Privacy Policy

Last updated: 13 September 2026. This is an MVP policy, not legal advice.

AccessBase (“we”, “us”) is a SaaS product at accessbase.app. This page explains what we collect, why, and how to reach us. Questions: hello@accessbase.app.

What we collect

• Account. When you sign up we receive identity data from our auth provider (Clerk): typically name, email, and a user id. We store a matching user record in our database (Convex).
• Workspace data you enter. Apps, people, seats, access requests, subscriptions, expenses, files you upload, and similar records you or your teammates add.
• Billing. Subscription and plan status come from Clerk Billing. We do not store full card numbers.
• Cookies and session. Auth and session cookies so you stay signed in. We do not run a separate advertising pixel on these pages.

Who processes it

We use subprocessors to run the product: Clerk (sign-in and billing), Convex (database and file storage), and Vercel (hosting). If transactional email is enabled, that provider sends mail on our behalf. We do not sell your data.

Why we use it

To operate AccessBase: authenticate you, provide the workspace, apply plan limits, send product email you request (invites, reminders), and keep the service secure.

Retention and your choices

We keep account and workspace data while the workspace is active. Email hello@accessbase.app to ask for an export or deletion. Workspace admins can also edit or remove most records in the app.

Children

AccessBase is for business use. It is not directed at children under 16.

Changes

We will update this page if our practices change in a material way.

A lawyer should review this before you treat it as a compliance document (GDPR/CCPA roles, DPA, international transfers, subprocessors list, and retention schedule).