Privacy Policy

Last Updated: July 8, 2026

Basecraft, Inc. ("us", "we", or "our") operates the Sonoran application. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service. The Service is intended for users located in the United States, and this Privacy Policy is written to comply with applicable U.S. law.

1. Information We Collect

To provide a functional project management and budgeting platform, we collect:

• Account Information: Email address, name, and login credentials when you register (identifiers).
• User Data: The content, to-dos, and financial line items you voluntarily enter into your Spaces (user-provided content, which may include financial information you choose to input).
• Billing Information: If you subscribe to a paid tier, your payment processing is handled by a secure third-party payment processor (e.g., Stripe). Basecraft, Inc. does not store your full credit card details (commercial information).
• Usage Data: Information on how the Service is accessed and used (e.g., device type, browser, IP address, and platform interactions) collected via cookies or analytics tools to improve the user experience (internet or other electronic network activity information).

2. How We Use Your Information

We use your data strictly to:

• Provide, maintain, and monitor the performance of Sonoran;
• Manage your account and process subscription billings;
• Respond to customer support requests;
• Send critical system updates, technical notices, or billing alerts;
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues;
• Comply with legal obligations and enforce our Terms of Service.

3. Cookies and Analytics

We use cookies and similar technologies that are essential to operate the Service (such as keeping you logged in) and analytics tools that help us understand how the Service is used so we can improve it. We do not use third-party advertising cookies, and we do not sell or share your personal information for cross-context behavioral advertising. Most browsers allow you to control or delete cookies through their settings; disabling essential cookies may prevent parts of the Service from functioning.

4. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information or the data inside your Spaces to third parties. We only share information in the following circumstances:

• Service Providers: With trusted third-party services necessary to run the application, including cloud infrastructure and database hosting providers, payment processing gateways, transactional email delivery services, and analytics providers, each of which is permitted to use your information only to provide services to us.
• Legal Requirements: When we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Basecraft, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our assets, in which case your information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy of which you will be notified.

Visibility Within Shared Spaces: Sonoran allows users to collaborate by sharing Spaces. If you accept an invitation to join a Space, or if you invite another user to join yours, your account information (such as name and email address) and any data or financial tracking you input will be visible to the other members of that Space. Basecraft, Inc. is not responsible for any exposure, misuse, or unauthorized distribution of personal or sensitive data that occurs because you chose to participate in or invite others into a shared Space.

5. Where Your Data Is Stored

Your information is stored and processed in the United States by us and our service providers.

6. Data Retention and Security

We retain your information for as long as your account is active or as needed to provide you with the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. If you delete your account, your personal information and User Content will be permanently deleted from our active systems within thirty (30) days and from our backups within sixty (60) days, except to the extent retention is required by law. Once permanently deleted, this information cannot be recovered.

We use industry-standard security measures, including encryption in transit, to protect your data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and any applicable regulators as required by applicable law.

7. Children's Privacy

The Service is not directed to individuals under the age of eighteen (18), and our Terms of Service prohibit anyone under 18 from creating an account. We do not knowingly collect personal information from children under thirteen (13). If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@sonoran.app.

8. Your Privacy Rights

We extend the following rights to all users in the United States, regardless of the state in which you reside:

• Access: The right to request a copy of the personal information we hold about you and information about how we use it.
• Correction: The right to request that we correct inaccurate personal information.
• Deletion: The right to request deletion of your personal information, subject to legal retention requirements.
• Portability: The right to request an export of your User Content in a commonly used format.

California Residents: In addition to the rights above, California residents have rights under the California Consumer Privacy Act (CCPA), as amended, including the right to know the categories of personal information we collect (described in Section 1), the purposes for which we use it (Section 2), and the categories of third parties with whom we share it (Section 4); the right to opt out of the sale or sharing of personal information (we do not sell or share personal information as those terms are defined under the CCPA); and the right not to receive discriminatory treatment for exercising your privacy rights.

You may exercise any of these rights through your account dashboard or by contacting us at support@sonoran.app. We will verify your identity before fulfilling a request (for example, by confirming control of the email address associated with your account) and will respond within forty-five (45) days, with a possible forty-five (45) day extension where reasonably necessary. You may designate an authorized agent to make a request on your behalf; we may require proof of the agent's authorization and verification of your identity.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last Updated" date above. If we make material changes, we will notify you by email or through the Service before the changes take effect. Your continued use of the Service after the effective date of an updated Privacy Policy constitutes acknowledgment of the changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@sonoran.app