Privacy Policy

1. Overview & Scope

This Privacy Policy describes how Baselabs LLP ("Baselabs", "we", "us", or "our") collects, uses, protects, and discloses information gathered through our website at https://www.baselabs.co and through our commercial software consulting, architecture auditing, mobile engineering, and artificial intelligence advisory services.

As a technical engineering consultancy, we maintain the highest standards of data confidentiality, intellectual property separation, and information security. We do not sell, rent, or monetize your personal or corporate information.

2. Information We Collect

We may collect information in the following contexts:

• Direct Inquiries: When you complete our contact or consultation inquiry forms, schedule a call, or email us, we collect your name, corporate email address, organization name, job title, estimated budget, timeline, and project description.
• Communication Records: Records of communications, correspondence, meeting minutes, and architectural discovery notes exchanged during consultation sessions.
• Technical & Log Data: When visiting our website, our servers automatically log standard network metadata, including your IP address, browser type, operating system, referring URL, pages viewed, and timestamps.

3. How We Use Information

We use collected data solely for legitimate business operations:

• To evaluate project feasibility, prepare architectural proposals, and respond to your consulting inquiries.
• To deliver contracted software advisory, cloud engineering, mobile application development, and AI integration services.
• To administer client accounts, issue statements of work (SOWs), and execute billing.
• To protect against malicious cyberactivity and ensure the security of our infrastructure.
• To comply with applicable legal and statutory compliance obligations.

4. Client Consulting Data & Source Code Isolation

We operate under strict data isolation policies. Client source code and technical assets are accessed solely via client-managed identity providers (e.g., Okta, Google Workspace, GitHub Enterprise) with role-based access control (RBAC), multi-factor authentication (MFA), and encrypted hardware workstations.

5. Artificial Intelligence & Model Privacy

Given our focus on Applied Artificial Intelligence, Baselabs LLP enforces uncompromising AI safety standards:

• No Client Data in Public AI Training: We never submit client proprietary source code, internal documents, embeddings, or training datasets into public consumer AI models or third-party training pipelines.
• Zero Data Retention Models: When utilizing commercial LLM APIs (e.g., Google Gemini Enterprise, Anthropic Claude, OpenAI Enterprise), we configure enterprise accounts with zero data retention and strict encryption in transit and at rest.
• Private Virtual Private Cloud (VPC) Deployments: For proprietary workloads, we deploy self-hosted open weights models (Llama, Mistral, Gemma) inside isolated virtual private clouds with air-gapped network configurations.

6. Cookies & Telemetry

Our website uses strictly necessary cookies and lightweight, privacy-preserving performance telemetry to ensure fast loading times and secure routing. We do not use third-party advertising tracking cookies or invasive cross-site profiling trackers.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, basic website navigational functions operate seamlessly even with cookies disabled.

7. Third-Party Sharing

We do not sell, trade, or transfer personal or organizational information to third parties. We may disclose information only under the following limited circumstances:

• Vetted Infrastructure Providers: Trusted third-party cloud hosting and email service providers (e.g., Google Workspace, AWS, GitHub) that adhere to strict SOC2 and ISO 27001 data processing agreements.
• Legal Compulsion: If required by valid court order, subpoena, or applicable statutory law, following immediate notification to the affected party unless legally prohibited.

8. Data Security & Retention

Baselabs LLP implements robust technical and organizational security controls, including TLS 1.3 encryption for data in transit, AES-256 encryption for data at rest, least-privilege credential access, and regular security vulnerability assessments.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, manage our client engagements, resolve disputes, and enforce our contractual agreements. Upon contract conclusion, client proprietary data is securely decommissioned or returned in accordance with the governing MSA.

9. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you may possess specific legal rights regarding your personal information, including:

• The right to request access to and a copy of the personal information we hold about you.
• The right to request rectification of inaccurate or incomplete personal records.
• The right to request the erasure of your personal information ("right to be forgotten").
• The right to restrict or object to our processing of your personal information.

To exercise any of these statutory rights, please submit a written request to contact@baselabs.co.

10. Contacting Baselabs LLP

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our data governance team: