Base015.

Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how Base015 LLC ("Base015," "we," "us") collects, uses, and protects information when you use our website, booking pages, client portal, and services (the "Services").

We do not sell your personal information.

1. Information we collect

Information you give us

  • Contact details: first and last name, email, phone number, company name.
  • Website contact form: your name, email, phone number, company, the service you need, and your message, plus the page you sent it from and any campaign tags (UTM tags) in the link that brought you there. If you agree to receive text messages, we record that consent, the exact consent wording you agreed to, and when.
  • Booking details: package, Ad Batches, shoot location and area, preferred shoot dates, and notes about what you'd like filmed.
  • Agreement details: your typed legal name as your signature, the date and time you signed, and a record of the exact agreement text you signed.
  • Project information: brand assets, files, and links you share, feedback, messages, and files we deliver to you.

Information collected automatically

  • Booking progress. If you start a booking and don't finish, we save what you've entered so you can pick up where you left off. A booking you started but never signed is deleted after 60 days of inactivity. If it reached the contact step, we may keep your contact details and booking choices as a sales lead so we can follow up (see section 4). Signed bookings are kept as business records.
  • Security data. We use a bot-protection check (Cloudflare Turnstile) when you sign. When you sign an agreement, we record your IP address and browser details as part of the signature record. Our bot-protection provider (Cloudflare) also receives your IP address. To prevent abuse of the booking page and the contact form, we store only a one-way hashed version of your IP.
  • Account and activity logs. Sign-ins, signed agreements, payments, and project changes are logged for security and record-keeping.
  • Cookies. The portal uses cookies needed for it to work: keeping you signed in, remembering an unfinished booking on this device for up to 7 days, and a short-lived cookie (1 hour) that remembers where to send you after you use a sign-in link. We don't use advertising or analytics cookies on the portal.
  • Analytics. We use Vercel Web Analytics on our website and portal to count page views, and Vercel Speed Insights to measure how fast pages load. Both are privacy-friendly: they use no cookies, and we remove personal identifiers (such as project, payment, and quote IDs) from page addresses before they're sent.
  • Push notifications. If you turn on notifications for a device, we store that device's push subscription (an endpoint address and keys from your browser) and its browser type (for example, "iPhone · Safari"), so we can deliver notifications and you can tell your devices apart. Turn them off at any time in Account → App & notifications or in your browser's settings. Signing out also turns them off on that device.
  • Do Not Track. We don't track you across other websites, so our Services respond the same way whether or not your browser sends a Do Not Track signal.

Payment information

Payments are handled by Stripe. When you pay by bank (ACH) or card, you enter those details with Stripe, not with us. We receive payment status and limited details (such as payment type and last four digits), never full account or card numbers.

2. How we use your information

  • To book, schedule, and deliver your project.
  • To prepare, record, and store your signed agreement.
  • To process payments and send receipts, invoices, and reminders.
  • To give you access to your portal and your files.
  • To answer messages from our website contact form and follow up on them, including using AI to summarize them, spot spam, and draft a reply that our team reviews and sends personally.
  • To keep you updated on your project and, only with your permission, to show our work: using AI to draft monthly updates and case studies that our team reviews, edits, and sends or publishes personally.
  • To send notifications to the devices where you've turned them on.
  • To understand, in aggregate, how our website and portal are used.
  • To follow up on a booking: if you sign an agreement but don't complete payment, we'll send a reminder email. We don't email you about bookings you started but didn't sign — we may follow up personally.
  • To keep the Services secure and prevent fraud and spam.
  • To meet legal, tax, and accounting requirements.

3. Who we share it with

We share information only with service providers and team members who help us deliver the Services, and only what they need:

  • Stripe — payment processing.
  • Supabase — database, file storage, and sign-in.
  • Vercel — website and portal hosting, and Vercel Web Analytics.
  • Sentry — error monitoring; receives technical error details, never your payment details.
  • Resend — emails such as sign-in links, receipts, and project updates.
  • Cloudflare — bot protection.
  • Dropbox — storage for files you upload to us.
  • Google — calendar entries for confirmed shoots, which include your name or company, the shoot location, and the on-site contact; and sign-in with Google, if you choose it.
  • Anthropic — AI processing of project information (such as your onboarding answers, brand kit, and the public text of your website) to help our team draft creative briefs and video ideas; of messages sent through our website contact form (your name, company, the domain of your email address, the service you picked, your message, and the page you sent it from) to help our team sort enquiries, spot spam, and draft a reply; and of your project's records (such as the titles and dates of the work we deliver and the comments you leave in the portal) to help our team draft monthly project updates and case studies. Our team reviews and edits every draft and sends any reply or update personally; nothing is sent to you automatically, and we don't publish a case study that names your business, quotes you, or shows your videos without your permission.
  • Push notification services run by your browser's maker (Apple, Google, or Mozilla), which deliver phone and desktop notifications if you turn them on.
  • Our scheduling provider — if you book a call.
  • Team members and subcontractors working on your project, such as editors and camera operators, who are bound by confidentiality.

We may also disclose information if required by law or to protect our rights.

4. How long we keep it

  • Unsigned bookings: the booking is deleted after 60 days of inactivity, but if it reached the contact step, your contact details and booking choices may be kept as a sales lead. Signed bookings are kept as business records.
  • Sales leads (contact form messages and unfinished bookings): kept while we follow up. Lost leads are deleted after 24 months without activity, together with their messages and our notes.
  • Push subscriptions: deleted when you turn notifications off, sign out on that device, or the subscription stops working.
  • Signed agreements, payment records, and project records: kept as long as needed for business, tax, and legal purposes.
  • Project files: kept for a limited time after delivery, as described in your Agreement.

5. Security

We use encrypted connections (HTTPS), access controls that keep each client's information separate, a one-way hash of your IP for abuse prevention, and limited admin access. No system is 100% secure, but we work to protect your information.

6. Your choices and rights

You can ask us to access, correct, or delete your personal information, and you can opt out of marketing messages at any time. Some records, like signed agreements and payment records, must be kept for legal and tax reasons even after a deletion request.

To make a request, email hello@base015.com.

7. Messaging

We'll email you about your booking, payments, deliveries, and account. These operational messages are part of providing the Services. Marketing messages include a way to opt out. If we text you about scheduling or your project, reply STOP to opt out or HELP for help. Message and data rates may apply. We don't sell or share your phone number with third-party marketers.

8. Children

The Services are for businesses and aren't directed to anyone under 13. We don't knowingly collect information from children.

9. Changes

We may update this policy. The current version is always posted here with its date.

10. Contact

Base015 · hello@base015.com · base015.com