Skip to content
basstok

Privacy policy

Effective October 15, 2026

Your information is not an advertising product.

This policy explains how Basstok Inc. handles information through the Basstok website and first-party iOS and Android apps. A community operator may provide an additional notice for its community.

Information Basstok handles

Basstok handles account and contact information such as your verified phone number, email address, Member identity and display name; posts, comments, private messages, email, fax documents, attachments, reports and other information you submit or receive; search queries; notification and device registration information; authentication and security events; IP addresses, request timing, errors and service logs; and support or deletion-request correspondence.

If you choose a media feature, Basstok handles the photos, files, audio or video you select. Basstok-to-Basstok calls exchange live media between participants. Telephone calls and provider messages also involve the connected phone service. Fax processing handles the document and sending or receiving address. Providers receive the information necessary to deliver these communications. A Basstok call recording is created only after every joined participant agrees and becomes a file accessible through that authorized chat.

Recent telephone call details are saved in your account: the other address or number, direction, time, outcome and connected duration where known. A call-history entry is not an audio recording.

For app-store purchases, your app store processes the payment. Basstok receives transaction identifiers, subscription status and dates linked to your account to provide or restore the plan; it does not receive your payment-card details from the app store. Basstok also retains requested interaction state, such as reactions and whether a notification has been read, and communication usage needed to provide the service.

Search queries are used to answer the current request, not stored as a server-side search history.

Access and recovery

Direct signup creates your own Basstok account; joining an existing community creates membership there. Passwords are not used. Phone verification is required before using signed-in features. Basstok generates and checks verification codes and stores the verified number, country and verification time with your membership. Short-lived protected records support code checking and limit repeated attempts. Our SMS provider, Telnyx, processes the number for country lookup and SMS delivery.

A fresh text-message proof can restore access to a personal account whose creator already verified that number. If several of your accounts match, Basstok can automatically select an existing account to recover. Recovery does not merge accounts. Keep your verified number current: someone who gains control of it may be able to recover that personal account. Verification confirms control of a number, not legal identity or a unique person, and never grants Admin authority. Your verified number is private, not automatically published in your profile.

In the iOS app, you can replace your verified number after verifying the new one. Your existing number remains verified until replacement succeeds. Phone verification cannot be removed in the iOS app and remains required for signed-in use. Community membership does not automatically provide personal-account recovery.

You can also save access using a device credential or verified email for email-link sign-in to the same account. Basstok processes passkey public keys, credential identifiers, email addresses and verification information for these features. If you have not established a recovery method, losing access to your device or browser may mean losing access to that membership. Activating an initial Admin requires separate recovery-email verification.

Optional contacts

If you allow Contacts access in the iOS app, Basstok automatically saves the permitted contacts privately in your Basstok account so they are available across your devices. There is no separate sync setting. This includes contact names, phone numbers and email addresses, not contact photos or notes. Limited access includes only the contacts you allow.

Your synced address book is private to your membership within Basstok, not shared with other Members, Admins or connected Apps. Basstok does not use it for advertising, automatically invite your contacts, match them to Basstok Members or change your device address book. Declining permission still allows manual entry or choosing an individual recipient with the system picker.

Withdrawing Contacts permission stops device-contact access. When Basstok next refreshes contacts online, it removes that device's synced copy; failed removal is retried on a later refresh. Contacts saved from your other devices remain unchanged. Deleting your membership removes its saved address book.

Why information is used

Basstok uses this information to provide and synchronize communication and accounts, authenticate Members, preserve requested history, provide and restore purchased plans, deliver notifications, support search and media, prevent abuse, respond to support and safety reports, maintain reliability, fulfill deletion and privacy requests, and comply with law.

Basstok does not sell personal information or use it for third-party targeted advertising.

Visibility and sharing

Public posts are visible according to their selected audience. Private chats and their files are limited to participants and applicable authorized safety or legal handling. Account Admins and Moderators can access only the product and enforcement surfaces their roles permit; Admin status does not give blanket access to private chats or address books.

Service providers may process information for hosting, storage, network delivery, email, phone or push delivery under the service's instructions, and information may be disclosed when legally required.

Connected Apps require explicit authorization and remain limited by the responsible Member's current access. They do not gain access merely by being connected. Chat access remains participant-scoped; an App cannot read earlier history than its authorized participant. Change notifications to Apps contain references, not message bodies or attachments.

Storage and customer control

Durable account data is kept in the Object Storage selected for the service's supported custody mode. Basstok-managed accounts use a dedicated customer-inspectable data boundary designed for retrieval, export, backup and portability. Customers use Basstok, not direct storage edits, to change account data so authorization and integrity checks remain consistent. Storage credentials and private security state are not exposed through the product.

Tracking and client permissions

First-party Basstok clients do not contain advertising or cross-service tracking SDKs. Basstok does not track activity over time across unrelated third-party websites or apps. A browser Do Not Track signal therefore does not change service behavior.

Platform permissions are requested for the feature that needs them, such as contacts, microphone, camera or notifications. Denying an optional permission does not grant Basstok another source of that data. Optional notification preferences do not disable required authentication, recovery, security or account email.

Retention and deletion

Information is retained while needed to provide and secure the account or community and for applicable legal obligations. Retention depends on the record and its purpose; operational credentials and security state may have shorter lifetimes than durable account records.

You can request deletion from Settings or at Delete your Basstok account. Associated account and user data is included in the request. Removing access from a device is different from deleting membership or an account. Limited records may be retained only where a legal, security, fraud-prevention, safety or dispute purpose requires it, with access and duration limited to that purpose.

Your choices

You can control optional notifications, block Members, report resources, revoke connected Apps and request account deletion. Contact mail@basstok.com to request access, correction, export, deletion or other rights available where you live. Identity verification may be required before acting on a request.

Children

Basstok is not directed to children under 13. A community may impose a higher minimum age or parental-consent requirement where applicable.

Changes and contact

Material changes will be posted here with a new effective date. Privacy inquiries: mail@basstok.com.

Basstok Inc.

Shared locations

When you choose Location in a message, Basstok requests your current location once and shows a preview before you send. A shared point may be precise or approximate, depending on your device permission. The coordinates are stored with that message in your account and are visible only under the chat's participant and history permissions. Basstok does not request background location access or track your movements. Opening the native map uses your platform's map service. Sharing a contact attaches its selected name, phone numbers and email addresses, not its private notes or photos.