1. Information We Collect
We collect information you provide directly when you create an account, set up your company profile, and use our features:
- Account data: Name, email address, and role.
- Company data: Company name, address, branding, and business structure.
- Financial data: Invoices, expenses, SOWs, project budgets, and cash-flow data you enter or import.
- Integration data: Data synced from connected services like QuickBooks, Google Drive, and LinkedIn.
- Usage data: Feature usage patterns and analytics events used to improve the product.
2. How We Use Your Data
- To provide and maintain the ROI Fire service.
- To generate financial insights, forecasts, and AI-powered analytics.
- To sync data with your connected integrations.
- To send account, billing, and product notifications.
- To detect fraud, abuse, and security threats.
- To improve product features and user experience.
3. Data Storage & Security
Your data is stored on secure cloud infrastructure with encryption in transit (TLS 1.2+) and at rest. We enforce role-based access control (RBAC), audit logging, and Content Security Policy (CSP) headers. Access to production data is restricted to authorized personnel with multi-factor authentication.
4. Data Sharing
We do not sell your data. We share data only with:
- Service providers: Stripe (payments), cloud hosting, and analytics — strictly to operate the service.
- Your connected integrations: Only when you explicitly authorize a connection (e.g., QuickBooks sync).
- Legal compliance: If required by law, court order, or to protect our rights and safety.
5. Your Rights & Data Control
- Export: You can export all your workspace data as CSV/JSON from Admin → Data Management.
- Delete: You can permanently delete your workspace and all associated data from Admin → Data Management.
- Revoke integrations: You can disconnect any integration at any time.
- Access: You can request a copy of your personal data by contacting support.
6. Data Retention
We retain your data for as long as your account is active. Upon workspace deletion, all associated data is permanently removed within 30 days, except where retention is required for legal or accounting purposes.
7. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.
9. Contact
For privacy questions or data requests, contact Base44 support through the in-app Help Center.