Privacy policy — Basecamp

Cited by

Facts read from this source

• Entity Report an error

  “This policy applies to all products built and maintained by 37signals LLC including Basecamp (all versions), HEY, Highrise, Campfire, Backpack, Ta-da List, and Writeboard”

• No sale Report an error

  “We never sell your data.”

• Deletion on account cancel Report an error

  “If you delete your account, we’ll delete the content within 60 days.”

• Trash retention Report an error

  “Altogether, any content trashed in your product accounts should be purged from all of our systems and logs within 90 days.”

• Account cancel purge Report an error

  “If you choose to cancel your account, your content will become immediately inaccessible and should be purged from our systems in full within 60 days.”

• Location Report an error

  “Our products and other web properties are primarily housed in the United States.”

• Encryption Report an error

  “All data is encrypted via SSL/TLS when transmitted from our servers to your browser. The database backups are also encrypted.”

• At rest encryption Report an error

  “With regard to products other than HEY, most data are not encrypted while they live in our database (since they need to be ready to send to you when you need them). With HEY, we go further by encrypting the database at-work.”

• No AI content processing Report an error

  “Our products don’t include built-in AI features that process your content, and we don’t use your content to train AI models.”

• Internal AI tools Report an error

  “We do use AI assistant tools from providers such as Anthropic and OpenAI internally”

• Privacy contact Report an error

  “Please get in touch by emailing us at privacy@37signals.com.”

• Address Report an error

  “37signals LLC, 137 N. Oak Park Avenue, Suite 208, Oak Park, IL 60301 USA”

• Data portability Report an error

  “If you want to export data from your accounts, you can do so directly by following these instructions for HEY, Basecamp 5, Basecamp 2, Basecamp Classic, Highrise, Campfire, and Backpack.”

• Government requests Report an error

  “Our policy is to not respond to government requests for user data unless we are compelled by legal process or in limited circumstances in the event of an emergency request.”

• California notice Report an error

  “If you are a California resident, please click here to see our California Notice at Collection, which includes additional disclosures as required by California law.”

• Self brought AI agents Report an error

  “Some of our products can be used with AI agents that you bring yourself — for example, by connecting your own agent to Basecamp through the command line.”

• Ip logging Report an error

  “For most of our products, we log the full IP address used to sign up a product account and retain that for use in mitigating future spammy signups. We also log all account access by full IP address for security and fraud prevention purposes”

• Captcha Report an error

  “We use CAPTCHA across our applications to mitigate brute force logins and as a means of spam protection.”

Scores citing this record

• The Bootstrapper Reporting
• The Bootstrapper Integrations
• The Bootstrapper European sovereignty
• The Bootstrapper Reporting
• The Bootstrapper Integrations
• The Bootstrapper European sovereignty
• The Bootstrapper Reporting
• The Bootstrapper Integrations
• The Bootstrapper European sovereignty
• The Bootstrapper Integrations
• The Bootstrapper European sovereignty
• The Bootstrapper Integrations
• The Bootstrapper European sovereignty
• The Data Protection Officer Reporting
• The Data Protection Officer Integrations
• The Data Protection Officer European sovereignty
• The Data Protection Officer Reporting
• The Data Protection Officer Integrations
• The Data Protection Officer European sovereignty
• The Data Protection Officer Reporting
• The Data Protection Officer Integrations
• The Data Protection Officer European sovereignty
• The Data Protection Officer Reporting
• The Data Protection Officer Integrations
• The Data Protection Officer European sovereignty
• The Data Protection Officer European sovereignty
• The Enterprise Architect Integrations
• The Enterprise Architect European sovereignty
• The Enterprise Architect Reporting
• The Enterprise Architect Integrations
• The Enterprise Architect European sovereignty
• The Enterprise Architect Reporting
• The Enterprise Architect Integrations
• The Enterprise Architect European sovereignty
• The Enterprise Architect Integrations
• The Enterprise Architect European sovereignty
• The Enterprise Architect Integrations
• The Enterprise Architect European sovereignty
• The Integrator Integrations
• The Integrator Onboarding effort
• The Integrator European sovereignty
• The Integrator Reporting
• The Integrator Integrations
• The Integrator European sovereignty
• The Integrator Reporting
• The Integrator Integrations
• The Integrator European sovereignty
• The Integrator Integrations
• The Integrator European sovereignty
• The Integrator Integrations
• The Integrator European sovereignty
• The Skeptic Reporting
• The Skeptic Integrations
• The Skeptic European sovereignty
• The Skeptic Reporting
• The Skeptic Integrations
• The Skeptic European sovereignty
• The Skeptic Reporting
• The Skeptic Integrations
• The Skeptic European sovereignty
• The Skeptic Reporting
• The Skeptic Integrations
• The Skeptic European sovereignty
• The Skeptic European sovereignty
• The UX Purist Reporting
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Reporting
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Reporting
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Reporting
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Reporting
• The UX Purist Integrations
• The UX Purist European sovereignty
• The UX Purist Integrations
• The UX Purist European sovereignty