Privacy Policy

1. Information We Collect

1.1 Information You Provide

We may collect information you voluntarily provide, including:

• Account information such as your name, email address, and organization details
• Work activity data you submit through integrations (e.g. coding sessions, pull requests, meeting summaries)
• Integration credentials and API keys you provide to connect third-party services
• Communications you send to us, such as support requests or feedback

1.2 Information Collected Automatically

When you use the Service, we may automatically collect certain information, including:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed)
• Usage patterns and feature interactions

1.3 Information from Integrations

When you connect third-party services (such as GitHub, Google Calendar, Fireflies, or Claude Code), we collect activity data from those services to generate work entries. We only access the data necessary to provide the Service and do not store raw credentials beyond encrypted OAuth tokens.

1.4 Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to operate and improve the Service, maintain sessions, remember preferences, and analyze usage patterns. You can control cookies through your browser settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate work activity reports, analytics, and ROI dashboards
• Sync and aggregate data from connected integrations
• Improve, personalize, and optimize user experience
• Communicate with you about updates, security, or support matters
• Monitor usage, detect abuse, and enforce our terms
• Comply with legal obligations

3. How We Share Information

We do not sell your personal data. We may share information only in the following circumstances:

• Within your organization — work entries and activity data are shared with members of your organization based on visibility settings you control
• With service providers who perform services on our behalf (e.g. hosting, analytics, email delivery)
• To comply with legal obligations, court orders, or lawful requests
• To protect the rights, safety, and integrity of Basestream, our users, or others
• In connection with a merger, acquisition, or sale of assets, where users will be notified of any change in ownership or data use

4. Data Retention

We retain personal information and work activity data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

You may request deletion of your account or personal data at any time. Organization administrators can manage data retention for their organization.

5. Data Security

We use reasonable administrative, technical, and organizational measures to protect your information, including encryption of credentials at rest and in transit, secure session management, and role-based access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have rights regarding your personal data, including:

• The right to access, correct, or delete your personal information
• The right to object to or restrict certain processing
• The right to data portability
• The right to withdraw consent where consent is the legal basis for processing
• The right to disconnect integrations and revoke access to third-party data at any time

To exercise these rights, contact us using the details below.

7. Children's Privacy

The Service is not intended for children under the age of 13 (or the minimum age required by applicable law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate action.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Where required, we take appropriate safeguards to ensure adequate protection of personal data.

9. Third-Party Services

The Service integrates with third-party services (GitHub, Google Calendar, Fireflies, etc.). Each integration is governed by the respective third party's own privacy policy. We encourage you to review their privacy policies. We are not responsible for the privacy practices of those third parties.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted within the Service or on our website, and the "Last updated" date will be revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, you can contact us at:

Basestream
Email: support@basestream.ai