Privacy Policy
What data we collect to run bbasata Cloud, why we need it, and the rights you have over it.
1. Data collection
We collect only the data strictly required to operate the bbasata Cloud service: account identity (email, name), organization metadata, and the operational telemetry needed to enforce usage quotas.
2. Data processing
Your data is processed inside logically separated contexts per organization. No cross-tenant access occurs — workflow definitions, agent prompts and task descriptions are visible only to members of your organization.
3. Third-party access
We do not sell or share your data with third parties. Sub-processors are limited to: Stripe (payments), email delivery (for transactional notifications), and observability tooling (for performance monitoring). A data processing addendum (DPA) is available on request via ops@bbasata.com.
4. User rights
You may request export or deletion of your data at any time from the account settings panel. Deletion is irreversible and propagates, where technically feasible, within 30 days to all backups.
5. Contact
For privacy inquiries contact ops@bbasata.com.