Privacy controls stay available
BaseHeart uses a strict privacy-by-default model. Technologies that are necessary for security, authentication, consent storage or a feature you explicitly request may operate without optional consent. Optional analytics, marketing and similar technologies remain disabled until you choose to allow the relevant category.
Optional technologies are off by default until you make a choice. You can reopen the privacy controls at any time, and BaseHeart honors Global Privacy Control for sale, sharing and targeted-advertising opt-outs.
BaseHeart's current policy is not to sell personal information. We also do not use Google user data for targeted advertising. This page remains available so users can exercise a sale/share or targeted-advertising opt-out if BaseHeart's practices or applicable law change.
YOUR RIGHTS
Request access, correction, deletion, portability, restriction or other privacy rights using a direct contact channel.
Consent controls are separate from rights such as access, deletion, correction, portability, restriction or objection. Use the Data Request page for those rights.
BaseHeart reviews which law and rights apply to the request.
We may ask for information reasonably necessary to verify identity or authority, especially for account deletion or disclosure requests.
For GDPR requests, the normal response period is one month, subject to lawful extensions for complex or numerous requests.
United States privacy-law response periods vary by state. BaseHeart uses the applicable statutory period and supports appeal rights where required.
If a request is denied or limited, BaseHeart should explain the reason where the law requires it.
PROCESSORS
BaseHeart uses specialized infrastructure and service providers and also lets users connect third-party services. The relationship depends on the feature and provider.
This list is based on the providers currently integrated into BaseHeart's code and production architecture. A provider receives data only when the relevant BaseHeart function is used and only to the extent needed for that function.
See the categories of providers BaseHeart relies on for hosting, databases, payments, authentication, connectors and model features.
Google user data section of our Privacy Policy
Connected services are optional
Google, GitHub, Convex and similar connectors are not activated merely because you visit BaseHeart. They require an explicit connection flow and the permissions shown by the provider. You can disconnect supported connectors in BaseHeart and, where available, revoke them directly with the provider.
Google sign-in and optional Google Drive access after the user chooses to connect Google. Google API data is governed by the dedicated Google section of the Privacy Policy.
When you ask a BaseHeart Agent to build, analyze or modify a project, the minimum project context needed for the selected task can be sent to the selected model/API provider. BaseHeart's server-side cost, permission and project-access controls run before provider execution in production flows.
Do not put passwords, private API keys or unrelated sensitive personal information into prompts or project files unless the feature explicitly requires that information and you are authorized to use it.
YOUR CHOICES
Use the same control panel that appears in the bottom banner. You can accept, reject or make a granular choice. Global Privacy Control always overrides marketing consent for sale/sharing and targeted-advertising opt-outs.
When your browser sends Global Privacy Control, BaseHeart records and enforces the opt-out locally without requiring you to click an additional button.
Your choice is stored so BaseHeart does not ask again on every page view.
Authorized agents and representatives
If you submit a request for another person, state that clearly in the email. BaseHeart may require evidence that you are authorized to act for that person and may still need to verify the consumer directly where permitted by law.
You do not need to send a privacy request just to reject optional cookies or tracking. Those choices are available immediately.