Privacy Policy

What we store

• Account info: email address and a securely hashed password.
• Sessions: login/session tokens (cookies) to keep you signed in.
• Run metadata: your question, optional context, budgets, and timestamps.
• Run artifacts: logs and generated files (TeX/PDF/analysis) needed for auditing and downloads.
• Basic technical logs: limited security/reliability data (e.g., IP address/user agent) to operate and protect the service.

What we send to AI providers

To generate and refine content, Basis sends your run inputs and relevant intermediate artifacts to the model providers that power the service. Those providers may process the data to return results. We use business/enterprise AI APIs that, by default, do not use your prompts and outputs to train foundation models. Please do not include secrets or sensitive personal information in your runs.

Third-party web services

The web UI may load third-party assets (for example, Tailwind CSS via a CDN). Like any web request, that provider can receive your IP address and user agent. We do not intentionally run advertising trackers.

Your data, your choice

• Ownership: you retain rights to your inputs and the outputs you generate.
• Deletion: you can delete runs, which removes the database record and attempts to delete stored run files.
• Service improvements: we are not in the business of taking your work. If we ever use run data to improve the service (beyond operating it for you), we want that to be opt-in.

In the product you may see controls like including or excluding a run from future “project memory” retrieval. If you’re ever unsure what a setting does, ask—we’ll explain plainly.

Security

We store passwords only as salted hashes. Access to runs is scoped to your account in the app. No system is perfect; if you believe you’ve found a vulnerability or privacy issue, please report it.

Changes

If we make material changes to this policy, we’ll post an updated version here. If you don’t agree with an updated policy, you can stop using the service and delete your runs.

Contact

Questions or requests (including account deletion): please reach out. If you’re running from source, opening an issue is also welcome.