1. Introduction
BASIS ("we," "our," or "us") provides an automated revenue recovery engine for B2B sales teams. Your CRM data is your most valuable asset. This policy outlines our strict protocols for collecting, securing, and protecting your data when you use our platform and our native HubSpot integration.

2. Information We Collect
We collect the absolute minimum data required to operate the service:

• Account Data: Name, business email, company name, and billing details.

• HubSpot CRM Data: Via secure OAuth, we monitor specific closed-lost deal records, contact profiles, and timeline activities to detect job changes. We strictly request only the permissions needed to execute revenue recovery.

• System Logs: Diagnostic data, IP addresses, and feature usage for security auditing.

3. Strict Prohibition on Third-Party Data Training
We explicitly do not use your proprietary CRM data or generated outreach drafts to train, fine-tune, or improve any third-party models or systems. All data processed through our automation engine is siloed, processed via zero-retention enterprise APIs, and used solely for your account.

4. How We Use and Share Your Data
We process your information strictly to deliver, secure, and maintain the BASIS platform.

• No Selling: We do not sell, rent, or trade your data.

• Subprocessors: We only share data with vetted, enterprise-grade infrastructure partners who are bound by strict confidentiality agreements. These include Vercel for hosting, Supabase for database infrastructure, Paddle for billing, and Resend for transactional email delivery.

5. Data Security and Retention
We protect your data using industry-standard measures, including AES-256 encryption at rest and TLS 1.2+ encryption in transit.

• Retention: If you revoke HubSpot OAuth access or terminate your account, we securely purge your CRM-related data from our active monitoring servers within 30 days.

6. Your Privacy Rights
Depending on your jurisdiction (e.g., GDPR, CCPA), you have the right to:

• Access, correct, or delete your personal data.

• Restrict the processing of your data.

• Request a portable copy of your data.

To exercise any of these rights, contact us at the email address listed on our contact page.