Privacy policy

Last updated 26 October 2026

Baseline Technologies ApS ("Baseline", "we") provides software that helps businesses check that their locations follow their routines. This policy explains how we handle personal data.

Who is responsible

For data our customers' teams submit (photos, answers, names), the customer is the data controller and we act as data processor. For account and website data, we are the controller.

What we collect

• Account details: name, email, role, organisation and locations.
• Sign-in data when you use Google or Microsoft: name, email and profile picture.
• Evidence submitted in routines: photos, videos, voice notes, answers and timestamps.
• Usage and device data needed to run and secure the service.
• Billing details handled by our payment provider.

How we use it

To provide the service, review submissions (including automated photo comparison), send notifications and emails, handle billing, provide support and keep the service secure. We do not sell personal data or use it for advertising.

Sub-processors

Supabase (database and auth), Vercel (hosting), OpenRouter (AI processing), Resend (email), Stripe (payments) and Google Maps (addresses). Transfers outside the EU/EEA rely on appropriate safeguards such as Standard Contractual Clauses.

Retention

We keep data for as long as the customer's account is active or as agreed with the customer, then delete it unless the law requires otherwise.

Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability or object to processing. If your organisation uses Baseline, contact them first. You can also complain to Datatilsynet (the Danish Data Protection Agency).

Contact

Baseline Technologies ApS, CVR 45661431, Denmark. privacy@baseline.ai