Privacy Policy

1. Who We Are

Company Base OS (“we,” “us,” or “our”) is an educational software platform operated by Company Base OS, LLC. Our platform helps small business owners understand their business credit readiness through AI-powered analysis and educational tools. We are not a lender, credit repair company, financial advisor, or credit bureau.

Contact: support@companybaseos.com

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, password (stored hashed via Firebase Authentication)
• Business profile data: business name, entity type, EIN (last 4 digits only), industry, state of formation, years in business, monthly revenue range
• Credit-related inputs: self-reported personal credit score range, business credit score range, recent inquiry counts, utilization estimates
• Credit reports you voluntarily upload (PDFs or images processed by our AI)
• Application outcome data you manually enter (approvals, denials, credit limits)
• Support messages and feedback you submit

2.2 Information Collected Automatically

• Log data: IP address, browser type, operating system, pages visited, time spent
• Device identifiers and session tokens
• Feature usage analytics (which tools you use and how often)
• Firebase Analytics data (aggregated, anonymized usage metrics)

2.3 What We Do NOT Collect

• We do not collect or store full Social Security Numbers
• We do not collect or store full credit card numbers or bank account numbers
• We do not pull your credit report from any credit bureau — all credit data is self-reported by you
• We do not have access to your actual bank balances or financial accounts

3. How We Use Your Information

• To provide, operate, and personalize the Company Base OS platform
• To generate your AI-powered funding readiness score and recommendations
• To send transactional emails (account verification, password reset, important platform notices)
• To improve our AI models, platform features, and educational content (using anonymized, aggregated data)
• To enforce our Terms of Service and detect fraud or abuse
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for credit decisions — all scoring on our platform is educational only.

4. Data Storage & Infrastructure

Our platform is built on Google Firebase (Firestore, Firebase Authentication, Cloud Functions, and Firebase Hosting). Your data is stored on Google Cloud infrastructure, primarily in the us-central1 region. Google's security standards and certifications (including SOC 2, ISO 27001, and PCI DSS) apply to the underlying infrastructure.

AI analysis is powered by OpenAI's API. When you request an AI scan or analysis, your business profile data (not personally identifiable details like your full name or SSN) is sent to OpenAI to generate educational recommendations. OpenAI's data processing is governed by their API Terms of Service and Privacy Policy.

5. Data Retention

• Active accounts: Data is retained for as long as your account is active
• Deleted accounts: Core account data is deleted within 30 days of account deletion; anonymized analytics may be retained longer
• Uploaded credit reports: Retained until you delete them from your account or delete your account
• Backups: Firestore automated backups may retain data for up to 7 additional days after deletion

6. Sharing of Information

We may share your information with:

• Service providers: Google Firebase, OpenAI (AI processing), Stripe (if applicable for payments) — each bound by data processing agreements
• Legal requirements: If required by law, court order, or to protect our rights or the rights of others
• Business transfer: In connection with a merger, acquisition, or sale of assets, with notice provided to you

Affiliate & Partner Links: Our platform may display links to third-party financial products (credit cards, business bank accounts, etc.). If you click these links, the third party may set cookies or collect information per their own privacy policies. We may earn a referral commission from these partners. We are not responsible for third-party privacy practices.

7. Cookies & Tracking

We use cookies and similar technologies to maintain your login session, remember your preferences, and understand how the platform is used. Firebase Analytics may use cookies for aggregated usage analysis. We do not use third-party advertising cookies.

You can disable cookies in your browser settings, but doing so may prevent some features from working correctly, including staying logged in.

8. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate or incomplete information via your account settings
• Deletion: Request deletion of your account and personal data
• Portability: Request your data in a machine-readable format
• Opt-out of marketing: Unsubscribe from any marketing emails via the link in the email

California Residents (CCPA)

California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell your personal information. To exercise your rights, contact us at support@companybaseos.com.

EEA / UK Residents (GDPR)

Our platform is primarily designed for U.S. businesses. If you are located in the European Economic Area or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and object to processing of your data. Our legal basis for processing is your consent and the performance of our service agreement with you. To exercise your GDPR rights, contact us at support@companybaseos.com.

To exercise any of your rights, email support@companybaseos.com with the subject line “Privacy Request”. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Firebase Security Rules restricting data access to authenticated users only
• Password hashing via Firebase Authentication (we never store plaintext passwords)
• Role-based access controls for our team

No system is 100% secure. If you believe your account has been compromised, contact us immediately at support@companybaseos.com.

10. Children's Privacy

Our platform is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. Your continued use of the platform after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

For privacy-related questions, requests, or concerns: