Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The policy indicates a medium concern regarding the use of aggregated and/or de-identified data for marketing or analytics purposes.
95% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Not clearly stated
Critical issues and red flags that could lead to significant harm for users.
?
Not clearly stated
No cited risk flags — wording is unclear
No explicit risks such as account termination without refund, mandatory arbitration, or class-action waivers were found in the provided clauses.
Data Use & Sharing
1 finding
How your data is collected, processed, and shared with others.
Not clearly stated: The policy states it will never sell your personal information to third parties, and will not use your name or company in marketing statements without your permission. It also specifies that no human looks at your content except for limited purposes with your express permission, or when required for legal process. Furthermore, it states that products do not include built-in AI features that process your content and that content is not used to train AI models.
medium95% confidence
Aggregated and/or de-identified data may be used for any purpose, including marketing or analytics.
The company may aggregate and/or de-identify information collected through the services and use this data for any purpose, including marketing or analytics.
Why it matters: Aggregated and/or de-identified data, which may originate from your personal information, can be used for any purpose, including marketing or analytics.
We may aggregate and/or de-identify information collected through the services. We may use de-identified or aggregated data for any purpose, including marketing or analytics.
When we access or disclose your information, paragraph 7 · Citation strength: strong
Cancellation & Renewal
Not clearly stated
Terms related to account cancellation, data deletion post-cancellation, and automatic renewals.
?
Not clearly stated
No cited billing terms — wording is unclear
The provided clauses state that if an account is canceled, content will become inaccessible and purged within 60 days. There is no information regarding automatic renewals.
Gotchas
Not clearly stated
Potentially overlooked clauses that could disadvantage users.
?
Not clearly stated
No cited gotchas — wording is unclear
No 'gotchas' were explicitly found in the provided clauses. The policy clearly states that fulfillment of some data deletion requests may prevent use of services or result in account closure, but this is clearly disclosed. It also states that if cookies are turned off, apps may not work and other services may not function properly.
Protections
10 findings
Commitments and features that benefit users.
Not clearly stated: The policy outlines additional rights, such as the Right to Complain and the Right to Restrict Processing, and details how to exercise these rights and appeal denied requests. It also describes data encryption practices for data in transit and at rest.
Protection100% confidence
Commitment to not sell personal information to third parties.
The policy states that the company will never sell your personal information to third parties.
Why it helps: This commitment helps protect your personal information from being sold to third parties, reducing potential unwanted marketing or data exploitation.
We’ll never sell your personal information to third parties, and we won’t use your name or company in marketing statements without your permission either.
Changes and questions, paragraph 10 · Citation strength: strong
Protection100% confidence
Data deletion within 60 days upon account deletion.
If you delete your account, your content will be deleted within 60 days.
Why it helps: This ensures that your content is removed from the company's systems within a reasonable timeframe after you delete your account.
If you delete your account, we’ll delete the content within 60 days.
Content deleted from trash is purged within 90 days.
Any content trashed in your product accounts should be purged from all systems and logs within 90 days.
Why it helps: This provides a clear timeframe for the complete removal of trashed content from the company's systems.
Altogether, any content trashed in your product accounts should be purged from all of our systems and logs within 90 days.
How we secure your data, paragraph 4 · Citation strength: strong
Protection100% confidence
No use of user content to train AI models.
The company's products do not include built-in AI features that process user content, and user content is not used to train AI models.
Why it helps: This protects your content from being used for AI training purposes, addressing common privacy concerns related to artificial intelligence.
Our products don’t include built-in AI features that process your content, and we don’t use your content to train AI models. The AI providers we work with are also contractually prohibited from training their models on your content.
When we access or disclose your information, paragraph 14 · Citation strength: strong
Protection95% confidence
Users are notified before personal information transfer during mergers or acquisitions.
If the company is acquired or merges with another company, users will be notified before any personal information is transferred or becomes subject to a different privacy policy.
Why it helps: This ensures transparency and gives users advance notice about changes to how their personal information will be handled in the event of a company acquisition or merger.
Finally, if 37signals is acquired by or merges with another company — we don’t plan on that, but if it happens — we’ll notify you well before any of your personal information is transferred or becomes subject to a different privacy policy.
When we access or disclose your information, paragraph 12 · Citation strength: strong
Protection100% confidence
Right to Know what personal information is collected, used, shared, or sold.
You have the right to know what personal information is collected, used, shared, or sold.
Why it helps: This right provides transparency about the handling of your personal data.
Right to Know. You have the right to know what personal information is collected, used, shared or sold. We outline both the categories and specific bits of data we collect, as well as how they are used, in this privacy policy.
Your rights with respect to your information, paragraph 2 · Citation strength: strong
Protection100% confidence
Right to Access personal information and information about its handling.
You have the right to access the personal information collected about you and obtain information about its sharing, storage, security, and processing.
Why it helps: This right empowers you to review and understand how your personal information is managed.
Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.
Your rights with respect to your information, paragraph 3 · Citation strength: strong
Protection100% confidence
Right to Correction of personal information.
You have the right to request correction of your personal information.
Why it helps: This right allows you to ensure the accuracy of your personal data.
Right to Correction. You have the right to request correction of your personal information.
Your rights with respect to your information, paragraph 4 · Citation strength: strong
Protection100% confidence
Right to Portability of personal information.
You have the right to receive the personal information held about you and to transmit it to another party.
Why it helps: This right enables you to take your data with you and transfer it to other services.
Right to Portability. You have the right to receive the personal information we have about you and the right to transmit it to another party. If you want to export data from your accounts, you can do so directly by following these instructions for HEY , Basecamp 5 , Basecamp 2 , Basecamp Classic , Highrise , Campfire , and Backpack .
Your rights with respect to your information, paragraph 9 · Citation strength: strong
Protection95% confidence
Right to not Be Subject to Automated Decision-Making.
You have the right to object to and prevent any decision that could significantly affect you from being made solely based on automated processes, with some limitations.
Why it helps: This right provides a safeguard against potentially unfair or biased decisions made purely by automated systems.
Right to not Be Subject to Automated Decision-Making. You have the right to object to and prevent any decision that could have a legal or similarly significant effect on you from being made solely based on automated processes. This right is limited if the decision is necessary for performance of any contract between you and us, is allowed by applicable law, or is based on your explicit consent.
Your rights with respect to your information, paragraph 10 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.