Privacy Policy

This Privacy Policy explains how basefyio ("basefyio", "we", "us"), operated by Talya Smart, handles personal data when you use our website, dashboard, APIs, SDK, and CLI (together, the "Service"). We act as a data controller for your account data and as a data processor for the end-user data you store in your projects.

1. Data we collect

• Account data: name, email, password (stored hashed via our identity provider), and team membership.
• Billing data: plan, subscription status, and invoices. Card details are handled directly by our payment processor (Stripe) and are never stored on our servers.
• Project data: the databases, files, authentication users, and other content you create in your projects.
• Usage & technical data: log records, IP address, device/browser information, and audit events needed to operate and secure the Service.

2. How we use data

• To provide, maintain, and secure the Service and your projects.
• To process payments and manage subscriptions.
• To communicate service, security, and account notices.
• To detect, prevent, and investigate abuse, fraud, and security incidents.
• To comply with legal obligations.

3. Legal bases

We process personal data to perform our contract with you, to pursue our legitimate interests in running a secure service, to comply with legal obligations, and — where required — based on your consent.

4. Sub-processors

We rely on a limited set of infrastructure and service providers, including a payment processor (Stripe) and our hosting provider. They process data only as needed to deliver the Service.

5. Data retention

We keep account and billing data for as long as your account is active and as required by law. Project data is retained until you delete it; deleted projects are held briefly in a recoverable state before permanent removal. Backups are rotated on a regular schedule.

6. Security

We use encryption in transit, access controls, network isolation per project, and audit logging. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard safeguards.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at the address below.

8. International transfers

Where data is transferred across borders, we apply appropriate safeguards consistent with applicable data-protection law.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

11. Contact

Questions or requests: support@talyasmart.com.

This document is provided for transparency and may be updated to reflect legal review for your jurisdiction.