Privacy Policy

1. Who We Are

BAFware is a product of Concepts.io LLC ("we", "us", "our"). We operate the BAFware platform, a competitive intelligence tool for founders and early-stage companies. By using BAFware you agree to this Privacy Policy.

2. What We Collect

We collect the minimum data necessary to operate the platform:

• Account information — your name, email address, and authentication credentials (e.g. Google OAuth token).
• Project data — company profiles, competitor entries, analysis results, and notes you create inside the platform.
• Usage data — feature interactions, credit consumption, and error logs used to improve platform reliability.
• Payment data — purchases are processed by Stripe. We store only transaction records (amount, timestamp, credit balance). We never see or store your card details.

3. How We Use Your Data

Your data is used exclusively to:

• Operate and deliver the BAFware platform to you.
• Improve the accuracy and quality of analysis results within the platform.
• Process payments and manage your credit balance.
• Send transactional emails (e.g. receipt confirmations, service notices).
• Diagnose errors and maintain platform stability.

We do not use your data for advertising, behavioural profiling, or any purpose unrelated to providing BAFware to you.

4. No Sale of Data

We do not sell, rent, license, or otherwise transfer your personal data or your company's data to any third party for commercial purposes. Full stop.

5. Data Sharing

We share data only with the sub-processors necessary to run the service:

• Supabase — database hosting (PostgreSQL).
• Vercel — application hosting and edge delivery.
• Stripe — payment processing.
• AI providers — competitor analysis queries are sent to third-party AI APIs (e.g. OpenAI, Anthropic). These queries may include publicly available competitor information you enter; they do not include your personal account details.

All sub-processors are contractually required to process data only as instructed and in accordance with applicable privacy law.

6. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request deletion of your account and associated data. We will fulfil deletion requests within 30 days.
• Portability — request an export of your project data in a machine-readable format.
• Objection — object to any processing of your data where we rely on legitimate interest as the legal basis.

To exercise any of these rights, email us at privacy@bafware.com.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain records for legal or tax compliance (e.g. payment records, which may be retained for up to 7 years).

8. Security

We implement industry-standard safeguards including encrypted data in transit (TLS), encrypted data at rest, and role-based access controls. No system is perfectly secure; if you discover a vulnerability, please contact us at security@bafware.com.

9. Cookies

We use only essential session cookies required for authentication and security. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this policy periodically. Material changes will be communicated by email or an in-app notice at least 14 days before taking effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

11. Contact

Concepts.io LLC
Email: privacy@bafware.com