Draft for legal review. These terms are not in effect yet.
Privacy Policy
This Privacy Policy explains how Konnectia USA LLC, a Delaware limited liability company that provides the Basemodo service ("Basemodo", "we", "us"), collects, uses and shares personal data when you use basemodo.com, the Basemodo web app, the CLI and MCP, and the sign-in in front of every App (the "Service"). Words with capitals mean what our Terms of Service define.
1. Our role, and the Owner's
- Basemodo is the controller of the data about your account: who you are, how you sign in, what you pay, and how the Service is used. This policy covers that data.
- The Owner of an App is the controller of the data the App itself collects and stores, such as what Visitors type into it. Basemodo only processes that data on the Owner's behalf, to run the App. If you use someone's App, their own privacy notice applies to what their App does with your data; ask them about it.
2. What we collect
| Data | Where it comes from |
|---|---|
| Your email address | You, when you sign in with an email link, or Google or GitHub when you sign in with them |
| Your Google or GitHub account's ID and email; for GitHub, the repositories you let us read | Google or GitHub, when you sign in or connect a repository |
| Sessions and devices: the browsers, CLIs and Agents you approved, with a name such as "Firefox" or the name an Agent gives itself, and when they were used | The Service, when you sign in or approve a device or Agent |
| Apps, sharing and Workspaces: your Apps and their settings, the people you invite or share with (their email addresses), Workspaces and their verified domains, access requests | You and the people you work with |
| Billing: your Plan, invoices, and the last digits, brand and expiry of your card. We never see or store your full card number | Stripe, our payment processor |
| Your Apps' content: code, builds, Secrets (stored encrypted), data on their volumes, their Logs and Backups | You, your Agents and your Apps |
| Usage and security data: for each App, how many requests it receives, how much it sends out and to which hosts, failed connections, domain names it looks up, and CPU use; IP addresses and request details in our servers' and providers' logs | The Service, as it runs |
| Messages you send us | You, by email |
We do not use advertising or analytics trackers, do not buy personal data, and do not ask for your name, address or phone number unless you give them to us.
3. Cookies and local storage
We use only cookies the Service needs to work: a session cookie on basemodo.com that keeps you signed in, a short-lived cookie that ties a sign-in to the browser that started it, and, on each App's address, a cookie that keeps you signed in to that App. The web app also remembers a few preferences in your browser (such as the theme and whether the sidebar is open). We use no advertising, analytics or cross-site tracking cookies, so we do not ask for consent to them. Apps may set their own cookies; their Owners are responsible for those.
4. How we use it, and on what basis
- To provide the Service: sign you in, run, build, back up and share your Apps, send the emails the Service sends (sign-in links, invitations, notices about your Apps and invoices), and help you when you write to us. Basis: performing our contract with you.
- To bill you, through Stripe, and to keep invoices. Basis: our contract, and our legal obligations for accounting and tax records.
- To keep the Service secure and stop abuse: detect spam, malware, mining, scanning, attacks and fraud, enforce the Terms and the Acceptable Use Policy, and investigate reports. This includes automated decisions that slow down, pause or suspend an App or an account (see the Acceptable Use Policy); you can always ask a person at Basemodo to review one at abuse@basemodo.com. Basis: our legitimate interest in a safe service, and our contract.
- To improve the Service, from usage measures of the Service as a whole. Basis: our legitimate interest. We do not look into the content of your Apps for this.
- To comply with the law, respond to lawful requests, and protect the rights and safety of Basemodo, our customers and others. Basis: our legal obligations and legitimate interests.
We do not sell your personal data, do not share it for cross-context behavioral advertising, and do not use Your Content to train AI models.
5. Who we share it with
We share personal data only with:
- Service providers that process it for us under contract: infrastructure where Apps run (phoenixNAP, whose servers Basemodo operates) and where the Service runs (Fly.io), Vercel (basemodo.com), Stripe (payments), Resend (email), Google and GitHub (sign-in and repositories), Cloudflare (the DNS of Apps' addresses), and Let's Encrypt (certificates for custom domains, which see the domain name only);
- People in your account: the Owner of an App sees the email addresses of its Members, Editors and of those who request access; a Workspace's Admins see its people; people you invite see your email address;
- Authorities and others, when the law requires it or when we believe in good faith it is necessary to protect someone's safety, to stop abuse, or to defend our rights; and
- A successor, if Basemodo is merged, acquired or sells its assets, under this policy.
6. How long we keep it
| Data | Kept |
|---|---|
| Your account | While it exists; deleted within 30 days after you ask us to delete it |
| Logs of your Apps | The days your Plan shows (7 or 30) |
| Backups | The days your Plan shows; an App's last Backup for that time after the App is deleted |
| Apps of an ended Trial or Plan | 30 days, then they may be deleted |
| Usage and security measures | 30 days, and longer for a case under review or when the law requires it |
| Records of abuse decisions and suspensions | As long as needed to prevent the same abuse from returning |
| Invoices and payment records | As long as tax and accounting laws require (usually 7 years) |
7. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive it in a portable format, object to or restrict how we use it, withdraw a consent, and not be discriminated against for using these rights. Residents of the European Economic Area, the United Kingdom, Switzerland, California, Colombia and other places have these rights by law; we honor these requests for everyone. Write to privacy@basemodo.com from your account's email address. We answer within 30 days, may need to confirm your identity, and may keep data the law requires us to keep or that we need to stop abuse. You can also complain to your data protection authority.
Your Apps' data you can download yourself at any time from each App's page. For data an App collected about you, write to the App's Owner: Basemodo cannot decide on their behalf.
8. International transfers
Basemodo is based in the United States, and our providers process data in the United States and in other countries where they operate, including where your Apps run. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another lawful mechanism.
9. Security
We protect personal data with encryption in transit, encrypted Secrets, isolated Machines for every App, access limited to the people who need it, and monitoring for abuse. No service is completely secure; if a breach affects your personal data, we will tell you as the law requires.
10. Children
The Service is not directed to children and you must be 18 to create an account. If you believe a child gave us personal data, write to privacy@basemodo.com and we will delete it.
11. Changes
We may update this policy. If a change is material, we will tell you by email or in the Service before it takes effect. The version and effective date at the top of this page tell you which policy applies.
12. Contact
Konnectia USA LLC, [REGISTERED ADDRESS]. Privacy questions and requests:privacy@basemodo.com.