensure they are bound by appropriate data protection agreements. We will notify you of changes to our sub-processor list if required by applicable law or your DPA.

International Transfers by Processors: When we act as a data processor, international transfers of personal data are subject to the terms of the DPA and applicable data protection laws. We use appropriate safeguards, such as standard contractual clauses, for international transfers.

Liability: Our liability as a data processor is limited to the terms of our Terms of Service and any applicable DPA. We are not liable for your compliance with data protection laws as a data controller.

Audit Rights: Depending on your plan and applicable legal requirements, you may have the right to audit our data processing practices. Contact us at privacy@base75.ai to discuss audit arrangements.

Controller-Controller Sharing: If you share data with another Base75 AI user (such as through shared workflows or templates), both you and the other user are independent controllers for that data. We facilitate the sharing but are not responsible for how the other user processes your data.

The following is a detailed inventory of the types of cookies and tracking technologies we use on our platform:

Essential Cookies (Required):

• Session cookies: Maintain your login session and authenticate your requests

• Security cookies: Protect against cross-site request forgery (CSRF) and other security threats

• Load balancing cookies: Distribute traffic across servers for performance and reliability

• Account cookies: Remember your account preferences and settings

Preference Cookies:

• Theme preference: Remembers your light or dark mode selection

• Language preference: Remembers your selected language

• Interface preferences: Remembers your display and layout preferences

• Notification preferences: Remembers your notification settings

Analytics and Performance Cookies:

• Usage analytics: Track page views, session duration, and user journeys

• Performance metrics: Monitor page load times and error rates

• Feature usage: Track which features are used most frequently

• A/B testing: Help us test and improve features through controlled experiments

Functional Cookies:

• Integration state: Remember which third-party integrations you have connected

• Workflow state: Maintain the state of in-progress workflow configurations

• Form data: Temporarily store form data to prevent loss during editing

• Recently viewed: Remember recently viewed workflows, templates, or integrations

Marketing Cookies (Opt-In):

• Advertising identifiers: Enable targeted advertising on third-party platforms

• Conversion tracking: Measure the effectiveness of marketing campaigns

• Retargeting: Show relevant ads to users who have visited our website

Third-Party Cookies:

• Analytics provider cookies: Set by our analytics provider to collect usage data

• Payment provider cookies: Set by our payment processor during checkout

• AI model provider cookies: Set by AI model providers when processing requests

• Integration partner cookies: Set by integration partners when you connect their services

Cookie Duration:

• Session cookies: Deleted when you close your browser

• Persistent cookies: Remain on your device for a specified period (typically 30 days to 2 years)

• Short-lived cookies: Used for specific tasks and deleted shortly after

Managing Cookies:

• Browser settings: You can manage cookies through your browser's privacy settings

• Cookie banner: Where required by law, we display a cookie banner that allows you to accept or reject non-essential cookies

• Opt-out tools: Some third-party providers offer opt-out tools that you can use to opt out of their tracking

• Platform settings: You can manage certain cookie preferences through your account settings

Cookie Updates: We may update the cookies we use as we add new features or change our service providers. We will update this inventory accordingly and notify you of material changes as required by applicable law.

Web Beacons and Pixels: In addition to cookies, we may use web beacons (also known as clear GIFs or pixels) to track email opens, page views, and other interactions. These technologies work similarly to cookies and can be managed through the same browser settings.

We collect certain location and device data to provide and improve our Services:

Location Data: We may collect approximate location data based on your IP address. This data is used to:

• Determine your approximate geographic location for security and fraud prevention

• Comply with regional legal requirements

• Optimize content delivery and performance

• Provide region-appropriate features and settings

We do not collect precise GPS location data through our platform unless you explicitly provide it as part of your content or data.

Device Data: We collect the following device information:

• Device type (desktop, laptop, tablet, mobile)

• Operating system and version

• Browser type and version

• Screen resolution and color depth

• Device identifiers (where available and permitted)

• Network information (connection type, carrier)

How We Use Device Data:

• Optimize our platform for different devices and browsers

• Troubleshoot technical issues

• Detect and prevent fraud and unauthorized access

• Analyze usage patterns across device types

• Provide appropriate user experiences based on device capabilities

IP Addresses: We collect and store IP addresses for security, fraud prevention, and analytics purposes. IP addresses may be used to:

• Identify the approximate geographic location of users

• Detect suspicious activity and potential security threats

• Enforce rate limits and prevent abuse

• Comply with legal requirements

Mobile Devices: If you access our Services from a mobile device, we may collect mobile-specific data, including device model, mobile operating system version, and mobile network information. We do not access your mobile device's contact list, photos, or other personal data without your explicit permission.

Location Sharing: Our platform does not request access to your device's location services. If a feature requires location data, you will be asked to provide it explicitly.

Device Permissions: If you use our mobile app (if available), we will request only the device permissions necessary for the features you use. You can manage these permissions through your device settings.

Retention of Device Data: Device and location data is retained for a limited period, typically 12 to 24 months, unless longer retention is required for security, legal, or compliance purposes.

Opting Out: You can limit the collection of device and location data by adjusting your browser or device settings. However, some data collection is necessary for our Services to function properly and securely.

Children's Location Data: We do not knowingly collect location data from children under 16. If you believe we have collected location data from a minor, please contact us at privacy@base75.ai.

We do not collect or process biometric, health, or other highly sensitive data through our platform as part of our standard Services. The following describes our approach to sensitive data:

Biometric Data: We do not collect biometric data (such as fingerprints, facial recognition data, or voiceprints) through our standard platform features. If you upload biometric data as part of your content or data processing, you are responsible for ensuring compliance with applicable biometric data protection laws.

Health Data: We do not provide features specifically designed for processing health or medical data. If you use our platform to process health data (such as through file uploads or AI processing), you are solely responsible for ensuring compliance with health data protection laws, including HIPAA in the United States, the GDPR's special categories provisions in the EU, or equivalent laws in your jurisdiction.

Financial Data: We do not store full payment card numbers on our servers. Payment card data is processed by our payment providers, who are responsible for maintaining PCI DSS compliance. We may store the last four digits of your card number and card type for display purposes.

Government Identifiers: We do not collect government-issued identification numbers (such as Aadhaar, PAN, Social Security Numbers, or passport numbers) through our standard platform features. If you upload such data as part of your content, you are responsible for ensuring compliance with applicable laws governing the processing of government identifiers.

Children's Data: As stated in our Children's Privacy section, we do not knowingly collect data from individuals under 16. Data about children is treated as sensitive data and handled with the highest level of protection.

Genetic Data: We do not collect or process genetic data through our platform. If you upload genetic data as part of your content, you are responsible for ensuring compliance with applicable genetic data protection laws.

Religious, Political, and Philosophical Beliefs: We do not collect data about your religious, political, or philosophical beliefs. If such data is present in content you upload, you are responsible for ensuring your processing complies with applicable laws.

Sexual Orientation and Preferences: We do not collect data about your sexual orientation or sexual preferences. If such data is present in content you upload, you are responsible for ensuring compliance with applicable laws.

Trade Union Membership: We do not collect data about your trade union membership. If such data is present in content you upload, you are responsible for ensuring compliance with applicable laws.

Racial or Ethnic Origin: We do not collect data about your racial or ethnic origin. If such data is present in content you upload, you are responsible for ensuring compliance with applicable laws.

Enhanced Protections: When sensitive data is processed through our platform (whether by us or by you), we apply enhanced security measures, including encryption, strict access controls, audit logging, and data minimization, to protect this data from unauthorized access.

Reporting: If you become aware that sensitive data is being processed through our platform in a manner that may not comply with applicable law, please notify us immediately at privacy@base75.ai. We will investigate and take appropriate action.

Our Commitment: We are committed to protecting sensitive data and to helping our users understand their responsibilities when processing such data through our platform. We provide documentation and support to help you comply with applicable data protection laws.

We maintain accountability for our data processing activities through the following measures:

Records of Processing Activities: We maintain records of our data processing activities, including:

• The purposes of processing

• The categories of personal data processed

• The categories of recipients of the data

• The retention periods for different types of data

• The legal bases for processing

• The sources of personal data

• The categories of data subjects

Data Mapping: We maintain a data map that identifies what personal data we collect, where it is stored, who has access to it, how long it is retained, and what security measures protect it. This data map is regularly updated to reflect changes in our processing activities.

Privacy Impact Assessments: We conduct privacy impact assessments (PIAs) or data protection impact assessments (DPIAs) for new features, services, or processing activities that may result in high risk to the rights and freedoms of individuals. PIAs help us identify and mitigate risks before deployment.

Regular Audits: We conduct regular internal audits of our data protection practices to ensure compliance with this Privacy Policy and applicable laws. Audit findings are used to improve our practices and address any identified gaps.

Policy Reviews: We review and update this Privacy Policy at least annually, or more frequently if there are significant changes to our processing activities or applicable laws.

Training and Awareness: We provide regular training to our team on data protection, privacy, and security best practices. All team members who handle personal data receive appropriate training for their roles.

Data Protection by Design: We integrate data protection considerations into the design and development of all new features and services, ensuring that privacy is considered from the earliest stages.

Vendor Management: We assess the data protection practices of our service providers and partners before engaging them and regularly review their compliance with our standards.

Incident Management: We maintain an incident response plan for data protection incidents, including data breaches. The plan defines roles, responsibilities, and procedures for detecting, reporting, investigating, and responding to incidents.

Breach Notification: In the event of a personal data breach, we will notify affected individuals and the appropriate authorities in accordance with applicable laws. We will provide information about the nature of the breach, the likely consequences, and the measures we are taking to address it.

Documentation: We maintain documentation of our data protection practices, including this Privacy Policy, records of processing activities, PIAs, audit reports, and incident records. This documentation is available to relevant authorities upon request.

Continuous Improvement: We continuously improve our data protection practices based on audit findings, incident lessons, user feedback, and changes in applicable laws. We invest in data protection as an ongoing commitment.

Transparency Reports: We may publish transparency reports or similar communications to inform our users and the public about our data protection practices, government requests, and other relevant information.

Contact: If you have questions about our accountability practices or would like more information about our records of processing, please contact us at privacy@base75.ai.