Baseten Privacy Policy

This document is Baseten's Privacy Policy, last updated July 3, 2025, governing the collection, use, retention, transfer, and disclosure of personal data from users of Baseten's services, with stated legal bases including contractual necessity and legitimate interests. The policy states that Baseten collects name, email address, phone number, payment data, usage data, device identifiers, and browsing activity, and the terms authorize sharing with analytics providers, email marketing partners, and payment processors, as well as disclosure in connection with business transactions such as mergers or acquisitions. The policy includes a dedicated CCPA section disclosing categories of personal information collected, business and commercial purposes for use, and disclosure to third parties, and states that Baseten does not sell personal information of minors under 16 without opt-in consent; the policy also addresses a Do Not Track disclosure as required under CalOPPA, though the document does not specify whether Baseten's systems honor Do Not Track signals. The policy engages California Consumer Privacy Act obligations including rights to know, delete, and opt out of sale, and references California's Shine the Light law and California Business and Professions Code Section 22582; compliance exposure is heightened for California residents and, where EU/EEA users access the service, GDPR requirements around data transfer mechanisms and lawful basis may require evaluation. Material considerations for compliance teams include the adequacy of data transfer safeguards for international transfers, the scope of third-party sharing with analytics and marketing vendors, and the policy's treatment of payment data through third-party processors.