Privacy notice

Effective: 5 September 2026

Who is responsible

Basefolio Ltd is the controller.

What we collect and why

We collect professional contact details, correspondence, service records, security logs, and the documents and instructions your firm supplies. We use them to respond to enquiries, provide and secure the service, and meet legal obligations.

Sharing and location

Authorised Basefolio personnel and listed subprocessors receive data only where needed. We do not sell personal data. Hosting and backups are provided by Hetzner in Germany and Finland (DE/FI). Email ingest uses AWS eu-west-1. OpenAI and Anthropic extraction models involve US processing. See our subprocessor list for the services we use.

Retention and rights

We retain data only while needed for the service, security, accounting, or law. You may ask to access, correct, erase, restrict, or receive personal data, or object to its use. Contact hello@basefolio.co.