Privacy Policy

This Privacy Policy details how Wix.com Ltd., while operating the Base44-branded services (“Base44”), processes information relating to an identified or identifiable person (“Personal Information”) collected, through our website, platform, social channels, marketing efforts, partnerships, and similar means (“Services”), of our website visitors, Services users, prospects, candidates, or inquirers (“Users”).

We may update our privacy policy from time to time by posting the new privacy policy on this page and updating the “Last updated” date. We encourage you to visit this page regularly to check for any changes.

This privacy policy does not apply to any collection or processing of Personal Information by our Users or customers, as such processing is governed by the applicable data processing agreement executed between Base44 and its Users.

To provide the Services, we may collect Personal Information about our Users, either directly from our Users, through our Users’ use of the Services, or from other sources. Here are the types of Personal Information we collect about you:

Information you provide us. When you register for our Services, sign up for any of our events, subscribe to our blogs or newsletters, use any of our Services; and/or when you contact us directly by any communication channel, you may provide the following categories of Personal Information:

• Identity and contact information, such as your name, email address, phone number, and account identifiers, when you create an account or request information about the Services.
• Payment information, such as billing details and payment method information, when you purchase paid Services;
• Inputs and outputs, including prompts, instructions, content, or data you submit through chat-based interactions or applications created using the Services, as well as content, code, or other outputs generated in response. This includes third-party applications you choose to integrate with our Services. If you include Personal Information in your inputs, that information may appear in the generated outputs.
• Communication Information, including your name, contact information, and the contents of messages you send to us through email, support channels, or other communications features.

Information we collect when you use the Services. When you access or use the Services, we automatically collect certain information about how the Services are accessed and used, including the following categories of Personal Information:

• Usage information. We collect information about your interactions with the Services, including your use of chat-based features, application generation activities, prompts, instructions, content or data submitted through applications created using the Services, pages viewed, features used, dates and times of access, and similar usage activity. This may also include aggregated information such as browsing and click-stream activity, session heatmaps, and scroll activity.
• Device and connection information. We collect technical information about the device and connection you use to access the Services, such as your IP address, device type, operating system, browser type, screen resolution, language and keyboard settings, internet service provider, referring or exit pages, and time zone and date/time stamps.
• Log and performance information. We collect information about how the Services perform when you use them, including log files and, where applicable, information related to errors, crashes, or performance issues, such as the time an error occurred and the feature being used.
• Cookies and similar technologies. We and our service providers use cookies and similar technologies to operate the Services, analyze usage, enhance performance and security, improve our advertisement campaigns, and personalize user experience. You can learn more about how we use cookies and similar technologies and how you can exercise control over them in our Cookie Policy.

Information we collect from other sources. We may receive Personal Information about you from third-party sources, such as i) security providers, fraud detection and prevention providers for example to help us screen out Users associated with fraud, ii) social media platforms, when you log-in or sign-up using your social media account, we may receive Personal Information from that service (e.g., your username, basic profile Personal Information) and in some cases, we may collect Personal Information from lead enhancement companies which help us to improve our service offering; iii) advertising and marketing partners in order to monitor, manage and measure our advertisement campaigns. For Users under an enterprise account, we may receive information about you from your employer or affiliates for the purpose of creating the account.

The provision of certain categories of Personal Information is necessary for us to provide the Services or enter into and perform a contract with you. For example, identity and contact information is required to create and administer an account, and payment information is required to process paid Services. If you choose not to provide such required information, we may be unable to create or maintain your account, provide access to certain features of the Services, process payments, or otherwise perform our contractual obligations.

Other Personal Information is provided voluntarily, such as optional communications or information included in inputs you choose to submit through the Services. Choosing not to provide such information will not affect your ability to use the core functionality of the Services, but may limit certain features, personalization, or support options.

• To provide and operate the Services;
• To further develop, customize, expand, and improve our Services, including machine learning models, based on Users’ common preferences, experiences and difficulties.

This may include using or developing machine learning technologies, including through third-party service providers, to enable and support the Services, such as allowing Users to create, host, and maintain web applications through chat-based interactions, generate content or code, analyze usage patterns, and improve the functionality, performance, and security of the Services. When using these technologies, Base44 processes information submitted through the Services (including prompts, instructions, and other usage data) and information generated in response. If Users include Personal Information in such inputs, that information may be processed in order to provide the Services. We sometimes use automated systems (including but not limited to artificial intelligence and machine learning tools and models) to help us provide and maintain our services, prevent fraud and spam, and keep our platform and services secure. In most cases, we either have a human being involved in the final decision or the decision does not have a significant impact. However, in other cases, these systems automatically make decisions that may result in suspending or blocking an account; refusing to provide certain services; or adjusting which services are offered to you. If we make a decision solely through an automated process that has a significant legal or similar effect on you, you have the right to challenge the decision, express your point of view, and ask for a human to review it.

• To provide our Users with ongoing customer assistance and technical support;
• To be able to contact our Users with general or personalized service-related notices and promotional messages;
• To help us to update, expand and analyze our records to identify new customers;
• To facilitate, sponsor, and offer certain contests, events, and promotions, determine participants’ eligibility, monitor performance, contact winners, and grant prizes and benefits;
• To analyze our performance and marketing activities;
• To create aggregated statistical data and other aggregated and/or inferred information, which we or our business partners may use to provide and improve our respective services;
• To provide you with professional assistance;
• To enhance our data security and fraud prevention capabilities; and
• To comply with any applicable laws and regulations.

Depending on the type of use as detailed below, Base44 processes Personal Information based on the following legal basis:

• Our use of your Personal Information is necessary to perform a contract or to take steps to enter into a contract with you (e.g. to provide you with our platform or to provide you with our customer assistance and technical support);
• Our use of your Personal Information is necessary to comply with a relevant legal or regulatory obligation that we have; or
• Our use of your Personal Information is necessary to support legitimate interests and business purposes (for example, to maintain and improve our Services and the effectiveness of identifying technical issues), provided it is conducted in a way that is proportionate and that respects your privacy rights.

Where applicable, we may use consent as the legal basis for the processing for specific interaction on the platform or for the provision of the Services in certain geographic locations. When consent is the legal basis, you will be notified either through the privacy policy or the user interface that your agreement is required, and in these cases, you may withdraw your consent at any time by contacting us as described below. Withdrawing the consent, may result in revocation of access to any feature that requires your consent.

Third-party service providers: We have partnered with a number of selected service providers, whose services and solutions complement, facilitate and enhance our own. These include hosting and server co-location services, communications and content delivery networks (CDNs), data and cyber security services, billing and payment processing services, domain name registrars, fraud detection and prevention services, web analytics, e-mail distribution and monitoring services, session recording and remote access services, performance measurement, data optimization and marketing services, content providers, and our legal and financial advisors (collectively, “Third Party Service Providers”).

Third-party integrations enabled at your direction: The Services allow you to connect, enable, or integrate third-party services, applications, or tools, at your discretion. When you choose to activate a third-party integration, we may share certain data, including Personal Information, with the relevant third party as necessary to enable and operate the integration you have requested. Any processing of Personal Information by third-parties in connection to these integrations shall be made in accordance with their applicable privacy policy, and Base44 shall not be responsible for any privacy or data protection practices of third-party integrations.

The use of raw and derived information received from Google Workspace APIs and YouTube APIs Services will adhere to the Google User Data Policy, including the Limited Use requirements, and the YouTube Developer Policies, respectively.

Where you connect a third-party account, such as YouTube, to an application you build on the Platform, you may disconnect that account at any time from within the application. You may also revoke our access to your Google account at any time through your Google Account settings, at https://myaccount.google.com/connections?filters=3,4&hl=en. If you wish to request deletion of Personal Information we hold about you in connection with such an account, please contact us at: compliance@base44.com.

Law enforcement, and legal requests or duties: We may disclose or otherwise allow access to any categories of your Personal Information described in this Privacy Policy pursuant to a legal request, such as a subpoena, legal proceedings, search warrant or court order, or in compliance with applicable laws, if we have a good faith belief that the law requires us to do so, with or without notice to you.

Protecting rights and safety: We may share any categories of your Personal Information described in this Privacy Policy if we believe in good faith that this will help protect the rights, property or personal safety, of us, any of our Users, or any member of the general public, with or without notice to you.

Affiliated companies: We share your Personal Information internally within our family of companies (our controlling company, sister companies, or subsidiaries, all in the group under Wix.com Ltd.), for the purposes described in this Privacy Policy.

In connection with a change in corporate control: In addition, should Base44 or any of its affiliates undergo any change in control, including by means of merger, acquisition or purchase of substantially all of its assets, your Personal Information may be shared with the parties involved in such event.

Upon your further direction: Base44 Services enables you to engage and procure various third-party services, products and tools for enhancing your own web applications, or other benefits. If you choose to engage with such external services: (i) they may have access to and process Personal Information of you, or information about other people you have stored on our Services; and (ii) any engagement is not controlled by Base44, and we are not responsible for actions or policies of such external services. We encourage you to review any privacy policy accompanying such integration and ask for any clarifications you may need before deciding to install and/or use their services.

Each of our Users on our platform is able to collect information, including Personal Information, about their own application’s Users (“Application Visitors”). For such processing, Base44 acts as a data processor on your behalf, and you act as the data controller. All collection, processing or usage of Application Visitors shall be in accordance with our Data Processing Addendum, which governs our respective roles and obligations.

As an application owner, you are responsible for the security, integrity, and authorized usage of Personal Information you collect through your application. It may involve obtaining consents or permissions to collect data, ensuring that all data is collected lawfully, and providing any required data to the Application Visitors.

If you are an Application Visitor and would like to make any requests or queries regarding your Personal Information, please contact the application owner directly. If you cannot reach them, you may contact us, and we will attempt to forward your request to the application owner.

Promotional messages: We may use your Personal Information to send you promotional content and messages by e-mail, text messages, notifications within our platform, marketing calls and similar forms of communication from Base44 and its affiliated companies, through such means.

If you do not wish to receive such promotional messages or calls, you may notify us at any time or follow the “unsubscribe” or STOP instructions contained in the promotional communications you receive.

Service and billing messages: We may also contact you with important information regarding our Services, or your use thereof. For example, we may send you a notice (through any of the means available to us) if a certain Service is temporarily suspended for maintenance; reply to your support ticket or e-mail; send you reminders or warnings regarding upcoming or late payments for your current or upcoming subscriptions; forward abuse complaints regarding your application; or notify you of material changes in our Services.

It is important that you are always able to receive such messages. For this reason, you are unable to opt-out of receiving such messages unless you no longer have an active account.

Because Base44 operates globally, it may be necessary for us to transfer information, including Personal Information, to other countries than the country in which the information was collected. In these instances, we will transfer your data in accordance with the provisions of the applicable privacy legislation meant to safeguard the processing of your Personal Information and in accordance with the applicable transfer mechanisms.

Transfer outside of the European Union: User’s personal information is controlled by Wix.com Ltd. in Israel, which the European Commission considers as a country offering an adequate level of protection for the Personal Information of E.U. Member State residents (see here).

When we transfer such data outside of the European Union, we may use one of the following mechanisms: (i) adequacy decision by the European Union; (ii) the relevant Standard Contractual Clauses, a set of contractual obligations pre-approved by the European Parliament, and the ICO’s International Data Transfer Addendum to the E.U., or (iii) to entities participating with the Data Privacy Framework program as applicable to data transfers to the United States, or (iv) any other legally recognized transfer mechanism in the applicable jurisdiction.

Wix.com Ltd., which operates the Base44-branded services, participates in the EU–US Data Privacy Framework and its UK and Swiss variants. Its certification can be verified on the Data Privacy Framework Program’s official website here.

You have the right to request access to, receive a copy of, update, amend or delete, port certain Personal Information to another service, restrict, or object to certain uses of your Personal Information (for example, for direct marketing purposes).

In order to exercise your rights, kindly contact us via this email address compliance@base44.com. Before fulfilling your request, we may ask you for additional information in order to confirm your identity and for security purposes. Base44 will not charge you more if you exercise any of these rights and will continue to provide you with the same level of service, but we reserve the right to charge a fee if permitted by law (e.g. if your request is unfounded or excessive).

You have the right to file a complaint with your local supervisory authority for data protection (but we still recommend that you contact us first).

Where Base44 processes your Personal Information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. Please note that withdrawing consent may result in the unavailability of certain features or functionalities of the Services that rely on your consent.

Please note that exercising your right to delete your Personal Information, will result in permanently deleting your account, and may result in loss of data which we are unable to restore in the future.

This section of our Privacy Policy details what Personal Information we collect about you under U.S. applicable privacy laws and regulations, the sources of the Personal Information, the purposes of use and disclosure, and the categories of third parties that may receive that Personal Information. The information in this section applies to you if you are a U.S. resident in a state with an applicable privacy law or regulation.

Please read this section in combination with the other sections of this Privacy Policy for a complete understanding of how we collect, use, and disclose your Personal Information.

Here is a brief overview of your rights:

• Right to Delete Your Information: Upon your request, we will delete the Personal Information we have collected from you, subject to certain legally permissible exceptions.
• Right to Know and Access Your Personal Information: You have the right to ask us to confirm whether we process your Personal Information and for a copy of the Personal Information we maintain about you.
• Right to Correct Inaccurate Personal Information: You have the right to request that we correct inaccurate Personal Information about you. Some Personal Information can be directly changed or corrected by you through our apps and websites.
• Right to Opt Out of the Sale of Your Personal Information: You can tell us not to “sell” your personal information according to applicable law, even though we don’t technically sell your information in the traditional sense. We may share certain categories of Personal Information with our Third Party Service Providers. However, the current regulation uses a very broad (and somewhat scary) definition of “Sale”.
• Right to Limit Use of Your Personal Information for Targeted Advertising (defined in California as “Sharing”): You can ask us not to use or disclose your personal information for targeted advertising. Just visit our Do Not Sell My Personal Information page. You also can use the Global Privacy Control to signal your opt-out preference. To learn more about the GPC please visit https://globalprivacycontrol.org

In order to exercise your rights, kindly contact us via this email address compliance@base44.com. Before fulfilling your request, we may ask you for additional information in order to confirm your identity and for security purposes.

Right to Appeal: if we deny your privacy rights request, you have the right to appeal our decision. To appeal, contact us using the methods above. We will respond to your appeal within the timeframe required by applicable law. If you are not satisfied with the outcome of your appeal, you may contact your state Attorney General to submit a complaint.

In the last 12 months, we collected the following categories of Personal Information (the same categories we collect from all Users globally):

• Personal and online identifiers
• Commercial and transactional information
• Record-keeping information
• Internet or other electronic network activity information
• Non-precise Geolocation data (IP address, only)
• Audio, electronic, visual, or similar information
• Inferences drawn from the above information

Base44 has appointed a data protection officer, tasked with protecting your data. For any questions, concerns or complaints, you can contact our data protection officer at compliance@base44.com or by mail to 5 Yunitzman St., Tel-Aviv, Israel.

Additionally, Base44 has appointed representatives in the European Union and in the United Kingdom, and you may contact us by sending a letter to:

• Pursuant to Article 27 GDPR - Wix Online Platforms Limited, 1 Grant’s Row, Dublin 2 D02HX96, Ireland; or
• Pursuant to Article 27 UK GDPR - Wix.Com (UK) Limited, Tower Bridge House, St Katharine’s Way, London E1W 1DD, United Kingdom.