Privacy Policy

1. Information we collect

The information we collect depends on how you interact with us.

Contact and business information

We may collect information such as:

• Your name
• Company name
• Job title
• Email address
• Telephone number
• Business address
• Industry
• Information about your workflows or business needs

We collect this information when you contact us, request a workflow review, participate in a demonstration, purchase services, or communicate with us.

Files and Client data

We may collect files and information you provide so we can perform the services, including:

• Spreadsheets
• CSV files
• Reports
• Templates
• Exports
• Transaction records
• Project data
• Customer-provided business information
• Workflow instructions
• Output specifications
• Related communications

The contents of these files depend on what you choose to provide.

You are responsible for ensuring that you have the right to provide the data and for avoiding unnecessary sensitive information.

Communications

We may retain communications you exchange with us, including:

• Emails
• Support requests
• Meeting notes
• Demonstration notes
• Billing communications
• Scope and workflow instructions
• Feedback

Payment and transaction information

Payments are processed by Stripe.

Baseline Ops does not directly receive or store complete payment-card numbers or bank-account credentials.

Stripe may provide us with transaction information such as:

• Your name
• Company name
• Billing email
• Billing address
• Invoice information
• Payment status
• Payment method type
• Limited payment identifiers
• Subscription status
• Charge and refund history

Stripe processes payment information under its own terms and privacy policy.

Website and technical information

When you visit our website or use an online service, we or our service providers may automatically collect technical information such as:

• Internet Protocol address
• Browser type
• Device type
• Operating system
• Referring page
• Pages visited
• Approximate location derived from an IP address
• Date and time of access
• Error logs
• Performance data
• Cookie or similar technology information

The exact information collected depends on the hosting, analytics, security, and infrastructure tools currently enabled.

2. How we use information

We may use information to:

• Respond to inquiries
• Evaluate potential workflow projects
• Prepare demonstrations, proposals, and pricing
• Provide implementation and customization services
• Process files and generate agreed outputs
• Build, operate, maintain, and support workflow modules
• Communicate about projects, billing, support, and service changes
• Process invoices, subscriptions, charges, refunds, and cancellations
• Maintain business and accounting records
• Diagnose errors and improve service reliability
• Protect our website, services, Clients, and systems
• Prevent fraud, misuse, or unauthorized access
• Enforce our agreements
• Comply with legal, tax, accounting, and regulatory requirements
• Establish, exercise, or defend legal claims

We may also use aggregated or de-identified information to understand service performance and improve our processes, provided that the information does not reasonably identify a Client or individual.

3. How we use Client files and data

Files and data provided for a Client engagement are used only as reasonably necessary to:

• Perform the requested services
• Build and test the agreed workflow
• Generate output files
• Diagnose problems
• Provide maintenance and support
• Protect service security
• Comply with applicable law
• Enforce our agreements

We do not sell Client files or use identifiable Client data for unrelated advertising.

We do not use identifiable Client files to build public demonstrations, marketing materials, or examples without permission.

We do not use Client information to train a general-purpose artificial-intelligence model unless that use is expressly disclosed and authorized in writing.

If an artificial-intelligence service is used to process Client information, the applicable provider and use will be disclosed to the Client before sensitive data is submitted.

4. How we share information

We do not sell personal information.

We may share information with service providers that help us operate Baseline Ops, including providers of:

• Payment processing
• Website hosting
• Application hosting
• Cloud infrastructure
• Email and communications
• Scheduling
• Security
• Accounting
• Legal and professional services

Our current providers include:

• Stripe for payment processing and billing
• Netlify for website hosting
• Render for application and backend hosting
• Resend for transactional email delivery

Service providers may process information only as reasonably necessary to provide services to us and remain subject to their own contractual and legal obligations.

We may also disclose information:

• When required by law, subpoena, court order, or government request
• To protect the rights, safety, security, or property of Baseline Ops or others
• To investigate fraud, misuse, or security incidents
• In connection with a merger, acquisition, financing, reorganization, sale of assets, or business transfer
• With your consent or at your direction

5. Cookies and analytics

The website may use cookies or similar technologies that are necessary for functionality, security, or performance.

We do not currently use third-party advertising cookies or cross-site tracking cookies.

If analytics or advertising cookies are added in the future, this policy will be updated and any legally required cookie notice or consent controls will be added.

6. Data retention

We retain information for as long as reasonably necessary to:

• Provide and support the services
• Maintain business records
• Meet contractual obligations
• Meet tax, accounting, and legal obligations
• Resolve disputes
• Prevent fraud
• Enforce agreements
• Maintain security and service continuity

Retention periods vary depending on the type of information.

Client files may be retained during an active engagement and for a reasonable period afterward for support, backup, recordkeeping, and dispute-resolution purposes.

Clients may request deletion of files that are no longer required. We may retain information where necessary for legal, security, accounting, contractual, backup, or legitimate business purposes.

Deletion from active systems may not immediately remove information from encrypted backups or archival systems.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information.

These safeguards may include:

• HTTPS-encrypted website traffic
• Access controls
• Authentication
• Restricted system access
• Managed hosting providers
• Payment processing through Stripe
• Software updates
• Logging and monitoring
• Backup procedures
• Limiting access to people who need information for their work

No method of transmission, processing, or storage is completely secure.

You should avoid sending unnecessary sensitive information and should maintain your own backup copies of important files.

8. Sensitive and regulated information

Baseline Ops is not intended to receive highly sensitive or regulated personal information unless expressly agreed in writing.

Do not send information such as:

• Social Security numbers
• Government identification numbers
• Full payment-card data
• Bank credentials
• Medical records
• Protected health information
• Biometric data
• Passwords
• Authentication secrets
• Information regulated under specialized privacy laws

If an engagement requires regulated or highly sensitive information, the parties should establish appropriate contractual, security, and compliance requirements before the information is shared.

9. Your choices and requests

You may contact us to request:

• Access to personal information associated with you
• Correction of inaccurate information
• Deletion of information
• A copy of certain information
• Information about our processing practices
• Cancellation of marketing communications

We may need to verify your identity before completing a request.

We may deny or limit a request where permitted or required by law, including where information must be retained for:

• Legal obligations
• Security
• Fraud prevention
• Accounting
• Tax records
• Contract administration
• Dispute resolution

To submit a privacy request, email support@baselineops.net.

10. California privacy requests

California law may provide certain privacy rights depending on the nature of the information and whether the applicable law applies to Baseline Ops.

Regardless of whether a particular statutory right applies, California residents may contact us to request access to, correction of, or deletion of personal information associated with them.

We will review and respond to reasonable requests, subject to identity verification and applicable legal, security, accounting, contractual, and operational retention requirements.

Baseline Ops does not sell personal information.

Baseline Ops does not share personal information for cross-context behavioral advertising unless this policy is updated to state otherwise.

11. Children’s privacy

Baseline Ops provides business-to-business services and is not directed to children under 13.

We do not knowingly collect personal information directly from children under 13.

If you believe a child has provided personal information to us, contact support@baselineops.net.

12. Third-party websites and services

Our website may link to third-party websites or services.

We are not responsible for the privacy, security, availability, or content practices of third parties.

Review the privacy policies of third-party services before providing information to them.

13. International visitors

Baseline Ops is operated from the United States.

If you access the website or services from another country, information may be transferred to, processed in, and stored in the United States or other locations where our service providers operate.

Those locations may have data-protection laws that differ from the laws where you live.

14. Business transfers

If Baseline Ops is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction.

The recipient may continue to use information in accordance with this Privacy Policy unless you are notified otherwise.

15. Changes to this Privacy Policy

We may update this Privacy Policy as our services, providers, and practices change.

When we make changes, we will revise the “Last updated” date at the top of the page.

Material changes may also be communicated through the website, email, or another reasonable method.

16. Contact

Questions, requests, or concerns about privacy may be sent to:

Email: support@baselineops.net