Privacy policy

Last updated 26 July 2026 · Exiid Labs

Exiid Labs runs BaseCommerce. This page describes exactly what we store, why, and what you can ask us to do about it. It is deliberately specific — everything below reflects what the software actually records.

What we store

What we do not store

We never see or store your card details. Payments are processed by Stripe; your card data goes directly to them. We do not store your postal address, phone number, or any special category data. We do not use advertising or tracking cookies.

Where it lives

Our database is hosted in the United States. Email is sent via Resend. Payments are processed by Stripe. Files are served from Cloudflare R2. Where data leaves your country, transfers rely on our providers’ standard contractual clauses.

How long we keep it

Licence and activation records are kept for the life of the licence plus 7 years for accounting purposes. Ask us to delete your account and we will remove everything not required for tax records.

Your rights

You can ask for a copy of your data, correct it, delete it, or object to how we use it. Email support@basecommerce.io and we will respond within 30 days. If you are in the EU or UK and unhappy with our response, you may complain to your local data protection authority.

Cookies

We set one cookie, and only after you sign in to the licence portal or admin: a signed session cookie so we know it is you. It is strictly necessary, so there is no consent banner to click. No analytics, no third-party trackers.

Contact

Exiid Labs, registered addresssupport@basecommerce.io.