BAS AI
Privacy Policy
In short:
- This policy covers www.bas-ai.com (and www.bas-ai.com.br) and the BAS Legal site at www.bas-ai.com/baslegal.
- We only receive the data you send us through the contact form, to answer your request, and the technical access records that any website generates.
- We do not use cookies, browsing analytics, advertising or third-party trackers.
- You can ask to access, correct or delete your data at any time at dpo@bas-ai.com.
1. Who is responsible for your data
The controller of the personal data processed on these sites is BAS ARTIFICIAL INTELLIGENCE LTDA ("BAS AI", "we"), Brazilian company registration (CNPJ) 64.106.409/0001-70, Rua Gomes de Carvalho, 911, Vila Olímpia, São Paulo/SP, 04547-003, Brazil.
Data Protection Officer (DPO): Guilherme Kaschny Bastian — dpo@bas-ai.com, at the address above.
2. What this policy covers
This policy describes how we process the personal data of visitors to BAS AI's corporate sites — www.bas-ai.com, www.bas-ai.com.br — and to the BAS Legal presentation site at www.bas-ai.com/baslegal.
It does not cover:
- MyHealth by AI and www.bas-ai.com/myhealth, which have their own privacy policy at www.bas-ai.com/myhealth/legal/privacy-en;
- the use of the BAS Legal system by law firms, which is governed by the contract with each firm and its accompanying data processing documents.
3. What data we process, why and on what legal basis
| Data | Purpose | Legal basis (LGPD) |
|---|---|---|
| Contact form: name, email, firm or company, firm size, topic of interest and the message you write. | To answer your request, schedule a conversation or demo, handle press requests and assess your firm's interest in starting to use BAS Legal. | Pre-contractual steps at your request (art. 7, V) and legitimate interest in answering those who contact us (art. 7, IX). |
| Technical access records: IP address, date and time, requested page, browser and operating system (User-Agent header). | To deliver pages, keep the sites secure and stable and prevent abuse. | Legitimate interest (art. 7, IX) and legal obligation where applicable (art. 7, II, and Brazil's Internet Civil Framework, art. 15). |
| Approximate country, inferred from the IP address by our hosting infrastructure. | To show prices in the right currency on the MyHealth pages. Only the country is read; we do not store or log it. | Legitimate interest (art. 7, IX). |
| Language preference, kept in your own browser. | To remember the language you chose on www.bas-ai.com. | Legitimate interest (art. 7, IX). See the Cookie Policy. |
We do not ask for, and do not want, sensitive personal data in the contact form. Please do not include information about lawsuits, your firm's clients or other third parties in your message.
We do not use your data for automated decisions, behavioral profiling or advertising, and we do not sell it.
4. Who we share data with
We only share data with the providers that make the sites possible, acting as processors under our instructions:
- Vercel Inc. — hosting and delivery of the sites. Receives the technical access records.
- Web3Forms — receives the contact form and forwards it by email to our team. Receives the data you fill in, only when you click "Send message".
- BAS AI's corporate email provider — where the message is received and answered.
We may also share data when required by law, by order of a competent authority or to defend BAS AI's rights in judicial, administrative or arbitration proceedings.
Our sites load no third-party resources — fonts, images, scripts, maps, videos or pixels. While you browse, your browser only talks to the bas-ai.com domain.
5. International transfer
Some of these providers keep servers outside Brazil. In those cases, the transfer takes place under article 33 of the LGPD, based on the data protection safeguards in those providers' processing terms and, for the contact form, to fulfil the request you made to us.
6. How long we keep data
- Contact messages: for as long as needed to answer and follow up on your request, and for no more than 24 months after the last interaction. If the contact becomes a business relationship, the data then follows the contract.
- Technical access records: for the hosting provider's retention period and the period required by article 15 of Brazil's Internet Civil Framework, where applicable.
- Language preference: stays in your browser until you delete it.
At the end of these periods, the data is deleted or anonymized, unless the law requires it to be kept longer.
7. Your rights
Under the LGPD (art. 18), you may at any time request:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
- portability of your data to another provider;
- deletion of data processed on the basis of your consent;
- information about who we share your data with;
- objection to processing based on legitimate interest.
To exercise any right, write to dpo@bas-ai.com. We may ask you to confirm your identity to protect your data. We answer within the LGPD deadlines — a complete access statement within 15 days.
You may also lodge a complaint with Brazil's National Data Protection Authority (ANPD) at www.gov.br/anpd, or with the data protection authority of your country.
8. Security
The sites only work over encrypted connections (HTTPS), load no third-party resources and collect the minimum data needed. Access to contact messages is restricted to the team that answers them. No system is completely immune to incidents; if an incident may bring you relevant risk or harm, we will notify you and the ANPD, as required by article 48 of the LGPD.
9. Children and teenagers
The BAS AI and BAS Legal sites are intended for companies and law firms and are not directed at people under 18.
10. Changes to this policy
We may update this policy to reflect changes to the sites or to the law. The version in force and its start date are always shown at the top of this page. Relevant changes will be highlighted on the sites.
11. Contact
Questions about this policy or your data: dpo@bas-ai.com · BAS ARTIFICIAL INTELLIGENCE LTDA · Rua Gomes de Carvalho, 911, Vila Olímpia, São Paulo/SP, 04547-003, Brazil.