Privacy Policy
Version 2026-08-25
This policy explains what information Acrebase collects, the purposes for which it is used, and the circumstances in which it is disclosed. It applies to the Service in each of the forms in which we make it available.
Acrebase, Inc., a Delaware corporation ("Acrebase", "we", "us", "our"), is the controller of Account Data. For Your Content, you are generally the controller and we act as your processor. Terms defined in our Terms of Service — including the Service, Your Content, Usage Records and Your Data — have the same meaning here.
1. Information we collect
We collect three categories of information:
- Account Data — the information required to create and administer an account, including your name and contact details, your organisation and role, and your subscription status.
- Your Content — the material you or your organisation submits to the Service or creates within it, together with the output the Service derives from it. This includes media the Service captures while you are using a feature that records.
- Usage Records — information about how the Service is operated and used, including the actions taken by users and the technical particulars of each request.
2. How we use it
We use that information to:
- provide, operate and support the Service;
- secure the Service, investigate incidents and prevent abuse;
- evaluate and improve the performance and accuracy of the Service;
- communicate with you about your account, billing, security and material changes to the Service; and
- comply with our legal obligations.
3. What we do not do
We do not train machine-learning models on Your Data. It is not used as training data to fit or adjust the weights of any model, whether ours, a provider's or a third party's, and we do not fine-tune an existing model on it. Nor is Your Content used to produce output for another customer.
We do not share Your Data with third parties, other than the providers described in section 4. We do not sell or rent it, and we do not disclose it to anyone for their own purposes. The same applies to anonymised and de-identified copies.
We do not sell personal data, and we do not use Your Content for advertising.
4. Disclosure
We rely on a small number of providers to operate the Service: cloud infrastructure, providers of the AI models behind the analysis and drafting features, a payment processor, and any integration you choose to connect. Each acts on our instructions only, obtains no rights in Your Data, and may neither use it for its own purposes nor train on it. Data is disclosed to a provider only so far as a feature you have used requires.
We prefer providers that retain nothing. Where a provider retains a copy for a limited period — to detect abuse of its own platform, or because it is required to keep records — we hold that period to the shortest available, and we pass on deletion requests for action as soon as the provider's process allows.
Two further circumstances apply:
- Legal process. Where we are legally compelled to disclose information we will do so, limited to what is required, and we will notify you in advance wherever the law permits.
- Change of control. If Acrebase is acquired or merged, Your Data may transfer with the business. The commitments in this policy bind any successor; if that changes, you will be notified before it takes effect and may delete Your Data first.
Data is processed in the United States. Acrebase is currently offered to customers in the United States; should we begin serving customers in the United Kingdom or EEA, we will put the required transfer safeguards in place and update this policy beforehand.
5. Retention and deletion
We will delete Your Data on request. You may delete content directly in the product, which also removes what the Service derived from it. For anything you cannot reach yourself, including your entire workspace, write to privacy@acrebase.com and we will carry it out.
We otherwise retain Your Content until you delete it, Usage Records for a limited period, and account records for the life of the account together with the post-termination period stated in the Terms of Service. Backups are held on a rolling short-term cycle and overwritten in turn, so deleted material may persist in a backup until that cycle completes. We may also retain records we are legally required to keep. Material retained for either reason is not used for any other purpose.
6. Security
We maintain administrative, technical and organisational measures appropriate to the sensitivity of the material the Service holds, including encryption in transit and at rest, controls that separate each customer's workspace, and restrictions on internal access. No system is perfectly secure. If a breach affects Your Data we will notify you without undue delay and, where required, the relevant regulator.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to complain to a supervisory authority. You can download documents and delete content directly in the product; for anything further, write to privacy@acrebase.com and we will respond within 30 days.
If you use Acrebase as a member of a customer organisation, that organisation controls the workspace; please direct access and deletion requests to it in the first instance.
8. Cookies
We set a single essential cookie to keep you signed in. We do not use advertising cookies or third-party analytics trackers in the Service.
9. Children
Acrebase is a business product and is not directed at children under 16.
10. Changes
We may update this policy. Any update will be posted here and, where the change is material, notified to you by email before it takes effect.