What we collect, where it lives, and what we never do with it.

This Privacy Policy describes how Basel Systems, Inc. (“Basel,” “we,” “us”) handles information in connection with the Baselwebsite and application (the “Service”). Basel is a business tool intended for use by companies and their authorized personnel, not by consumers for personal, family, or household purposes.

By using the Service you agree to this policy and to our Terms of Service. If you do not agree, do not use the Service.

We keep collection deliberately narrow. The categories are:

We do not collect your bank or QuickBooks login credentials — those go directly to Plaid or Intuit and never to us (see Connected accounts).

• You provide it. Your account email/name, and any statement CSV you choose to upload. CSV files are parsed entirely in your browser and are never transmitted to us.
• Through Plaid, at your direction. If you connect a bank or card account, Plaid authenticates you and returns your transactions to Basel for a one-time import. See Connected accounts below.
• Through QuickBooks, at your direction. If you connect a QuickBooks Online company, Intuit authenticates you and returns recent credit-card expense records to Basel for a one-time import.
• Automatically. Technical data generated by your browser and our infrastructure when you load the Service.
• Sample data.The “sample business” is synthetic data we generate; it contains no real person or company's information.

We use the information above only to operate the Service:

• To categorize your transactions and compute your Leakage Report, routing plan, and checklist.
• To maintain your account and remember your settings.
• To secure the Service, prevent abuse, debug, and keep it reliable.
• To comply with law and enforce our Terms.

We do not use your financial transaction data for advertising, and we do not sell it. Our recommendations are computed bounty-blind: affiliate incentives play no part in the analysis, and when a recommended card would pay us a referral fee we disclose that on the recommendation itself.

This is the part most privacy policies gloss over, so we'll be specific. Basel is built so that your financial data stays with you:

• Your analysis is stored in your browser.Transactions, your report, and your settings are saved to your browser's local storage on your own device — not in a Basel database. Clearing it (see Your rights) removes it.
• OAuth access tokens are not retained. When you connect an account, our server exchanges a Plaid or Intuit token, uses it once to pull your recent transactions, and then disconnects or discards it. We do not persist the token, so we cannot re-access your account later.
• Uploaded CSVs never leave your browser. Parsing happens locally; the file is not uploaded to us.

Our servers act as a relay for Plaid/QuickBooks connections and to serve the app; they are not a store of your transaction history. Transient technical logs (described above) are the exception and contain no transaction detail.

When you choose to connect a bank or card account, we use Plaid Inc. to facilitate the connection. Plaid Link opens in your browser and collects your credentials directly; your credentials go to Plaid, never to Basel. Plaid then provides Basel with the transaction data needed to run your analysis.

Plaid's handling of your information is governed by Plaid's own policies. Please review the Plaid End User Privacy Policy. Before we surface Plaid Link, we ask you to confirm your consent to Basel accessing your transaction data on a read-only basis for the purpose of this analysis. You can revoke a connection at any time through your bank or through Plaid Portal.

Basel removes the Plaid Item after the one-shot import, which ends Basel's access to that Item. When you choose to connect QuickBooks Online, we use Intuit's OAuth flow to facilitate the connection. Intuit collects your QuickBooks credentials directly; your credentials go to Intuit, never to Basel.Intuit then provides Basel with the credit-card expense data needed to run your analysis. Intuit's handling of your information is governed by the Intuit Global Privacy Statement.

We do not sell your personal information. We share it only in these limited cases:

• Service providers. Vendors that host and operate the Service on our behalf (for example, our cloud hosting provider, Plaid, and Intuit) process data only as needed to provide their service and under contract.
• With your direction. When you connect an account, you direct us to receive your data from Plaid or Intuit.
• Legal & safety. Where required by law, to respond to lawful requests, or to protect the rights, safety, and security of Basel, our users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not share your transaction data with card issuers, and we are not compensated for steering you toward any card. Referral relationships, where they exist, are disclosed on the recommendation and never influence the math.

• Analysis & account data in your browser persists until you delete it, sign out, or your browser clears its local storage. It is under your control.
• OAuth access tokens are disconnected or discarded within the single request that imports your transactions — retention is effectively zero.
• Technical logs are kept only as long as needed for security and reliability, then deleted or aggregated.

If we hold any information about you on our servers, we will delete it on request as described below, except where we must retain it to comply with a legal obligation, resolve disputes, or enforce our agreements.

Depending on where you are located (for example, under the California Consumer Privacy Act as amended, or comparable state laws), you may have the right to access, correct, delete, or receive a copy of your personal information, and to be free from discrimination for exercising these rights.

Because your data lives in your browser, you can exercise most of these rights yourself, instantly:

• Delete everything. Open your profile and use “Delete all my data” to erase your account and analysis from this browser. Signing out and clearing your browser's site data also removes it.
• Access & portability. Your report and its underlying figures are visible in the app, and the report can be exported to PDF.
• Revoke a connection. Disconnect through your bank, QuickBooks, or Plaid Portal.

To exercise any right with respect to information we may hold, or to ask a question about your data, email [email protected]. We will verify your request and respond within the timeframe required by applicable law. You may use an authorized agent where the law permits.

We encrypt data in transit, keep our Plaid and Intuit secrets server-side only, and minimize what we retain in the first place — the strongest protection for data is not to hold it. For the full picture, see our Security & Trust page. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

The Service is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

We may update this policy from time to time. When we make material changes we will update the effective date at the top and, where appropriate, provide additional notice. Continued use of the Service after an update means you accept the revised policy.

Questions about this policy or your data? Email [email protected]. You can also write to Basel Systems, Inc..