Privacy notice
Last updated
Base Eleven is a fictional company, built as a hands-on RevOps practice project. Every name, number and logo here is synthetic.
The platform behind Base Eleven, Inc. still runs for real, in test mode, and anyone can sign up. So this notice says plainly what Base Eleven collects when you use it, why, how long it is kept and how to delete it.
What we collect
- Your account: your email address, its domain, and how you signed in (Google or an email link). Sign-in itself is handled by our identity provider.
- Your company profile, from the sign-up form: company name, size, industry, your role, and optionally your use case and website.
- Your workspace: its plan, state and throughput tier, your spend cap, and audit records of key and admin actions.
- API keys: only a keyed hash of each key and its first characters, so we can recognise it. The full key is shown to you once and never stored.
- Usage: for each API call, the model, token counts, list price, time and outcome. The models are simulated, and we do not store your prompts or the replies; our logs redact them.
- Pay as you go: your card goes straight to our payment processor, in test mode, so no real card is charged. We keep the processor’s customer reference and the card brand.
- Sales requests: the name, company, company size and needs you type into the contact form, with your email address.
- Email: we send sign-in links and account notices, and log the template, the recipient and whether it was sent.
Analytics, only with your consent
If you accept analytics in the consent banner, the site records page views, which sections you saw, how far you watched the video, which buttons you clicked, the referring site and the first campaign tags you arrived with, under a random anonymous id. If you do not accept, the site sends none of it.
Analytics events never carry your email address, name, IP address, or any prompt or reply.
Abuse protection
Sign-up and contact forms use a bot check from our edge network. To enforce sign-up and email limits, we count requests per IP address and per email address, stored only as keyed hashes, never in plain text.
One email address gets one free trial in any 12 months. To keep that rule, we record a keyed hash of the address when a trial starts (the trial ledger, below). The hash cannot be turned back into your address.
How long we keep it
| Data | Kept |
|---|---|
| Account, profile and workspace | Until you delete your account |
| Trial ledger: a keyed hash of your email address and of your account id, and the date of the grant | 12 months from the grant, even after a reset or account deletion |
| Abuse counters (keyed hashes) | Until a day after their time window ends |
| Raw event records (no personal data) | 180 days |
| Undeliverable event records | 30 days |
| Daily totals (aggregates, no personal data) | No set limit |
| Service logs | 30 days |
| Cached usage reports | One day |
Deleting your data
In the console, Settings has two options. Reset workspace closes your workspace and lets you start again. Delete account erases you:
- your sign-in account and user record are deleted;
- your workspaces lose their company profile and attribution, are marked deleted, and their API keys are revoked;
- your customer record at the payment processor and your contact at the email provider are deleted;
- your name, email address and needs are cleared from any sales request, and your address is removed from the email log and the audit records.
What stays: the trial ledger and abuse counters, which hold only keyed hashes and expire on the schedule above, and event records, which hold no personal data.
Changes
This notice changes when the platform does. The date at the top is the last change.
See also: Terms of use.