Privacy policy

Who we are

Base ("Base," "we," "us," "our") provides software that helps marketing agencies monitor client health, reduce churn, and grow recurring revenue. Our services are business-to-business (B2B) — we don't market to or knowingly collect data from consumers directly. If you have questions, reach us at conor@orbitlane.co.

Data we collect

We collect different categories of data depending on how you interact with us:

• Account and contact data — your name, work email, company name, job title, and billing details when you sign up, talk to sales, or manage your subscription.
• Usage and product data — features you use, pages you view, actions you take inside Base, and device or browser information. This helps us operate and improve the product.
• Client data you bring — information about your own clients that you connect or upload: CRM records, project statuses, communication signals, billing data, and similar. You determine what you send. We process it only to provide the service you've contracted for.
• Communications — when you contact support or sales, we retain those conversations to help resolve issues and improve our service.
• Cookies and similar technologies — we use session cookies for authentication, preference cookies to remember your settings, and analytics cookies to understand aggregate usage. You can control cookie settings in your browser; disabling some cookies may affect product functionality.

How we use data

• Provide, operate, and improve the Base product and related services.
• Authenticate users, maintain account security, and prevent fraud.
• Send transactional messages: account confirmations, billing receipts, security alerts, and product updates you've requested.
• Respond to support requests and communicate about your account.
• Comply with applicable laws, regulations, and legal obligations.
• Enforce our Terms of Service and protect our rights and the rights of others.

We do not use your client data to train models, build advertising profiles, or benchmark against other Base customers without explicit written consent.

Legal basis for processing (EEA / UK)

Where applicable, we rely on the following legal bases under the GDPR and UK GDPR:

• Contract — processing necessary to deliver the services you've agreed to.
• Legitimate interests — security, fraud prevention, product improvement, and direct communications with existing customers about relevant features.
• Legal obligation — where we must process data to comply with applicable law.
• Consent — for optional marketing communications. You can withdraw consent at any time.

Sharing and subprocessors

We share data only as necessary to deliver our services or as required by law:

• Service providers (subprocessors) — cloud infrastructure, email delivery, analytics, and customer support tooling. Subprocessors are contractually bound to handle data only on our instructions and to maintain appropriate security standards. You can request our current subprocessor list at conor@orbitlane.co.
• Business transfers — if Base is involved in a merger, acquisition, or asset sale, data may be transferred as part of that transaction. We'll provide notice where required by law.
• Legal and safety — we may disclose data in response to valid legal process or to protect the rights, property, or safety of Base, our customers, or others.

We do not sell your personal information.

International transfers

Base is operated from the United States. If you access our services from outside the US, your data may be transferred to and processed in the US. Where we transfer personal data of EEA or UK individuals, we use appropriate safeguards including Standard Contractual Clauses (SCCs). Contact us for a copy of the relevant safeguards.

Data retention

We retain account and usage data for as long as your account is active and for a reasonable period afterward to fulfill our legal and contractual obligations. Client data you connect is retained as configured in your account settings; you can delete it at any time. When you close your account, we delete or anonymize your data within 90 days, except where we're required by law to retain it longer.

Your rights

Depending on where you live, you may have rights including:

• Access — request a copy of personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request deletion of personal data we hold, subject to our legal obligations.
• Portability — receive your data in a structured, machine-readable format.
• Objection / restriction — object to certain processing or ask us to restrict how we use your data.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email conor@orbitlane.co. We aim to respond within 30 days. We may need to verify your identity before acting on a request. If you're in the EEA or UK and believe we've handled your data unlawfully, you have the right to lodge a complaint with your local data protection authority.

Children's privacy

Base is a B2B tool for business users. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us data, contact us and we'll delete it promptly.

Changes to this policy

We may update this policy from time to time. When we make material changes, we'll post the updated policy here with a new "last updated" date and, where appropriate, notify you via email or in-product notice. Continued use of the services after changes take effect constitutes acceptance of the updated policy.

Contact

Questions or concerns? conor@orbitlane.co. We're a small team and read every message.