Privacy & Data Policy
Last updated: October 2026
You are handing us your financial records. This page says plainly what happens to them. If anything here is unclear, email support.baseworth@gmail.com before you upload anything.
What we collect
The free valuation
The four figures you enter are calculated in your own browser and are not sent to us. Unless you take the step below, we do not know you used it and there is no record of your numbers.
Only if you ask us to email you the estimate, we receive your email address, the figures you entered and the resulting range. We keep them in a private spreadsheet and email you your estimate. Reply "unsubscribe" to any email from us and we will not email you again.
Your browser also remembers the industry and years in business you chose — never the figures — so the order form can fill them in if you go on to order. That stays on your device and is never sent to us; it is ignored after a month.
The chat assistant
Questions you type into Ask Baseworth, the chat in the corner of each page, are sent to Google's Gemini API so it can answer them. We don't keep them, and the conversation is held only in your browser tab until you close it. To stop anyone sending thousands of messages, we count each visitor's messages for one hour against a scrambled form of their IP address, which can't be turned back into the address. Please don't type card numbers or private financial details into the chat.
Updates by email
If you sign up on the Updates page, we keep your email address and the date you signed up in the same private spreadsheet, and email you each new post. Every email has a one-click unsubscribe link; after you use it we email you nothing more.
The Baseworth Package (CIM)
- Business details you type: name, industry, years in business, location, description
- Financial documents you upload: tax returns, P&Ls, bookkeeping exports (PDF, XLSX, CSV)
- Your answers to the clarification questions
- Your contact email address
- The figures read from your documents, with the lines they were read from
- The generated package itself
Payment
Payment is handled by Stripe. Your card number never reaches our servers and we never see it. We receive only a payment reference and whether it succeeded.
Who else processes your documents
This is the part most policies bury, so it is first here. To produce your package, the contents of your uploaded documents are sent to:
- Google (Gemini API) — reads your financials and extracts the figures. Spreadsheets are converted to text in your browser first. PDFs are sent as files, together with any text your browser can read from them, so each figure can be checked against the document it came from. Google processes this under its API terms and, on paid API tiers, does not use it to train its models. It also answers the questions typed into the chat assistant.
- Google Workspace (Sheets and Gmail, via Apps Script) — your order record and contact email are written to a private spreadsheet so we can find your order if you contact support, and your package is emailed to you. If you ask for your free estimate by email, your address and those figures are kept the same way.
- Vercel — hosts this site and the application.
- Upstash — stores your order on our server: the business details you typed, your answers, the figures read from your documents and the finished package, so the link in your email can open it again. Your uploaded documents are not stored there.
- Stripe — processes payment.
That is the complete list. We do not sell your information, we do not share it with brokers, buyers, lenders or data brokers, and nothing about your business is listed or published anywhere.
Where your order is kept
Your order and finished package are kept in two places: in your browser's local storage, so this page can show them again on the same device, and on our server, so the private link in the email we send you opens them on any device. That link carries a private key — anyone you forward it to can open your package, so treat it like a password. Clearing your browser data removes only the copy in your browser.
The link is also kept with your order record in our private spreadsheet, so that if you lose the email you can ask for it again from the order page. It is only ever sent to the email address the package was ordered with.
Your uploaded documents are kept in neither place. If the page closes before your package is finished, you add them again to finish it, on the same payment.
How long we keep it
- Your uploaded documents: not kept. They are passed to Google's Gemini API to produce your package and are never saved by us.
- Your order record and contact email, the stored copy of your order and package, and our copy of the email that delivered your package: kept for three years from your order, for support, refunds and tax records, then deleted.
- A checkout that is never paid: its record is deleted after seven days.
- A free-estimate request (your email and the figures you entered): kept for twelve months, then deleted.
- An updates sign-up: kept while you are subscribed. After you unsubscribe, only your address is kept, marked unsubscribed, so it is never emailed again — ask and we will delete that too.
Deleting your data
Email support.baseworth@gmail.com from the address you used and ask for deletion. We will delete your order record, the stored copy of your order and package, any estimate request or updates sign-up, and our copies of the emails we sent you. Records we are required to keep for tax or accounting purposes are the exception, and we will tell you if that applies.
Cookies and tracking
We do not use advertising cookies or third-party trackers. Fonts are loaded from Google Fonts, which means Google receives the request for the font file.
Security
Traffic to this site and the application is encrypted in transit. No system is perfectly secure, and you should not upload documents containing information you would not be willing to share with a prospective buyer — a CIM is written to be sent to strangers.