Privacy Policy

Information we collect

We do not use tracking technologies for analytics, advertising, or profiling. However, our hosting and infrastructure providers may automatically process limited technical information such as IP address, browser type, and request metadata for security, delivery, and site reliability purposes.

When you submit our contact form, we collect your name, email address, company name, and any message you include.

We do not use cookies for tracking, analytics, or advertising. We may use strictly necessary cookies required for basic site functionality, such as remembering your display preferences. No third-party tracking scripts, pixels, or analytics services are loaded on our site.

Our website does not respond to "Do Not Track" browser signals because we do not engage in tracking.

Sources of information

We collect personal information directly from you when you submit our contact form or otherwise communicate with us. We do not collect personal information from third-party sources.

Categories of personal information

Categories of personal information we collect:

• Identifiers, such as name and email address • Professional information, such as company name • Communications, such as information you include in a message or form submission

How we use your information

We collect and use personal information to:

• Respond to inquiries and contact requests • Schedule product previews and demonstrations • Communicate with you about BaseState services • Maintain business records • Comply with legal obligations • Protect our systems and communications

We do not use your information for advertising, profiling, behavioral targeting, or any purpose beyond direct communication related to your inquiry.

We do not use your personal information for automated decision-making or profiling.

Legal basis for processing

We process your personal information based on the following legal grounds:

• Consent: When you voluntarily submit information through our forms • Legitimate interests: Responding to inquiries and managing business relationships • Legal obligations: Where required by applicable law or regulation

You have the right to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Service providers

We use a limited number of third-party service providers to operate our business. These providers process data on our behalf and are contractually obligated to use it only for the purposes we specify.

These providers may include:

• Form processing and submission handling services • Customer relationship management (CRM) platforms • Cloud hosting and infrastructure providers

Our form processor maintains its own privacy policy, which governs its handling of your data during transmission.

We do not sell, rent, trade, or otherwise disclose your personal information to third parties for their own marketing or commercial purposes. We do not share your data with advertisers, data brokers, or information resellers.

Sharing your information

We do not share your personal information with third parties except as described below:

With service providers: As described above, we share information with our form processor and CRM provider solely to process and store your form submissions on our behalf.

For legal reasons: We may disclose information if we have a good-faith belief that disclosure is reasonably necessary to comply with applicable law, regulation, or valid legal process; enforce our terms of service; or protect the rights, property, or safety of BaseState, our users, or the public.

Business transfers: If BaseState is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify affected users before personal information becomes subject to a different privacy policy.

Data retention

We retain contact information for as long as needed to manage our relationship with you, and generally no longer than 24 months after our last substantive interaction unless a longer period is required for legal, compliance, or recordkeeping purposes. We periodically review stored data and delete information that is no longer needed.

You may request deletion of your data at any time by contacting us. Upon receiving a verified request, we will delete your information from our systems and direct our service providers to do the same. There may be a brief delay between your request and complete removal from all systems, including backups.

We may retain certain information as required by law or for legitimate business purposes, such as maintaining records of communications for legal compliance.

Data security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit via TLS • Access controls limiting who within our organization can view your information • Selection of service providers that maintain appropriate security practices

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. For security-related inquiries, see our security overview.

Your rights

Regardless of where you are located, you may exercise the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you • Correction: Request correction of inaccurate information • Deletion: Request that we delete your personal information • Portability: Request your information in a structured, machine-readable format • Withdraw consent: Withdraw consent for processing at any time

You also have the right to lodge a complaint with your local data protection authority if you believe your information has been handled in violation of applicable law.

To exercise any of these rights, reach out through our contact page. We will respond to verified requests within 30 days.

If we deny your privacy request, you may appeal our decision by contacting us through our contact page with “Appeal” in the subject line.

U.S. state privacy rights

If you are a resident of California, Colorado, Connecticut, Virginia, or another state with applicable privacy legislation, you may have additional rights under state law, including:

• The right to know what personal information is collected and how it is used • The right to request deletion of your personal information • The right to opt out of the sale or sharing of personal information • The right to non-discrimination for exercising your privacy rights

We do not sell personal information for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising. Because we do not engage in these practices, there is nothing to opt out of.

We do not collect or process sensitive personal information as defined under applicable state privacy laws.

The categories of personal information we collect, their sources, and the business purposes for which they are used are described in the sections above. Categories of recipients include: form processing services, CRM providers, cloud hosting and infrastructure providers, and legal or compliance recipients where required by law.

To submit a rights request, reach out through our contact page.

International data transfers

Our service providers may process your information in the United States or other countries. By submitting information through our forms, you acknowledge that your data may be transferred to and processed in jurisdictions that may have different data protection standards than your own.

Where required by applicable law, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms to protect your information during transfer.

Children’s privacy

Our services are directed to businesses and professionals. We do not knowingly collect personal information from individuals under the age of 13. If we become aware that we have collected information from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please reach out through our contact page.

Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the effective date and version number at the top of this page. Changes take effect upon posting unless otherwise stated.

If we make material changes that affect how we handle your personal information, we will provide prominent notice on our website. Your continued use of our website and services after changes are posted constitutes acceptance of the revised policy.

Contact

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your information is handled, please reach out through our contact page.

BaseState, Inc. — San Francisco and Fargo, ND