Privacy Policy

This policy explains how Bakken Basewiser (“Basewiser”, “we”, “us”), org. no. 937 473 710, Norway, handles personal data. It covers the basewiser.com website and its subdomains, messages you send us, buying a plan, and the little that the portal's setup sends us. We are the controller for this data.

The portal's data stays with you

The portal runs in your own Microsoft Azure subscription. What it reads in your tenant and your customers' tenants (users, sign-ins, policies, findings, licenses and backups) is stored there and nowhere else. We do not receive or store that data, and we have no access to it. The portal sends us no usage data and none of its findings.

Your organisation is the controller for that data, and we are not your data processor. If you ever want us to look at your deployment for support, we agree with you in writing how that is done before we do it.

What we collect

Messages you send us

When you use the contact form, the demo form or the design-partner application, or email us, we receive your name, work email, company and what you write. For a demo or an application, we also receive how many customer tenants you manage, and for an application, whether you can join feedback sessions. We use it to answer you, arrange the demo and consider your application.

Buying a plan

Payments are handled by Stripe. When you buy a plan, we receive the details you enter at checkout (such as your name, email and billing address), the plan, your organisation's Entra tenant ID and an identifier for your deployment, so the plan can be matched to it. Card details go to Stripe only; we never see them.

Setting up the portal

During setup, the portal sends us your organisation's Entra tenant ID and primary domain once, as a record of the installation. If you choose a basewiser.com address for your portal, setup also sends the name you chose and your Azure host names, so the DNS records can be created. These identify your organisation, not a person.

Visiting the website

The site uses Vercel Web Analytics to count visits: the page, the page you came from, your country, and your browser, operating system and device type. It also counts a few things done on a page, such as opening the demo or sending a form, as plain counts with nothing about you in them. It sets no cookies, does not store your IP address and does not follow you to other sites. Like any web host, Vercel processes your IP address to deliver the site and protect it from abuse.

The open demo at demo.basewiser.com needs no sign-up, and nothing you do there is stored.

What we do not do

• The site sets no cookies, so there is no cookie banner.
• No advertising, and no tracking across other sites.
• We do not sell personal data.
• No automated decisions or profiling.

Legal bases

• Legitimate interests: answering messages, running and protecting the website, counting visits, and keeping a record of installations.
• Contract: billing for and supporting the plan you buy.
• Legal obligation: keeping accounting records.

Who processes data for us

• Vercel: hosts the website and counts visits.
• Brevo: delivers messages from the website's forms to our inbox.
• Microsoft: our email (Microsoft 365), and the Azure service that receives the install notice.
• Stripe: payments and invoices.
• Cloudflare: DNS for basewiser.com, and hosting of the demo and the setup page.

The same list is kept on the Compliance page. We may also disclose data where the law requires it.

Transfers outside the EEA

Some of these providers are based in the United States. Where data leaves the EEA, the transfer relies on an adequacy decision, such as the EU-US Data Privacy Framework, or on the EU Standard Contractual Clauses.

How long we keep it

• Messages: as long as needed to answer you and follow up, then deleted.
• Billing records: five years after the end of the financial year, as Norwegian accounting law requires.
• Installation records: while we offer the portal to you.

Your rights

You can ask for a copy of your personal data, have it corrected or deleted, object to or restrict how we use it, and ask for it in a portable format. Email privacy@basewiser.com. You can also complain to your data protection authority. In Norway, that is Datatilsynet.

Security

We protect personal data with appropriate technical and organisational measures, and we will tell you and the authorities about a breach where the law requires it.

Children

The website and the portal are for businesses. We do not knowingly collect data from anyone under 16.

Changes to this policy

When this policy changes, the new version is posted here with a new date at the top.

Contact

Questions about this policy or your data? Email privacy@basewiser.com, or use the contact form. Basewiser is Bakken Basewiser, org. no. 937 473 710, Norway.