Privacy Policy

Effective: July 12, 2026

1. Information we collect

Account data: Google OAuth identifier, email, name, and profile image.
Service data: posts, drafts, schedules, settings, and credit transaction records.
Integration data: optional Notion token, Slack webhook URL, and custom domain settings.
Payment data: Lemon Squeezy order, product, and payment-status identifiers. Bason does not store card numbers.
Technical data: access time, IP and device/browser information, error logs, and security logs.

To perform the service contract: authentication, content generation and publishing, billing, and support.
For legitimate interests: abuse prevention, diagnostics, security, and service reliability.
Google Analytics and Vercel Analytics run only after optional consent.

We use Supabase (auth, database, storage), Vercel (hosting and optional analytics), Google (OAuth and optional Analytics), Sentry (error diagnostics without PII or replay), Anthropic (AI writing), Google Gemini (AI images and OCR), Lemon Squeezy (Merchant of Record and payment processing), and user-connected Notion or Slack services.
Providers process data only as needed to deliver their services. Data may be processed internationally depending on provider infrastructure.

Essential authentication cookies support login and security. Optional analytics can be accepted or rejected in the first-visit banner; rejection does not affect product features.
Your choice is stored for 180 days in the bason_analytics_consent cookie. Delete that cookie in your browser to choose again.

Account data is retained while you use the Service. Deleting your account in Settings removes the auth account, posts, drafts, settings, and stored integration data.
Payment records required by law, security logs, and provider backups may remain for the limited period required by law or provider retention cycles.

You can update your profile, delete posts, disconnect integrations, and delete your account in Settings.
Request access, correction, deletion, restriction, or privacy support at [email protected].

We use encrypted transport, access controls, row-level security, request limits, and upload validation. No system is perfectly secure; incidents will be handled under applicable law.
Privacy contact: [email protected]