Privacy Policy

Effective: July 12, 2026

1. Information we collect

Account data: Google OAuth identifier, email, name, and profile image.
Service data: posts, drafts, schedules, settings, and credit transaction records.
Integration data: optional Notion token, Slack webhook URL, and custom domain settings.
Payment data: Lemon Squeezy order, product, and payment-status identifiers. The Bason does not store card numbers.
Technical data: access time, IP and device/browser information, error logs, and security logs.

To perform the service contract: authentication, content generation and publishing, billing, and support.
For legitimate interests: abuse prevention, diagnostics, security, and service reliability.
For legitimate interests: Google Analytics, Vercel Analytics, and Microsoft Clarity to improve the service and measure advertising performance.

We use Supabase (auth, database, storage), Vercel (hosting and optional analytics), Google (OAuth and optional Analytics), Sentry (error and performance diagnostics; signed-in user identifiers and IP addresses are recorded, session replay is not collected), Anthropic (AI writing), Google Gemini (AI images and OCR), Lemon Squeezy (Merchant of Record and payment processing), and user-connected Notion or Slack services.
Providers process data only as needed to deliver their services. Data may be processed internationally depending on provider infrastructure.

Essential authentication cookies support login and security. A first-visit banner tells you which analytics tools we use; it is a notice and does not turn measurement on or off.
Google Analytics uses cookies to identify visits and measure product usage and advertising performance, Vercel Analytics collects visit and performance statistics, and Microsoft Clarity records screen interactions such as clicks and scrolls to provide session replay and heatmaps. All three run on every visit.
Analytics data is used only to improve the service and measure advertising performance, and is never sold to third parties.
Whether you dismissed the banner is stored for 180 days in the bason_analytics_consent cookie and is used only to avoid showing the banner again. Delete that cookie in your browser and the banner reappears.
If you prefer not to be measured at all, you can use your browser tracking protection or a Google Analytics opt-out add-on, or email [email protected] to request that we stop processing your data.

Account data is retained while you use the Service. Deleting your account in Settings removes the auth account, posts, drafts, settings, and stored integration data.
Payment records required by law, security logs, and provider backups may remain for the limited period required by law or provider retention cycles.

You can update your profile, delete posts, disconnect integrations, and delete your account in Settings.
Request access, correction, deletion, restriction, or privacy support at [email protected].

We use encrypted transport, access controls, row-level security, request limits, and upload validation. No system is perfectly secure; incidents will be handled under applicable law.
Privacy contact: [email protected]