BaseloadOS Privacy Notice

Revision: September 18, 2026. Effective date: September 18, 2026.

Manuchehr Modabber Stromberg, operating as BaseloadOS in California, United States, is responsible for the processing described here. Contact: support@baseloados.com. Correspondence: 1700 Le Roy Ave, Apt 14, Berkeley, CA 94709, USA.

1. Scope and availability

This notice covers the public site, waitlist, accounts and purchases. It also describes the treatment required for MCP queries and Terminal research when those features become available. Describing a future feature does not mean it is active or that its content is currently collected. Initial paid sales are United States only. Access from another jurisdiction does not waive applicable privacy rights.

2. Information and purposes

Waitlist and communications. We collect the email address and signup time provided for requested product, availability and launch messages, together with unsubscribe preferences and support correspondence. These records support delivery, suppression of unwanted messages and responses to inquiries.

Accounts and authentication. We process account identifiers, email addresses, verification and session information and account actions to authenticate users, secure access and administer their requests. Authentication providers may process device, connection and fraud-prevention information.

Purchases and contract evidence. We retain payment amounts and status, payment provider identifiers, accepted document versions and acceptance times, entitlements, delivery deadlines, receipts and refund or dispute records. These records support fulfillment, billing, fraud prevention, accounting and legal obligations. Stripe collects payment details directly; our checkout does not collect or store full card numbers or card security codes.

Technical and security information. Servers and providers may process IP addresses, browser/device information, request times, session identifiers and diagnostic events to serve pages, limit abuse, investigate errors and secure the service. Such records may contain identifiers even when they are called telemetry.

Queries and research, when enabled. MCP requests necessarily transmit their parameters to the service. Metering requires usage, account, authorization and settlement records. Requested query parameters, results, saved datasets, formulas, prompts and support attachments may contain confidential or personal information. We process such content only as needed for the requested function, security, support or a legal obligation. We do not represent that using the service involves no customer-data processing.

We do not use nonpublic customer research to train models or publish it as feedback. Any external AI processing must be disclosed for the selected feature before content is sent. We will not activate such processing without appropriate provider terms and settings. An AI provider independently selected by a customer receives information under that customer's arrangement, not a blanket authorization from this notice.

3. Recipients and external requests

Hosting and database providers operate the service and preserve records. Configured hosting/database providers: Railway (website hosting), Cloudflare (DNS and email routing), and Neon (database hosting). Clerk supplies authentication; Stripe handles payments, receipts, fraud controls and disputes; Resend is the selected email delivery provider; Cloudflare supplies DNS and configured routing or security services. Authorized personnel and providers may access information only for the relevant service, security, support or lawful compliance purpose, subject to their applicable obligations.

Some public-page templates request Google Fonts resources. When those requests occur, the browser sends connection information to Google. Other fonts are served locally. We therefore do not describe all font delivery as exclusively local.

A provider may act on our instructions for some activities and for its own purposes for others under its privacy terms, including payment fraud prevention or legal compliance. Calling a provider necessary does not establish that every secondary use is necessary. We must verify the deployed integrations and settings before making a categorical statement about all third-party tracking or secondary use.

We may disclose information to comply with a lawful request, protect rights or security, or complete a legitimate business transfer subject to applicable law, confidentiality and notice obligations. We do not sell private research content or authorize its use for advertising.

4. Cookies, advertising and browser signals

Account, payment and security functions use cookies or comparable storage. The reviewed application code does not configure advertising campaigns or behavioral advertising analytics. This is not a certification of every provider's practices or all activity across other websites. Third parties providing embedded resources may receive browser information as described above.

We do not treat a Privacy Notice acknowledgment as consent to marketing, advertising tracking, recurring payment or unrelated processing. Separate consent and choices must be provided when required. Where applicable law treats Global Privacy Control or another recognized signal as an opt-out, we must honor it for covered processing. The current application does not implement a distinct Do Not Track response; necessary account and security operations are not disabled by that signal.

5. Public-source information in the research dataset

The power-data inventory is separate from customer records. Public-source records can nevertheless identify individuals, including business contacts or named owners. We do not assume that every published name or contact is outside privacy law. Applicable public-availability exclusions and any other lawful basis or limitation must be assessed before individual-level information is commercially disclosed.

This notice does not certify that BaseloadOS is outside data-broker legislation. Potentially covered personal information must be reviewed before sale or disclosure, with applicable registration, deletion and consumer-rights obligations addressed. Contact the privacy address to identify a record of concern and its source.

6. Retention

Retention depends on the record's purpose; account closure is not a representation that every copy is immediately erased.

management of the list. After withdrawal, we cease those messages and retain only necessary suppression, security or legal records. No verified automatic two-year purge is represented by this notice.

outstanding fulfillment, balance or security matters. Closing the login account does not erase purchase obligations or the separate purchase record.

delivery and refund commitments, and applicable accounting, dispute and legal requirements. Retaining evidence does not authorize unrelated use.

Transient query content must not be retained merely because usage accounting is required; accounting should retain the minimum needed to substantiate charges. Feature-specific content and diagnostic retention must be disclosed before launch.

incidents, prevent abuse and resolve relevant disputes, with legal holds limited to their purpose.

retirement. They are restricted to recovery, security and legal needs, not ordinary reuse of deleted content. Applicable deletion instructions must be reapplied after restoration. We do not promise a fixed backup-erasure period that has not been verified against the deployed system.

We will explain the applicable retention criteria when responding to a verified request and will not retain personal information indefinitely merely because storage is available.

7. Requests and choices

Use the privacy contact above to request access, correction, deletion, portability, applicable sale/sharing opt-outs or other available rights. You may unsubscribe from marketing independently of closing your account. Service and legal notices necessary to administer a purchase are not marketing subscriptions.

We verify identity proportionately to the request using available account evidence; do not send government identification unless specifically needed and securely requested. Authorized representatives may act subject to applicable verification. We will respond within the period required by the law applicable to the request, explain any permitted extension, and identify a lawful basis for any denial. Where an appeal is available, reply to the privacy contact requesting an appeal; we will provide the applicable procedure and regulatory complaint information. No fee, retaliation or waiver of mandatory rights is imposed by this notice.

8. Children and international processing

The covered services are not directed to children under 13. We do not knowingly collect their personal information. Purchasers must meet the adult/authority rules in the Purchase Terms. An institutional arrangement for younger users does not remove applicable children's privacy requirements; an institution must not submit children's data without an appropriate lawful arrangement.

The service is operated in the United States, and providers may process information in other locations. This statement is not consent to a transfer or a substitute for legally required safeguards. Before targeting or offering covered services in additional jurisdictions, we must supply the applicable legal bases, rights, complaint channels and transfer safeguards. United States-only sales do not by themselves decide whether a privacy law applies to a particular visitor.

9. Changes and contact

We will post a revised notice with its effective date. For material changes, we will also provide a prominent site notice and notify affected account holders by email before the new practice begins, where practicable; legally required consent will be obtained separately. An urgent legally required change will be explained as soon as permitted. Editing this notice does not silently expand permission to use previously collected confidential research.

For questions or complaints, contact support@baseloados.com. The seller remains Manuchehr Modabber Stromberg; this notice does not represent that an unformed corporation or limited liability company exists.