1. Introduction
Baseflow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our contract lifecycle management platform and related services (collectively, the "Services").
By accessing or using our Services, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Services.
2. Information We Collect
2.1 Information You Provide
We collect information you directly provide to us, including:
- Account Information: Name, email address, company name, job title, and password when you register for an account.
- Profile Information: Profile photo, bio, and other details you add to your account.
- Contract Data: Documents, contracts, templates, and related content you upload or create.
- Payment Information: Billing address, payment method details (processed securely by our payment providers).
- Communications: Messages, feedback, and other communications you send to us.
2.2 Information Collected Automatically
When you use our Services, we automatically collect:
- Device Information: Device type, operating system, browser type, and unique device identifiers.
- Usage Data: Pages visited, features used, actions taken, time and date of visits.
- Log Data: IP address, access times, referring URLs, and system activity.
- Cookies and Similar Technologies: Information collected through cookies, pixels, and similar tracking technologies.
2.3 Information from Third Parties
We may receive information from:
- Authentication providers when you sign in using third-party services (e.g., Google, Microsoft).
- Business partners and integrations you choose to connect.
- Publicly available sources.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Services.
- Process transactions and send related information.
- Send technical notices, updates, security alerts, and support messages.
- Respond to your comments, questions, and customer service requests.
- Communicate about products, services, offers, and events.
- Monitor and analyze trends, usage, and activities.
- Detect, investigate, and prevent fraudulent transactions and other illegal activities.
- Personalize and improve your experience.
- Comply with legal obligations.
4. How We Share Your Information
We may share your information in the following circumstances:
- With Your Consent: When you direct us to share information with third parties.
- Service Providers: With vendors who perform services on our behalf (hosting, analytics, payment processing, customer support).
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
- Legal Requirements: When required by law or to protect our rights, privacy, safety, or property.
- With Other Users: When you share contracts or collaborate with others through our platform.
We do not sell your personal information to third parties.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide you Services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Contract data and audit trails may be retained for longer periods as required by law or for legal compliance purposes.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest.
- Regular security assessments and penetration testing.
- Access controls and authentication requirements.
- Employee training on data protection practices.
However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request access to your personal information.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal information.
- Portability: Request a copy of your data in a portable format.
- Objection: Object to processing of your personal information.
- Restriction: Request restriction of processing.
- Withdraw Consent: Withdraw consent where processing is based on consent.
To exercise these rights, please contact us at [email protected].
8. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.
9. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected personal information from a child, we will take steps to delete that information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at: