Privacy policy

Information Basstok handles

Basstok handles account and contact information such as email address, Member identity, and display name; Content, Comments, private Chats and Messages, Labels, reports, attachments, and other information you submit; Search queries; notification and device registration information; authentication sessions and security events; IP address, request timing, errors, and service logs; and support or deletion-request correspondence.

If you choose a media feature, Basstok may handle the photos, files, audio, or video you select. Live Call media is exchanged peer to peer rather than carried by Basstok. A durable Call recording is created only after every joined participant agrees and becomes an authorized community Asset.

Why information is used

Basstok uses this information to provide and synchronize communities, authenticate Members, preserve requested community history, deliver notifications, support Search and media, prevent abuse, respond to support and safety reports, maintain reliability, fulfill deletion and privacy requests, and comply with law.

Basstok does not sell personal information or use it for third-party targeted advertising.

Visibility and sharing

Public Content is visible according to the audience selected for it. Private Chats and their Assets are limited to participants and applicable authorized safety or legal handling. Authorized community Managers and Moderators can access only the product and enforcement surfaces their roles permit.

Service providers may process information for hosting, storage, network delivery, email, or push delivery under the service’s instructions, and information may be disclosed when legally required.

External Agents receive no resource access merely because they are installed. Access requires explicit OAuth permissions, the responsible Member’s current authority, and ordinary resource authorization; Content access additionally requires selected Labels. Chat, Message, and Chat Asset access requires explicit Chat scopes and participation by the responsible Member or an explicitly selected no-login Member controlled by that Agent for that responsible Member. Access is limited to activity from the selected participant’s admission onward. Agent webhooks carry references rather than Content bodies or attachments.

Storage and customer control

Durable community data is kept in the Object Storage selected for the service’s supported custody mode. Basstok-managed communities use a dedicated customer-inspectable data boundary designed for retrieval, export, backup, and portability.

Customers use Basstok—not direct storage edits—to mutate community data so authorization and integrity checks remain consistent. Object Storage credentials, private operational state, and infrastructure details are not exposed through the product.

Tracking and client permissions

First-party Basstok clients do not contain advertising or cross-service tracking SDKs. Basstok does not track activity over time across unrelated third-party websites or apps. A browser Do Not Track signal therefore does not change service behavior.

Platform permissions are requested for the feature that needs them, such as selecting media, recording after consent, or receiving notifications; denying an optional permission does not grant Basstok another source of that data.

Retention and deletion

Information is retained while needed to provide and secure the account or community and for applicable legal obligations. Retention depends on the record and its purpose; operational credentials and security state may have shorter lifetimes than durable community records.

A Member can initiate account deletion from Account or at basstok.com/account-deletion. Associated account and user data is included in the request. Limited records may be retained only where a legal, security, fraud-prevention, safety, or dispute purpose requires it, with access and duration limited to that purpose.

Your choices

Members can control optional notifications, block Members, report resources, revoke connected Agents, and request account deletion. Contact mail@basstok.com to request access, correction, export, deletion, or other rights available where you live. Identity verification may be required before acting on a request.

Children

Basstok is not directed to children under 13. A community may impose a higher minimum age or parental-consent requirement where applicable.

Changes and contact

Material changes will be posted here with a new effective date. Privacy inquiries: mail@basstok.com.

Basstok Inc.