Privacy Policy

At Wirebasket LLC (“Company”, “We”, “Us”, “Our”, etc.), We strive to be clear about what we’re doing with your data, whether that’s how we store it, where we get it from, what we need it for, and more. Privacy is about freedom of identity, and that’s why we want you (“You”, “Your”, etc.) to feel like you are making a clear decision if you consent to our privacy policy.

This privacy policy applies to our data collection practices when you visit or interact with https://wirebasket.ai/ (“Website”) or any of our properties, such as those managed through Amazon, Apps created by the Company, Google, or Apple services. It covers Wirebasket LLC and its employees’ handling of your data collected under the terms of this policy.

If we get data from or about you from a different source, then it is not governed by this privacy policy unless we explicitly state otherwise. One example of a different source would be if you walked into our office and left your business card — we’d have information about you, but it wouldn’t be covered by this privacy policy. Another example would be if you had given your business card to your neighbor, and your neighbor gave us your business card because they thought it would be helpful — that also wouldn’t be covered by this privacy policy. This policy also doesn’t apply to any links to other websites. Links to other websites are governed by the privacy policies of those specific websites.

For the purposes of the General Data Protection Regulation (known as the “GDPR”), Wirebasket LLC, registered agent located at 5900 Balcones Drive, Suite 100, Austin, TX 78731, is a “Data Controller.” This means that we direct the flow of collected personal information, as opposed to being a “Data Processor,” which is a person or company that does things with and to the information.

We do our best to remind you that you are opting-in to specific types of data gathering and use when you are interacting with our site. This includes when we display a button requiring users to accept the Company terms before they can submit information.

Technology isn't perfect though, so those reminders might not always be there. That's why we ask you to please remember as you use the site, that when you provide any information to us, that information will be stored and used by us as described in this policy. Some information that we gather isn't as obvious though, like, for example, when we collect information using cookies. That's why it's important to remember that using our website means that you are opting-in to our use of cookies and other automatic tracking technologies. To learn more about what we collect, how we collect it, and why, keep reading!

We use this section to explain our data collection practices to you. We combine the data we have about you together. For example, we might combine information about how long you were on our website for with your username. Any information we combine will be treated as if it is all equally sensitive information, and we only collect information from you that allows us to make the site run smoothly and provide you with our services.

Personally Identifiable Information

Personally identifiable information is information that can identify you as a person — simple, right? Well personally identifiable information can also be a combination of information that reveals who you are.

For example, if I know your birthday is on July 4, 1976, I can’t necessarily figure out who you are. However, if I know your birthday, where you went to college, whether you’re married or not, and maybe your zip code, then I probably know enough to figure out who you are if I really wanted to. So personally identifiable information can be either something very specific about you, like your full name, or it can be a combination of general details that let me narrow down the possibilities until I figure out that it can only be you.

What

We purposefully seek the following personally identifiable information from you in a variety of circumstances:

• Full name,
• Email address,
• Login credentials,
• Device IDs and IP addresses, and
• Cookies.

When

We may seek personally identifiable information from you using a number of methods, including: registration forms, contact forms, cookies, communication methods, such as chat, email, or phone widgets, Google sign-in and Google Calendar sync (with the user's OAuth consent); forwarded emails and uploaded documents read by AI; family group invitations where a user enters another person's name and email; payment through Stripe; and error and performance monitoring.

Why

We may use personally identifiable information in the following ways: improving the website or services, delivering the product or service requested by users, sending product updates or marketing emails about the services, or understanding who is using the website or services.

We store any personally identifiable information that we’ve collected for the time period in which your account is active or a family group that you belong to during your time on the app is active. All data retention after deletion of the family group or your account follows the processes set forth under the “Security” Section of this Privacy Policy.

Non-Identifiable Personal Information

Non-identifiable personal information is information that’s technically about you, but cannot be linked directly to you without being combined with personal information. For example, if I know that you use Google Chrome when you visit my site, I will never be able to figure out who you are without combining it with personally identifiable information — even if I know what search terms you typed in, what kind of computer you are using, and how long you use the site for every time you visit, I will not be able to figure out that the user is you without personally identifiable information.

What

We purposefully seek the following non-identifiable personal information from you in a variety of circumstances:

• Device IDs and IP addresses, and
• Cookies.

When

We may request non-identifiable personal information from you in a variety of ways, including: registration forms, contact forms, cookies, communication methods, such as chat, email, or phone widgets, Google sign-in and Google Calendar sync (with the user's OAuth consent); forwarded emails and uploaded documents read by AI; family group invitations where a user enters another person's name and email; payment through Stripe; error and performance monitoring.

Why

We may use non-identifiable personal information in the following ways: improving the website or services, delivering the product or service requested by users, understanding who is using the website or services.

We store any non-identifiable personal information that we’ve collected for the time period in which your account is active or a family group that you belong to during your time on the app is active. All data retention after deletion of the family group or your account follows the processes set forth under the “Security” Section of this Privacy Policy.

Sensitive Information

Sensitive information is the type of information that you might not necessarily want people to know, or at least, you would want to control who knows the information and how they come across it. An example of sensitive information could be your credit score or your social security number. As you can imagine, sensitive information should only be requested by a company if they really need the information to provide you with services.

We collect some sensitive information from you for various reasons and at various times, including

• Credit card information (limited to the name of the cardholder),
• Financial information,
• Payments processed by Stripe, and
• Stripe customer ID and subscription status.

We do not store credit card numbers.

Users may provide free-form content such as calendar events, forwarded emails, uploaded documents, chats, and notes that include children's names, ages, and schools, medical appointments, and addresses. Submission of this information is up to user discretion and AI processes it to provide the service.

When we collect sensitive information, it's so we can improve the website or services, deliver the product or service requested by users, and understand who is using the website or services.

We collect that information registration forms, contact forms, cookies, communication methods, such as chat, email, or phone widgets, Google sign-in and Google Calendar sync (with the user's OAuth consent); Apple sign-in, forwarded emails and uploaded documents read by AI; family group invitations where a user enters another person's name and email; payment through Stripe; and error and performance monitoring data. We retain your sensitive information the time period in which your account is active or a family group that you belong to during your time on the app is active. All data retention after deletion of the family group or your account follows the processes set forth under the “Security” Section of this Privacy Policy.

We do not use data collected from Google user data or data from related services to develop, improve, or train generalized AI or ML models.

About Automated Collection

Automated technologies help us make our website run more smoothly. Through the use of automated means, we are able to see which of our pages are most popular, how users find our website, what causes errors in the website, and a lot of other details which help us make the website the best it can be.

We may use a number of automation technologies including cookies or others as they become available or necessary.

Cookies

Cookies are small text files that a website sends to your computer to try to make your experience online a smoother one. Cookies often contain very little data, such as a User ID or the last time you logged in to a particular site. When your computer connects to the website, the website might read the cookie to figure out whether you’re a returning customer, whether you’ve seen the most recent privacy policy update, or whether you need to be automatically logged out. As you can probably tell from those examples, cookies serve a variety of necessary functions. However, if you’d prefer, you can disable cookies. You can visit www.allaboutcookies.org for information about deleting and blocking cookies on your browser.

Our automated technologies are not supported by the use of third-party cookie technologies, ad trackers, or analytics trackers.

Please note that disabling and deleting cookies might make this website (and others) work improperly.

Web Beacons

Web Beacons are tiny files that load when a user completes an action like visiting a particular webpage, or opening an email. Because the tiny file is loaded from a server, and the server can see that your computer is trying to open the page or email, the server can deduce that you have visited the page or viewed the email. We do not use Web Beacons or other types of open tracking technologies.

“Do Not Track”

“Do Not Track” signals are a brand new feature that some web browsers allow their users to send. The idea behind the “Do Not Track” signals is that all of the websites of various companies will come to an agreement about standardizing a way to not track people who visit their websites. That way, people who turn on “Do Not Track” will always know what parts of their privacy are protected without having to read every single privacy policy.

There is not yet an industry consensus on how to handle “Do Not Track” signals, so our website is not yet set up to handle them. In the future, this section will discuss how the “Do Not Track” signals are honored.

Most websites who collect user data have relationships with other companies or people that result in user data being shared with those companies or people. This section explains how those relationships work, and what our relationships with others look like when it comes to your data.

When we share your data with third parties, we restrict them from using that data other than to help us perform our services or obligations through this website.

Processors Who Help Us Run Our Site

Most businesses need others’ help to run properly (imagine using eBay without PayPal!). When a business hires another business or uses another business’s services, that other business is sometimes called a third party processor, or a subprocessor.

We try to keep this section up-to-date with who our subprocessors are, and what kinds of information they collect.

As of the date that these terms were last updated, our subprocessors include AWS (including AWS Bedrock), Google, Expo, Apple, Sentry, and Stripe.

Our subprocessors have access to a variety of information, insofar as their access to the data is necessary to help us provide services to you.

Third Parties We Share Information With

Businesses often have complicated relationships with other businesses. Some companies are owned by other companies, they work with companies that are owned by the same company, they engage in partnerships, and find any variety of ways to work together to bring services and products to the public.

We may currently share information with some third parties. Before we get into that, you should know that if we ever sell the company, part of the company, or any of the assets of the company, our users' data would probably be shared with the purchasing company or person. Be aware that sharing of your data might have to happen in that kind of circumstance.

Processors (those people who help companies run their sites) sometimes need information to be supplied directly by us. Often, processors collect user information directly from users, but at least in some cases, we're sending information to our processors to help us run the site.

We may disclose aggregated or anonymous information about you. Aggregated information is a giant pool of information where your individual information is sort of lost in the shuffle - no one would be able to tell what information is related to you, and in some cases, your personal information isn't included at all (such as if your data is used to find an average on a particular data point).

Specifically, we may share your information with Amazon Web Services (AWS), AWS Bedrock, Google, Expo, Apple, Sentry, and Stripe.

We may always share data, if our legal counsel believes it is required of us, in order to comply with any court order, law, or legal process, including to respond to any government or regulatory request. We may also share data, at our discretion, if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the company, our customers, or others. We may also share data to protect ours or other people's rights, or in connection with a sale, merger, etc. of the company, or sharing that is necessary for us to run our site or services.

Third Parties Who Share Information With Us

Some companies get information from third parties for a variety of reasons. One example might be if a website is trying to create a more personalized web browsing experience for their users. If a website knows the kind of content you like, and they’re able to share that information with another website, then that other website can also make sure to only show you content that you like. However, there can be any number of reasons why a website needs information from third parties, like for credit checks, allowing users to login through social media, or other reasons.

We receive the following information from third parties:

• Stripe: your customer ID, subscription status, and cardholder information limited to the name of the cardholder for verification purposes.
• Google: your name, email and photo at sign-in, and your calendar events once you connect Google Calendar.
• Apple: your name and email at sign-in (which can be an Apple "hide my email" relay address).
• Family group creators or invitations: the name and email of the invitee.

We may also receive information from items that you upload including forwarded emails and other uploads. This and the above listed information is only used to provide our services to you and members of your family group.

Our use of Google data follows Google's API Services User Data Policy, including its Limited Use Requirements. You can view the language of that policy at https://developers.google.com/terms/api-services-user-data-policy.

Our Website is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website or through any of its features, register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us using the contact information listed at the bottom of this policy. California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see the section on California-based rights.

We make efforts to provide security to our user data. It’s impossible to guarantee that data security will be 100% effective, that’s why you hear about hacks or viruses all the time now. Small companies, large companies, and even governments are sometimes the victims of cyber attacks. We take steps to protect your data by encrypting data at rest, encrypting data in transit, granting each of our technologies only the minimum required access to perform necessary functions, restricting access to user data to the Company employees or contractors who need access to perform their job duties, taking regular backups of our data, only using tools from providers who we determine to have adequate security practices relevant to market position, regularly updating all of our systems and services, monitoring website and services activity for anomalous behaviors, using data storage and service providers who have adequate physical security measures, Sign-in through Google, automated security review of every code change before release, account deletion (requires typing a confirmation phrase), and per-recipient caps on email sending.

We reserve the right to delete accounts and family groups that have remained inactive for 90 days. This deletion will include all data associated with those accounts or family groups except for any data that we are required to preserve by law or in accordance with criminal investigations. We will not delete accounts and family groups tied to active subscriptions for account or group inactivity.

Additionally, whenever a user requests deletion of their data, we take the following actions:

• When a user requests deletion of their account and not any connected family groups, we immediately and permanently delete the user account, data, and stored files and we immediately forfeit our access to Google or Apple authentication.
• Any member of the family group may request deletion of the group and group data. In addition to the steps outlined in member account deletion, this request permanently deletes the family group, all of its data and files and every associated member account, thereby signing out all members. We do not notify other members of this deletion. We maintain encrypted database backups for up to 7 days, server logs for up to 30 days, and usage cost records with no links to the user or family group.

Any user may request deletion of their data through the app or by emailing us at support@wirebasket.ai. You may also request deletion at wirebasket.ai/delete-account.

We reserve the right to deny user deletion requests in accordance with our obligations under relevant state or federal law or court order as they exist at the time of the request. Please see our Terms of Service at Section 7.2 for further information on our child data and consent standards and Section 8.3 for further information about mandatory reporting.

In the event that we receive notifications of violations under these aforementioned Sections, we reserve the right to tag or label your account or family group, thereby pausing all deletion requests until such a time as our duties are carried out to the fullest extent necessary under applicable state or federal law or court order. This reservation is not to be interpreted as creating any obligations to preserve account data greater than or exceeding those created by applicable law, regulation, or court order.

You may opt in or out of product update and marketing emails at any time through our website or in applicable email notifications. Links included in these email communications include virtual tokens that allow us to track which email is associated with visits to our website. When you unsubscribe from any of these email lists, we retain a hashed form of your address - even after you delete your account - to ensure that we follow your preferences and halt email notifications belonging to either of these lists.

This section describes your choices and rights regarding how we handle your data. In order to protect user data from theft or misuse, we may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

You won’t have to pay anything to exercise your rights, the only exceptions being if your request is clearly unfounded, repetitive or excessive. In those situations we might also refuse to comply with your request.

We try to respond to all legitimate requests under these rights within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated as to when we expect to have the request completed.

GDPR

The General Data Protection Regulation is a law passed in the European Union that grants EU internet users a variety of rights regarding their data. Those rights include

• The right to request access to their data;
• The right to request correction of their data;
• The right to request erasure of their data;
• The right to object to the processing of their data;
• The right to request their data in a machine readable format;
• The right to be free of decisions affecting their rights based solely on automated processes; and
• The right to withdraw their consent to undue data processing.

Legal Bases for Processing

The GDPR also requires that companies list their “Legal Basis” for each type of processing. Depending on the circumstances, our legal bases include:

• User consent;
• Necessity for the performance of our obligations to the user; and
• Necessity for the purposes of our justified legitimate interests.

For more information on how legal bases work, please visit https://gdpr-info.eu/art-6-gdpr/.

California Rights

The rights listed in this section are specific to California residents.

California's "Shine the Light" law allows California users of our website to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We attempt to be transparent about where your data is going. If you would like to request more information or clarification about whether your data is only going to third parties as described in this privacy policy, please contact us using your preferred method in the “Contact Us” section at the end of this policy.

California users are also allowed to opt out of any sales of their personal information that may occur. Users who opt out may opt back in at any time.

California users may request that we delete their personal information, but those requests have some exceptions. One example of an exception would be if you paid for one of our products or services, and then requested that your data be deleted before we could deliver the product or service you paid for.

The internet is a complex, interwoven, global structure, so your data may move across the planet. Be aware that this includes areas outside of the European Economic Area. By continuing to use this website, you are telling us that you consent to these transfers, even if the countries your data travels to don’t have the same level of privacy protection as your home country.

This policy may be updated from time to time. When updates are made, we will let you know via notifications by email or other direct communication

The date that the most recent updates went into effect is listed at the beginning of this policy.

If you ever have any questions, concerns, or comments about this policy or about exercising the options made available to you in this privacy policy, please contact us through your preferred method as listed below.

Wirebasket LLC
Attn: Daniel (Dan) Aument
5900 Balcones Drive, Suite 100, Austin, TX 78731
support@wirebasket.ai