Privacy policy
This policy explains the information used to provide Baaito and the controls available to you and your organisation. Your organisation’s agreement and its own privacy notices may provide additional details.
Account and workspace information
Baaito processes your sign-in identity, profile, organisation membership and assigned roles. Workspace content includes conversations, documents, projects, uploaded sources, generation inputs and outputs, versions and audit records. Only upload information you are authorised to use.
Purposes of processing
Information is used to authenticate users, enforce access rules, prepare and revise documents, retain conversation context and versions, and support security and administration. Your organisation determines the purposes of the company information it enters into the workspace.
Organisations and access
Workspace access follows organisation membership and assigned permissions. Administrators manage invitations and roles. Audit records help administrators review relevant activity. Removing a membership ends that member’s access; it does not by itself delete the organisation’s documents.
AI providers and integrations
Relevant prompts and selected sources may be sent to the AI provider chosen by your organisation’s configuration. External integrations can receive data when an authorised action requires it. Provider processing, retention and location depend on the service and agreement in use; do not assume every deployment uses a private Azure environment.
Voice and microphone
Microphone input is used only when you activate a voice mode and the browser permits access. Transcribed speech can become conversation or document context. Reply text is sent to the configured speech provider for playback. Browser speech recognition may involve the browser vendor’s own service and privacy terms.
Cookies and browser storage
Baaito uses cookies and browser storage for sign-in, the selected public-page and workspace languages, theme and conversation preferences. Public-page language is independent of your account or organisation language. This notice does not claim that all browser storage is anonymous.
Retention and deletion
Conversations, documents, source records and versions remain subject to workspace deletion controls and your organisation’s arrangements. Deleting visible content does not necessarily remove security audit records or backup copies immediately. No universal retention deadline is promised here; ask your organisation administrator about applicable requirements.
Your rights and questions
Depending on applicable law, you may have rights to access, correct, erase or restrict personal data, to object to processing, and to contact a supervisory authority. For company content, contact your organisation administrator first. For a Baaito privacy enquiry, use the contact form linked below and describe your request without including sensitive source material.