Base44 procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to object to the processing of your Personal Information where our lawful basis is legitimate interest or direct marketing;” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to verify your Personal Information (to access, delete, change or update any Personal Information relating to you. For example, if you believe that your Personal Information is incorrect, you may ask to have it corrected or deleted);” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ If you wish to exercise any of these rights, please contact us at: compliance@base44.com . When handling your request, we will ask for additional information to confirm your identity (which may include Personal Information). However, please note that if you choose not to allow us to process your Personal Information, we may be prevented from providing you with the right to access and use the Platform or Website. Please note that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements. If you wish to raise a complaint on how we have handled your Personal Information, please contact us directly at: compliance@base44.com If you are not satisfied with our response or believe we are collecting or processing your Personal Information not in accordance with the laws, you may elect to file a complaint to the applicable data protection authority.” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ Customer acknowledges and agrees that the use of the Website and Platform by the Customer and its Users is governed by the Company's Privacy Policy as amended from time to time. If Company processes personal data (as defined under applicable law), to the extent required by law or agreed upon between Customer and the Company, the parties will enter into a the Data Processing Agreement (DPA) regarding such personal data, shall apply.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to restrict us from processing Personal Information pertaining to you (for example, you may request that we will stop using or sharing your Personal Information with third party service providers); and” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ Because Base44 operates globally, it may be necessary for us to transfer information, including Personal Information, to other countries than the country in which the information was collected. In these instances, we will transfer your data in accordance with the provisions of the applicable privacy legislation meant to safeguard the processing of your Personal Information.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Certain jurisdictions provide data subjects with certain statutory rights to their Personal Information. Subject to exemptions provided by law, and with proper identification, you may have the right to certain actions to your Personal Information such as:” | Captured 2026-07-19Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Right to request that we erase Personal Information about you (subject to any other legal obligation that may require us to keep that information);” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ For how long we retain the information We retain the information that we collect from you for as for as long as it is necessary based on the purpose it was collected for and taking into account compliance with our legal obligations, resolving disputes and enforcing our rights. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. We may keep records containing your Personal Information, communications and anything else as required by applicable laws and regulations. We may rectify, replenish or remove incomplete or inaccurate information, at any time and at our discretion.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ The termination of the Subscription shall not relieve Customer from its obligation to pay due Fees. Except as explicitly set forth herein, upon termination, all licenses and rights granted hereunder shall immediately expire and any and all use by the Customer or the Users of the Platform shall immediately cease and expire. Customer shall immediately delete and shall not maintain any copy of any component of the Platform or Company Documents installed or saved on the Customer’s systems or environment Right to Receive Customer Data. If requested by the Customer in writing, provided that Customer may exercise such right within no later than 15 days following termination, Company shall provide the Customer with the Customer Data then held by the Company, if any, in a standard format and media. The Company may retain copies of Customer Data, Input Data, and Generated Output (including any content, code, text, images, or other materials created, stored, displayed, or exported within the application) which are automatically created for back-up purposes and other Customer Data which is required to be maintained by Company pursuant to the Company’s data retention policies, and provided that the provisions of the Section ‎(entitled “Confidentiality”) shall continue to apply to such data. The Customer acknowledges that following the aforesaid 15-day term following termination of these Terms, the Company may delete all Customer Data without retaining any copy. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To investigate violations and enforce our policies (including this policy and our Responsible Use Policy), and as required by law, regulation or other governmental authority, or to comply with a subpoena or similar legal process or respond to a government request or otherwise collaborate with law enforcement agencies;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Each of our Users on our platform is able to collect information, including Personal Information, about their own application’s users (Users-of- Users). All collection or usage of Users-of-Users personal information shall be in accordance with our Data Processing Addendum. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ To establish or exercise our rights to respond to legal claims, and to enforce and establish our intellectual property or other legal rights;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Because Base44 operates globally, it may be necessary for us to transfer information, including Personal Information, to other countries than the country in which the information was collected. In these instances, we will transfer your data in accordance with the provisions of the applicable privacy legislation meant to safeguard the processing of your Personal Information.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Any potential purchasers of, lenders to or investors in Base44.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We also use a tool called Google Analytics to collect information about your use of the Platform and Website. This third-party service collects information such as how often users access the Platform or Website, what pages they visit when they do so, etc. We use the information we get from these tools only to improve our Website and Platform. Google Analytics collects the IP address assigned to you on the date you visit sites, rather than your name or other identifying information. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your use of the Platform and Website is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ The use of raw and derived information received from Google Workspace APIs will adhere to the Google User Data Policy , including the Limited Use requirements .” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Our subsidiaries and affiliated companies;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Our third-party vendors engaged in providing services in connection with the Platform, Website or sending marketing communications (the latter, with your consent);” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ We do not rent or sell any Personal Information. We may share Personal Information with the following recipients:” | Captured 2026-06-08Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.