Privacy Policy

1. Information We Collect

• Account information: name, email address, and company name provided during registration.
• Usage data: pages visited, download history, and IP addresses collected through normal server operations.
• Local Engine: We do not collect any data from the Baseline Authority Local Engine. It runs entirely on your system with no phone-home capability.

2. How We Use Your Information

• Provide and maintain the service.
• Process downloads and manage your account.
• Send service-related communications.
• Improve our products.

3. Data Storage and Security

• Account data is stored on secured servers.
• Passwords are hashed using industry-standard algorithms (bcrypt).
• All data in transit is protected with SSL/TLS encryption.
• We do not sell your personal information to third parties.

4. Local Engine Data

The Baseline Authority Local Engine operates entirely offline.

• No audit results, compliance data, system configurations, or STIG findings are transmitted to our servers or any third party.
• All local data remains on the machine where the engine is installed.
• We have no access to your local compliance data.

5. Cookies

• We use session cookies for authentication.
• We do not use third-party tracking cookies.

6. Third-Party Services

• We use Resend for transactional emails (e.g., account verification, password resets).
• We do not integrate with advertising or analytics platforms.

7. Data Retention

• Account data is retained while your account is active.
• Download logs are retained for licensing and support purposes.
• You may request account deletion by contacting us at the address below.

8. Your Rights

• Access, correct, or delete your personal data.
• Opt out of non-essential communications.
• Request a data export.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

10. Contact

If you have questions about this Privacy Policy, contact us at info@baselineauthority.com.