Privacy Policy

1. Scope and Updates to This Privacy Policy

This Privacy Policy is designed to help you understand how BaseBase ("we," "our," or "us") collects, uses, and shares your personal information, and to help you understand and exercise your privacy rights. This Privacy Policy applies to personal information processed by us, including on our websites, mobile applications, and other online or offline offerings. To make this Privacy Policy easier to read, our websites and other offerings are collectively called the "Services."

Changes to our Privacy Policy. We may revise this Privacy Policy from time to time in our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use our Services after the new Privacy Policy takes effect.

An Important Note: This Privacy Policy does not apply to any of the personal information that we process on behalf of our customers through their use of our Services ("Customer Data"). Our customers' respective privacy policies and other applicable documentation govern their collection and use of Customer Data. Our processing of Customer Data is governed by the contracts that we have in place with our customers, not this Privacy Policy. Any questions or requests relating to Customer Data should be directed to the relevant customer.

2. Personal Information We Collect

The categories of personal information we collect depend on how you interact with us, our Services, and the requirements of applicable law. We collect information that you provide to us, information we obtain automatically when you use our Services, and information from other sources such as third-party services and organizations, as described below.

2.1 Personal Information You Provide to Us

We may collect the following categories of personal information that you provide:

• Account information. This includes personal information and identifiers in connection with the creation or administration of your account, such as your name, email address, phone number, address or geolocation data, professional details, and any other information that you provide to us or that we otherwise collect.
• Information you submit to us. Where you submit inquiries or other information, for example to request information or support from us, we may collect your personal information to be able to respond to your request, or other personal information that you include.
• Surveys and interactive features. We may contact you to participate in surveys. If you decide to participate, we may collect personal information from you in connection with the survey. We and others who use our Services may also collect personal information that you submit or make available through our interactive features (e.g., blogs and social media pages). Note that any information you provide using public sharing features of the Services will be considered "public" unless otherwise required by applicable law, and is not subject to the privacy protections referenced herein.
• BaseBase AI agent interaction. We may collect information, for example personal information and identifiers such as name and email address, that you enter when interacting with AI agents that we operate on our own behalf, for example demonstration agents or recruiting agents.
• Business development information. We may collect personal information and identifiers from individuals and third parties to assess and pursue potential business opportunities. We may collect this information through our website or, for example, we may collect personal information from individuals when we attend or host conferences, trade shows, and other events.
• Job applicant information. We may post job openings and opportunities on our Services or in other places. If you respond to or interact with one of these postings, we may collect your personal information including identifiers and professional or employment-related information, such as your application, CV, cover letter, or any other information you provide to us.
• Purchases. We may collect commercial information and details associated with the purchase of our Services, including identifiers and business contact information. Any payments made via our Services are processed by third-party payment processors. We do not directly collect or store any payment card information entered through our Services, but we may receive information associated with your payment card information (e.g., your billing details).

2.2 Information from Connected Services

When you connect third-party services (such as CRM systems, Slack, calendars), we access and process data from those services as necessary to provide our Service. This may include:

• Contact and deal information from your CRM
• Messages and conversations from communication platforms
• Calendar events and meeting information
• Email content and metadata

2.3 Personal Information Collected Automatically

We may collect certain information automatically when you use our Services, such as:

• Your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers
• Browser or device information, location information (including approximate location derived from IP address), and Internet service provider
• Information regarding your use of our Services, such as pages that you visit before, during and after using our Services, items that you search for via the Services, information about the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our Services

In some cases, we may use third parties to provide functionality in order to collect this information on our Services.

2.4 Personal Information Collected from Other Sources

Third-Party Services and Sources. We may obtain personal information about you, including your name, contact details, and your role at your company, from other sources. These include from public sources, through third-party services and organizations, or through third parties that aggregate public information. We may also have contractual arrangements to co-sponsor events or content about our Services shared through various channels, such as newsletters and advertisements.

2.5 Cookies and Other Technologies

We, as well as third parties that provide content, advertising, or other functionality on our Services, may use cookies, pixel tags/web beacons, and other technologies ("Technologies") to automatically collect information through your use of our Services.

• Cookies. Cookies are small text files placed in device browsers that store preferences and facilitate and enhance your experience.
• Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in our Services that collects information about engagement on our Services. The use of a pixel tag allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement. We may also include web beacons in emails to understand whether messages have been opened, acted on, or forwarded.

We use these Technologies for different purposes:

• Strictly Necessary. We use strictly necessary Technologies for the website to function and they cannot be switched off in our systems. They are usually set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.
• Functional. These Technologies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages.
• Analytics and Performance. We may use Technologies and other third-party tools to process analytics information on our Services. These Technologies allow us to better understand how our Services are used and to continually improve and personalize our Services.
• Marketing and Advertising (Targeting). We may work with advertising networks and social media platforms that gather information about the content you have accessed on our Services and on other websites and services you visit.

Depending on where you are located when you access our Services, different Technologies will be automatically set for you and you will have different choices as to how to change your settings. Please visit "Cookie Preferences" on our website to view and update your settings, and to learn more information on how to control or opt out of these cookies and Technologies.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Respond to your inquiries and provide customer support
• Send you technical notices and updates
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. How We Disclose Your Personal Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers. We may share your personal information with our service providers and other third parties that perform services for us or on our behalf, which may include providing cloud computing infrastructure, analytics, customer service, email delivery, marketing, and other services.
• Business Partners. We may share your personal information with business partners to provide you with a product or service you have requested. We may also share your personal information to business partners with whom we jointly offer products or services.
• Corporate Affiliates. We may share your personal information with our corporate affiliates.
• Advertising Partners. We may share your personal information with third-party advertising partners. This practice is commonly referred to as "interest-based advertising" or "personalized advertising."
• Third-Party Services You Choose to Interface With. We may share your personal information with third-party services you choose to interface, interact, share information with, direct us to share information with, access and/or use.
• When Required by Law or to Protect Rights. We may disclose your personal information if it is reasonably necessary to: (i) comply with legal process and to respond to claims asserted against BaseBase; (ii) respond to verified requests relating to a criminal investigation or alleged or suspected illegal activity; (iii) enforce and administer our agreements with users; or (iv) protect the rights, property, or personal safety of BaseBase, its users, or others.
• Business Transfers. We may share your personal information in connection with or during negotiations of any proposed or actual financing of our business, or merger, purchase, sale, joint venture, or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another company.
• With Your Consent. We may disclose your personal information for any other purpose with your consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

6. Retention of Personal Information

We store the personal information we collect as described in this Privacy Policy for as long as you use our Services, or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

To determine the appropriate retention period for personal information, we may consider applicable legal requirements; the amount, nature, and sensitivity of the personal information; certain risk factors; the purposes for which we process your personal information; and whether we can achieve those purposes through other means.

7. Your Privacy Choices and Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access Personal Information. You may request access to your personal information.
• Delete Personal Information. You may request that we delete your personal information.
• Correct Personal Information. You may request that we correct inaccurate personal information.
• Data Portability. You may request that we provide a copy of your personal information in a portable format.
• Opt-Out of Processing. You may request that we stop processing your personal information.
• Opt-Out of Sale/Sharing. You may request that we stop selling or sharing your personal information.
• Opt-Out of Targeted Advertising. You may request that we stop using your personal information for targeted advertising.
• Limit Use of Sensitive Personal Information. You may request that we limit our use of your sensitive personal information.
• Withdraw Consent. You may withdraw your consent to our processing of your personal information. Please note that your withdrawal will only take effect for future processing, and will not affect the lawfulness of processing before the withdrawal.

If you would like to exercise these rights, you or your authorized agent may contact us as set forth in "Contact Us" below. We will process such requests in accordance with applicable laws. If necessary we may request additional information from you in order to assess and effectively address your rights request.

If your personal information is subject to the applicable data protection laws of the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority if you believe our processing of your personal information violates applicable law.

9. Children's Information

The Services are not directed to children under 18 (or other age as required by local law), and we do not knowingly collect, sell, or share personal information from children. BaseBase does not have actual knowledge of any "sale" of personal information of minors under 16 years of age, nor any "sharing" of personal information of minors under 16 years of age for "cross-context behavioral advertising" under CCPA.

If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us as described in "Contact Us" below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child's account, if applicable.

10. International Transfers of Personal Information

All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your personal information consistent with the requirements of applicable laws.

If we transfer personal information which originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfer is the EU Standard Contractual Clauses.

For more information about the safeguards we use for international transfers of your personal information, please contact us as set forth below.

11. Our Lawful Basis for Processing

If your personal information is subject to the EU or UK General Data Protection Regulation, our processing of your personal information, including for AI use cases, may be supported by the following lawful bases:

• Performance of a Contract. BaseBase may need to process your personal information to perform our contract with you or to take steps in advance of concluding a contract with you to deliver our Services to you. Without this processing, we will not be able to provide our Services.
• Legitimate Interest. BaseBase may process your personal information to further its legitimate interests, but only where our interests are not overridden by your interests or fundamental rights and freedoms. For example, this might be to analyse the performance of our Services and how you interact with our Services, and to improve our products, customer service, and Services.
• Compliance with our Legal Obligations. BaseBase may process your personal information to comply with our legal obligations. For example, we may need to process records about payment for the Services for tax and accounting purposes.
• Consent. In some cases, BaseBase may also rely on your consent to process your personal information.

12. Notice at Collection to California Residents

The disclosures in this section only apply to our processing of personal information from California residents that is subject to the California Consumer Privacy Act, as amended (the "CCPA").

• Categories of Personal Information We Collect: Identifiers (such as name, email address, log-in identifiers); Personal information categories listed in the California Customer Records statute (such as name, telephone number); Commercial information (such as transaction records or purchase details); Internet or other electronic network activity (such as IP addresses, website usage, browser information); Geolocation data (such as your approximate location, IP address); Professional or employment-related information (such as job title, company name).
• Categories of Third Parties to Whom Personal Information Is Disclosed for a Business Purpose: Service providers; Business partners; Third-Party Services you choose to interface, interact, share information with, direct us to share information with, access and/or use.
• Categories of Third Parties Whom Personal Information Is Sold and/or Shared: Advertising Partners.
• Non-discrimination: California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.

13. Other Provisions

Third-Party Websites/Applications

The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.

14. Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or to exercise your rights as detailed in this Privacy Policy, please contact us at privacy@BaseBase.com.

For the purposes of European Union, Swiss and UK law, we are the data controller. Our local affiliates may also be data controllers with regard to local operations, for example, marketing and prospecting activities.