Privacy Policy
Last updated [Effective date]
1. Our role
This policy explains how The Basik Company handles personal information on our website and in our Services. For content your company puts into Basik — messages, files, tasks and call data — we act as a service provider (processor) on behalf of your company, which decides how that content is used. For our website, sales enquiries and account administration, we act as a business (controller).
2. Information we collect
- Account information: name, email address, password (stored only as an Argon2id hash), profile details such as job title, department and time zone, and company membership.
- Customer content: messages, files, voice messages, reactions, channels, tasks and comments; call participation and, if your company enables AI call notes, call transcripts and summaries.
- Usage and device information: sign-in sessions, IP address, device and app type, push notification tokens, and logs of actions in the Services. Our logs record which features are used, not the content of messages.
- Website and sales information: what you submit in forms (such as name, work email, company, phone and message) and the campaign that brought you to our site.
- Billing information: for paid plans, billing contacts and payment details, processed by our payment provider. We don't store full card numbers.
3. How we use information
To provide, secure and support the Services; to send service messages such as verification codes, invitations and notifications you've chosen; to process payments; to respond to enquiries; to improve the Services using aggregated usage information; and to send product news if you opt in. We do not sell personal information, use it for cross-context behavioral advertising, or use Customer Content to train AI models.
4. AI features
Basik AI is off until a company administrator connects the company's own AI provider key and accepts that provider's terms. When enabled, the content needed for a request (for example, the messages being summarized) is sent to that provider through the company's account, under the company's agreement with the provider.
5. Service providers we use
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting and encryption key management (AWS KMS) |
| Google (Firebase Cloud Messaging) and Apple (Push Notification service) | Delivering mobile push notifications |
| [Email delivery provider] | Sending verification codes, invitations and notifications |
| Stripe | Payment processing for paid plans |
| AI provider chosen by your company (e.g. OpenAI) | Basik AI, only when your company enables it |
6. Security
We encrypt data in transit with TLS and at rest with AES-256-GCM, with keys managed in AWS Key Management Service. Staff access is limited, requires two-step verification and is logged. See our security page.
7. Retention
We keep Customer Content for as long as the customer's workspace exists, or as configured by the customer, and delete it within [90] days after a workspace is closed, except where we must keep it for legal reasons. Website enquiries are kept for up to [24] months unless you ask us to delete them sooner.
8. Your privacy choices and rights
Depending on where you live — including California, Colorado, Connecticut, Virginia, Utah, Texas and other states with consumer privacy laws — you may have the right to:
- know what personal information we have about you and get a copy;
- correct inaccurate information;
- delete your information;
- opt out of the sale or sharing of personal information and of targeted advertising — we don't sell or share personal information or use it for targeted advertising;
- limit the use of sensitive personal information — we only use it to provide the Services; and
- not be discriminated against for exercising these rights.
To make a request, email privacy@thebasikcompany.com. We'll verify your request and respond within the time required by law. You may use an authorized agent. If your request concerns content in a company workspace, we may refer you to that company, which controls that content. You can appeal a decision by replying to our response. We honor Global Privacy Control signals as an opt-out of sale or sharing.
9. Children
The Services are for businesses and are not directed to children under 16. We don't knowingly collect personal information from children under 13.
10. Changes
We'll post updates here and notify account administrators of material changes.
11. Contact
Questions? Email privacy@thebasikcompany.com or write to The Basik Company, [mailing address].