Privacy Policy — Baseflow

1. Introduction

Baseflow (“we”, “our”, or “us”) operates the Baseflow platform, a documentation platform for product teams. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

We collect the following types of information:

Account Information: Name, email address, company name, and billing details when you create an account.
Usage Data: Pages visited, features used, session duration, and other analytics data to improve the platform.
Content Data: Documentation content, configuration files, and related metadata you store on the platform.
Technical Data: IP address, browser type, operating system, device information, and cookies.
Third-Party Integrations: Data from connected services such as GitHub, including repository metadata and commit information necessary to provide our services.

3. How We Use Your Information

We use the collected information to:

Provide, operate, and maintain the Baseflow platform.
Process transactions and manage your account and subscription.
Improve our services, features, and user experience.
Send transactional communications (e.g., account confirmations, billing notices, security alerts).
Send product updates and marketing communications (with your consent, where required).
Detect, prevent, and address technical issues and abuse.
Comply with legal obligations.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

Service Providers: Third-party vendors that help us operate the platform (hosting, analytics, payment processing, email delivery).
Legal Requirements: When required by law, regulation, or legal process.
Business Transfers: In connection with a merger, acquisition, or sale of assets.
With Your Consent: When you explicitly authorize sharing with a third party.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. After account deletion, we retain data for up to 30 days for backup and recovery purposes, after which it is permanently deleted. Certain data may be retained longer where required by law.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your personal data.
Object to or restrict processing of your data.
Export your data in a portable format.
Withdraw consent at any time.

To exercise any of these rights, contact us at [email protected].

8. Cookies

We use essential cookies to operate the platform and optional analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

9. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable, to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

Baseflow is not directed to individuals under 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will promptly delete the data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Your continued use of the platform after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, contact us at [email protected].