If you are a California resident, you have the right under the CCPA to request access to your data, request deletion, and opt out of the sale of your personal information, and Baseten must respond within one month.
This analysis describes what Baseten's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy states that California residents can exercise rights to know, delete, and opt out of sale; the one-month response commitment is explicitly stated and provides a concrete timeline for users who submit requests.
California residents can submit requests to know what personal data Baseten holds, request deletion of that data, and opt out of any sale of their personal information; Baseten states it will respond within one month of receiving the request.
How other platforms handle this
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
Depending on where you live, you may have certain rights with respect to your personal information, such as the right to request access, correction, or deletion of your personal information, or to opt out of the sale or sharing of your personal information. If you are a California resident, you have...
Monitoring
Baseten has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Under the CCPA, among other rights, California consumers have the right to: Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers. Request that a business delete any personal data about the consumer that a business has collected. Request that a business that sells a consumer's personal data, not sell the consumer's personal data. If you make a request, we have one month to respond to you.— Excerpt from Baseten's Baseten Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly engages the California Consumer Privacy Act as amended by the California Privacy Rights Act, enforced by the California Privacy Protection Agency and the California Attorney General. The one-month response timeline stated in the policy should be evaluated against the CCPA's specific response deadlines, which generally require response within 45 days with a possible 45-day extension upon notice. (2) GOVERNANCE EXPOSURE: Medium. The policy states a one-month response period, which is shorter than the CCPA's 45-day statutory period; however, compliance teams should confirm that the internal process actually meets this commitment. If Baseten does share data in ways that qualify as 'sale' under CCPA, the opt-out mechanism must be operationally functional. (3) JURISDICTION FLAGS: Applicable only to California residents. Other states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Texas, and others) may confer similar rights but are not addressed in this provision. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers whose end users are California residents should review whether Baseten's service agreements include appropriate data processing terms to support downstream CCPA compliance obligations. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the request intake mechanism (email or web form) is operational, that response procedures meet the stated one-month timeline, and that identity verification procedures for CCPA requests are documented and proportionate.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The policy states that California residents can exercise rights to know, delete, and opt out of sale; the one-month response commitment is explicitly stated and provides a concrete timeline for users who submit requests.
California residents can submit requests to know what personal data Baseten holds, request deletion of that data, and opt out of any sale of their personal information; Baseten states it will respond within one month of receiving the request.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Baseten.