Baseweight

Privacy Policy

Baseweight Solutions Inc. Privacy Policy (Canada)

Last Updated [[May 14, 2025]]

Your privacy is important to us. We are committed to protecting and ensuring the confidentiality of any Personal Information you provide to us.

This Privacy Policy ("Privacy Policy") addresses how Baseweight Solutions Inc. ("we," "our," "Baseweight") handles information we gather from third parties, including, but not limited to, visitors to www.baseweight.ai (the "website"), users of the Baseweight mobile application available through the Apple App Store and Google Play Store (the "Mobile App"), and users of the Baseweight Platform ("Users"). This Privacy Policy describes the ways we collect, use and share Personal Information. Our Privacy Policy applies whenever you visit the website or use the Platform.

Please read this Privacy Policy carefully. By using our website or Platform, or otherwise providing us with your Personal Information, you are hereby consenting to Baseweight's collection, use, disclosure and communication of your Personal Information in accordance with this Privacy Policy.

If you do not consent to the practices described in this Privacy Policy, you may not continue to use our website or Platform.

For the purposes of this Privacy Policy,

"Personal Information" means any information that relates to you and either identifies you directly or could be used to identify you with other information available. It includes your name, user ID, email address, phone number, and mailing address, and may also include your OAuth provider user ID, authentication tokens, device metadata (IP address, device/OS, browser, referral source), and certain content you may upload (e.g. artificial intelligence ("AI") model files, filenames, and metadata).

"Platform" means Baseweight's website, web dashboard, Mobile App, Software Development Kits ("SDKs") for iOS, Android, desktop and web, related developer tools, and any beta or preview features we make available that let Users upload, store, manage, encrypt/decrypt, and deliver AI model files to authorized devices.

Questions regarding this statement should be emailed to our Privacy Officer at privacy@baseweight.ai or mailed to Joe Bowser, Privacy Officer, Baseweight Solutions Inc., PO Box 19026, Port Moody RPO Rocky Point, BC V3H 0J1. You may also call us at 778-819-5038 and ask for the Privacy Officer.

Not Intended for Children

Baseweight's Platform is not intended for children under the age of 18. We do not knowingly collect data relating to children. If you are under the age of 18, do not use or provide information on this Platform. If you are aware of information about children provided to Baseweight, please let us know, and we will take steps to remove the information.

Agreement to Terms by Using this Platform

Please read this Privacy Policy so that you are aware of how and why we use your Personal Information. When you use this website or Platform, you consent to have your Personal Information collected, used, disclosed and communicated in accordance with this Privacy Policy.

This Privacy Policy may change from time to time, as reflected in the revision date above, to reflect changing legal, regulatory or operational requirements. Where required by law, Baseweight will provide notification of material changes to this Privacy Policy through the website at least thirty (30) business days prior to the change taking effect. Where appropriate, we may also email Users who have opted to receive communications from us notifying them of changes to this Privacy Policy. If we are required by applicable data protection laws to obtain your consent to any material changes to this Privacy Policy, then we will do so before such changes take effect.

Your continued use of the website or Platform after we make changes constitutes deemed acceptance of these terms.

Third-Party Links

The Platform may contain links to third-party websites, plug-ins and applications. Clicking those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites, plug-ins and applications and are not responsible for their privacy statements and practices. When you leave our Platform, we encourage you to read the privacy policy of every website you visit.

How We Collect and Use Your Data

Information Gathered

We may collect, store, use and transfer different kinds of Personal Information about you, as described below:

[Registration and Early-Access Information]. You provide your name, email address, and (where you choose OAuth) the OAuth provider ID and authentication token when you create an account or sign in. We also collect email addresses from visitors who voluntarily sign up for early access or join the waitlist via our website forms to contact you about product availability, beta program invitations, or Baseweight announcements.

[Contact Form Submissions.] If you use the "Contact - Get in Touch" form on our website, we collect your name, email address, subject line, and any message you submit in order to address and/or respond to your inquiry.

[Log Data and Activity Tracking]: We collect certain information automatically from visitors and Users of the Platform, such as such as IP address, approximate geolocation (derived from IP), device type and operating system, browser type and version, referral source, session duration, page views, clicks and other interactions within the dashboard, and timestamps.

[Information Automatically Collected via Mobile App]  We may collect certain technical information, such as your viewing time, Mobile App navigation and features utilized, device type, operating system and version, unique device identifier, browser type and version, and Mobile App version.

[Analytics Tools:]  The Mobile App integrates with Google Firebase (SDK) in order to capture analytics that enable us to assess how the Mobile App is interacted with, if and how certain features are being used, and to collate usage statistics such as daily and monthly active users and average Mobile App session lengths.

[Cookies]. We collect session cookies to keep you logged in, first-party cookies set by our web application to maintain session state, and first-party analytics cookies, web beacons, and pixels provided by Google Analytics for performance analytics.

[User Data]: We store and process User data in the context of providing the Platform, which may include login data, browser type and version, location, operating system, and similar information, as well as User content uploaded to or created on the Platform, and any Personal Information inadvertently provided to Baseweight through use of the Platform. This includes AI model files (e.g. ONNX or GGUF), filenames, or metadata you supply, or optional feedback, bug reports, or support messages you submit.

[Marketing and Communications]: We collect, store, and process information that you provide to us when you communicate with us, including when you email or call us. We also store and process your preferences for receiving marketing materials from us and your communication preferences. You will only receive product updates or newsletters if you actively opt in, and you can opt out at any time.

[Business-Development Contacts]: Name, email address, and professional affiliation of prospective investors, enterprise leads, or accelerator contacts, collected during email, LinkedIn or meeting interactions.

[Other]: We also collect and use certain aggregate data, which has been anonymized, such as statistical data regarding the use of our Platform, for lawful purposes. For example, we may aggregate data to calculate the percentage of Users accessing specific Platform features. As noted above, this type of data is not considered "Personal Information" subject to privacy laws because it cannot be used to identify a particular person.

We avoid collecting any of the following sensitive categories of Personal Information about you: information regarding your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, health, genetic or biometric data.

Information Use

We will only use your Personal Information when the law allows us to and as described below.

[Providing Baseweight's Platform and Platform Communications]. Users of Baseweight's Platform have a more specific relationship with us. User registration information may be used to open and secure your account, issue API/SDK credentials, and share updates regarding the Platform and for announcements, feedback requests, security updates, support, and other products and services communications and promotions made available by Baseweight. Some features (e.g. Baseweight Model Park) are offered in closed beta. If you enroll, we will use your registration or wait‑list information to manage that program.

[Data Management and Support]. Baseweight stores and processes User content only on behalf of, and as instructed by, its Users. However, User content may be viewed or accessed by Baseweight to resolve a problem or support issue. Users are responsible for maintaining the confidentiality and security of their user registration and password.

[Improvements]. We also use visitor and User Personal Information to help deliver a better experience (for example, by displaying personalized content to you based on your interactions with the Platform), to diagnose technical problems, to support marketing activities and so that we may better administer and improve the quality of both the website and the Platform. For Mobile App users, we also use Google Firebase analytics to understand feature adoption and to diagnose crashes.

[Marketing and Promotion]. Baseweight may, if you have opted in, send you product updates or feature announcement emails. You may withdraw consent or adjust your preferences at any time.

[To Enforce Compliance with Our Policies]. Baseweight may access User Data and certain visitor information if necessary to investigate a suspected violation of the Terms of Use and/or Acceptable Use Policy for the Platform.

[To Maintain Legal or Regulatory Compliance]. Our Platform is subject to certain laws and regulations which may require us to use your Personal Information. For example, we use your Personal Information to pay our taxes, to fulfill our business obligations, and as otherwise required by law. Without using your Personal Information for such purposes, we could not provide you with the Platform's services in accordance with our legal and regulatory requirements.

How We Share Your Data

Sharing of Information

Baseweight will not copy, distribute, or otherwise share any User or visitor Personal Information except as set out in this Privacy Policy. Baseweight may share or communicate Users' and visitors' Personal Information in the following ways:

  • [Within the Organization]: Within Baseweight, your Personal Information may be accessible to personnel with a need to know the information in order to perform their duties. At the date of this policy, that is limited to (i) the founder/CEO/CTO/Privacy Officer and (ii) one Toronto-based co-founder who has access only to limited business contact information.

  • [Third-party service providers:] Baseweight may partner with other parties to provide Users with specific services such as Supabase (authentication and metadata database); Amazon Web Services (S3 and CloudFront) (encrypted file storage and delivery), and Google Analytics (aggregated website analytics). Each is bound by contractual confidentiality and security obligations.

  • [App Store Analytics:] Baseweight uses App Store Connect and Google Play Console to distribute the Mobile App on the iOS and Android platforms, respectively. Data in connection with downloads, source countries, crash analytics, devices and operating system versions are collected and shared with Apple and Google upon download of the Mobile App from the Apple App Store or Google Play Store.

  • [Potential acquirers of Baseweight's business:] If Baseweight is involved in a merger, acquisition or asset sale (each a "transaction"), some or all Baseweight Users' and visitors' Personal Information may be disclosed or communicated to evaluate or carry out the transaction. In such a case, the other party will be instructed to handle the Personal Information in the same manner as provided in this Privacy Policy, and Users or visitors will be notified to the extent required by applicable laws.

  • [Law Enforcement.] We may be required in certain circumstances to disclose or communicate Personal Information in response to a lawful request by public authorities, courts, or law enforcement, or to comply with national security requirements, or as otherwise required by the applicable data protection law. To the extent allowed by law, we will notify you before a disclosure or communication is made.

  • [Consent:] We may disclose or communicate Users' and visitors' Personal Information with third parties where we have consent to do so, except as otherwise prohibited by law.

Data Location and Data Transfers

Although the Platform enables on‑device inference without cloud dependencies or data transfers, Baseweight is headquartered in British Columbia and uses cloud infrastructure located in the United States (e.g. Supabase, Amazon Web Services, Google Analytics). Accordingly, certain Personal Information may be transferred to and processed in the United States and may be accessible to U.S. courts, law enforcement and national security authorities. If you have questions about our cross-border practices, contact the Privacy Officer at privacy@baseweight.ai.

How We Protect and Manage Your Data

Security

Baseweight uses appropriate administrative, technical, organizational, and physical security measures to protect our Users' and visitors' Personal Information against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure, communication and access. We encrypt all model files in AWS S3 at rest, use TLS for all in-transit data, and environment segregation (staging vs production), and restrict infrastructure access through IAM policies and multi-factor authentication. We further monitor infrastructure logs and Google Analytics for anomaly detection.

We have procedures in place to address any suspected personal data breach and will notify you and any applicable regulator of a breach as required by law.

Data Retention

We retain Personal Information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with the Platform's services you have requested, to comply with applicable legal, contractual, tax or accounting requirements, or to defend ourselves from possible legal actions). When we have no ongoing legitimate business need to process your Personal Information, we will destroy it or anonymize it in accordance with applicable laws.

We retain account data until you delete your account, uploaded model files and metadata until you delete them or your account, server logs for up to 12 months, Google Analytics data for 14 months, and temporary decryption keys only in memory for the duration of the session, after which they are destroyed. When data is no longer required, we delete it from Supabase and AWS S3 using secure deletion commands and lifecycle rules.

Your Choices to Control Your Data

Your Data Protection Rights

You can exercise any one of the following data protection rights as may be available to you under applicable law by contacting us at privacy@baseweight.ai or through one of the other methods set forth in the introduction to this Privacy Policy. In certain jurisdictions, we may need to verify your identity before responding to your request. Depending on your jurisdiction, you may have the following data protection rights:

  • The right to access, correct, update or request deletion of the Personal Information we collect about you.

  • The right to opt out of marketing communications, even if you have previously consented to receiving them. You may opt out at any time.

  • The right to request a portable copy of your Personal Information.

  • The right to de-indexation, re-indexation or cessation of dissemination of your Personal Information.

  • If we have collected and processed your Personal Information with your consent, then you may have the right to withdraw your consent or request full account deletion at any time by contacting us through one of the methods below -- see the heading "Contact".

We will make and post specific information about our policies and practices relating to:

  • retention and destruction of your Personal Information;

  • the roles and responsibilities of Baseweight's members of its personnel throughout the life cycle of your Personal Information; and

  • the process for dealing with complaints regarding the protection of your Personal Information.

Contact

In order to exercise your data protection rights or should you have any questions, concerns or complaints regarding our Privacy Policy or the collection or processing of your Personal Information, you may email our Privacy Officer at privacy@baseweight.ai or write to Joe Bowser, Privacy Officer, Baseweight Solutions Inc., Baseweight Solutions Inc. PO Box 19026, Port Moody RPO Rocky Point, BC V3H 0J1, Canada.