Baseten substantially restructured its privacy policy to clarify its role in data processing and the scope of what the policy covers. The updated policy explicitly states that Baseten acts as a processor of customer content and third-party product data on behalf of customers, while serving as a controller of other personal data it collects directly (such as contact information, financial information, and support inquiries). The policy now provides detailed categorization of what information Baseten collects, including account information, authentication data, financial information, usage and technical information, device information, and inquiry/support data, with expanded descriptions of tracking technologies and cookies.
Data controllers using Baseten: If you use Baseten through your employer, your employer controls your data and you must ask them to handle data requests, not Baseten directly.
The updated policy expands disclosure of personal data Baseten collects directly from users, including device identifiers, location approximation, technical logs, and telemetry. The policy now explicitly states that Baseten acts as a processor of customer content under separate customer agreements, meaning customers (not Baseten) control how that content is used. For users accessing Baseten through an employer or organization, that organization controls the instance and associated customer content, and users should direct data access or deletion requests to their organization.
→ If you use Baseten through your employer or organization, direct requests to access or delete your data to that organization, not to Baseten directly.
→ Review Baseten's updated privacy policy to understand what personal data Baseten collects directly, including device information, location approximation, and technical telemetry.
Policy explicitly states Baseten is a processor of customer content under separate data processing agreements and a controller of other personal data collected directly.
Policy now explicitly discloses collection of device information, location approximation, technical logs, telemetry, and tracking technologies.
Policy clarifies that customer content is governed by separate customer agreements and data processing addendums, not by this privacy policy.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.
Baseten restructured its privacy policy to establish clear processor-controller distinctions under data protection law. The policy now explicitly states Baseten is a processor of customer content (governed by separate data processing addendums) and a controller …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-005244.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.