Privacy Policy

1. Information We Collect

1.1 Information You Provide

We may collect information you voluntarily provide, including:

• Account identifiers such as email address, username, or wallet address (if applicable)
• Content you submit, post, or share through the Service (including comments, messages, or metadata associated with content)
• Communications you send to us, such as support requests or feedback
• Sign in details from Apple or Google (an account identifier and, if they share it, your email address), your username, country and whether you confirmed you are 13 or older and 18 or older
• Your Collection, Watchlist, reminders and alerts, including items, prices you entered and photos you scan
• Purchase details when you buy through Basement: the item, the store, the price limit you set, your shipping address and the order status. Card numbers are collected and stored by our payment partners, not by Basement

1.2 Information Collected Automatically

When you use the Service, we may automatically collect certain limited information, including:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, crash reports, diagnostic data)

We do not continuously store or track pages you browse. Page or URL-level data is only stored when you actively participate in a Basement associated with that page (for example, by posting or interacting within a chat). Pages that you do not interact with are not persisted by us.

1.3 Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies to operate and improve the Service, remember preferences, and analyze usage patterns. You can control cookies through your browser settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process purchases you confirm and show you their status
• Enable interactive features and social functionality
• Improve, personalize, and optimize user experience
• Communicate with you about updates, security, or support matters
• Monitor usage, detect abuse, and enforce our terms
• Comply with legal obligations

3. How We Share Information

We do not sell your personal data. We share it only with these categories of recipients:

• Service providers that run the Service for us, listed below with what each receives
• The online store you buy from, which receives what it needs to ship your order
• Apps you connect to Basement, such as ChatGPT, which receive the answers to the requests you make from them (see Basement in ChatGPT)
• Other Basement users, for what you choose to post publicly or in a community
• To comply with legal obligations, court orders, or lawful requests
• To protect the rights, safety, and integrity of Basement, our users, or others
• In connection with a merger, acquisition, or sale of assets, where users will be notified of any change in ownership or data use

4. Google User Data

If you choose to connect your Google account, Basement requests the following Google API scopes, each tied to a specific feature you can see and use in the app:

• Gmail (read only): used solely to find purchase receipts and order confirmation emails so your purchases appear in your Collection. Emails are processed in memory to extract order details (items, merchant, totals). We never store your email messages, we never send email on your behalf, and we cannot modify or delete anything in your mailbox.
• Calendar events: used solely so your assistant can read, create, update, or remove events on your primary calendar when you explicitly ask it to (for example, checking your schedule or adding an event). We do not access calendar sharing settings or other calendar data.
• Email address: used solely to show you which Google account is connected.

Basement's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

In particular:

• We only use Google user data to provide the user facing features described above.
• We do not sell Google user data, use it for advertising, or use it to determine creditworthiness.
• Humans do not read your Google data except with your explicit consent, for security or abuse investigation, to comply with law, or where the data is aggregated and anonymized for internal operations.
• We do not use or transfer Google user data (raw, aggregated, anonymized, or derived) to create, train, or improve generalized artificial intelligence or machine learning models, and we do not transfer it to any third party AI service that would do so.

AI processing of Google user data

Some features process Google user data with an AI model: receipt emails are parsed by an AI model to extract order details, and calendar results may be summarized by your assistant. This processing runs through the Anthropic Claude API under commercial terms that prohibit the use of our data to train Anthropic's models. Google user data is processed only to serve your request in the moment, is not retained by the model provider for training or any secondary purpose, and is not shared with any other AI provider.

Disconnecting your Google account in the app revokes our access and deletes the stored tokens. You can also revoke access at any time from your Google Account security settings.

5. Basement in ChatGPT

You can connect your Basement account to ChatGPT, OpenAI's assistant, and use Basement from a chat. This section explains what that connection shares.

How you connect

When you connect, ChatGPT opens a Basement page where you sign in with Apple or Google (or create a Basement account) and see every permission ChatGPT asks for, such as reading your Collection or buying physical items after you confirm each one. Nothing is shared until you press Allow. We never see your ChatGPT password, and ChatGPT never sees your Apple or Google password.

What ChatGPT sends us

• A connection token that tells us which Basement account and which permissions the request is for.
• Only the details needed for the request you made, for example a card name to price, an item to add to your Collection, a store page and the most you will pay, or a release you want a reminder for.

Purchases are never completed inside ChatGPT: the Buy button opens basementbrowser.com, where you sign in and confirm. ChatGPT does not send us your conversation, and Basement does not ask for it. Basement never asks for card numbers, passwords or one-time codes in ChatGPT: you enter those on basementbrowser.com, and card numbers go to our payment partners, not to Basement or OpenAI.

What we send back to ChatGPT

The answer to your request, such as your Collection value, a price, your Watchlist or the status of an order. OpenAI handles what it receives under its own privacy policy.

What we keep, and for how long

• The connection itself (which app, which permissions, when you connected) until you disconnect.
• Access tokens last 15 minutes and are not stored. Refresh tokens are stored only as a one-way hash, change on every use, and stop working after 30 days or when you disconnect.
• One-time basementbrowser.com links ChatGPT shows you expire after 10 to 15 minutes (24 hours for confirming a buy-when order) and work once.
• Anything you asked Basement to save or do from ChatGPT (Collection items, Watchlist items, reminders, buy-when orders, purchases and their status) is part of your Basement account and kept like the rest of it (see Data Retention).
• Server logs of each request (time, the tool used, the result, IP address) for security and debugging, kept for 90 days.

How to disconnect

In the Basement app, open Settings, then Account, then Connected apps, and choose Disconnect. You can also disconnect at basementbrowser.com/account/connected-apps or in ChatGPT's settings. Disconnecting ends ChatGPT's access right away.

6. Public and Social Content

Certain content you submit through the Service may be public by design (for example, comments associated with specific URLs or pages). Any information you choose to make public may be visible to other users and accessible outside the Service.

Please be cautious about the information you share publicly.

7. Data Retention

We keep personal information only as long as needed for the purposes in this policy, unless the law requires or allows longer:

• Your account, Collection, Watchlist and settings: while your account is open. When you delete your account, we delete them within 30 days.
• Backups: up to 30 days after the data is deleted from the live Service.
• Server and security logs: 90 days.
• Purchase and payment records: 7 years, for tax and accounting law.
• Connections to apps like ChatGPT: until you disconnect. Sign in tokens expire on their own (see Basement in ChatGPT).
• One-time basementbrowser.com links: 10 to 15 minutes, or 24 hours to confirm a buy-when order.

You may request deletion of your account or personal data at any time by writing to support@basementbrowser.com, subject to legal and operational limitations.

8. Data Security

We use reasonable administrative, technical, and organizational measures to protect your information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have rights regarding your personal data, including:

• The right to access, correct, or delete your personal information
• The right to object to or restrict certain processing
• The right to data portability
• The right to withdraw consent where consent is the legal basis for processing

To exercise these rights, contact us using the details below.

10. Children's Privacy

The Service is not intended for children under the age of 13 (or the minimum age required by applicable law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate action.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Where required, we take appropriate safeguards to ensure adequate protection of personal data.

12. Third-Party Services and Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted within the Service or on our website, and the "Last updated" date will be revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, you can contact us at:

Sublevel Inc. (Basement)
575 Crandon Blvd Apt 712, Key Biscayne, FL 33149, USA
Email: support@basementbrowser.com