This policy covers abovebaselinepro.com and the client portal at client.abovebaselinepro.com, both run by ABPRO_ (“we”, “us”).
What we collect
When you book your demo
Your name, company and work email. If you give them, also your role, a note, and answers about your business: when it was established, how many customers it adds, its recurring revenue, and its sales team and advertising figures. With each request we also record the country it came from, your browser type, and a one-way hashed form of your IP address, used only to limit repeat submissions.
When you use the client portal
Sign-in is handled by our authentication provider, which tells us your user ID, your email address and the organization you belong to. We log each sign-in, each failed sign-in and each page or report you open, with the time, IP address, country and browser. If you leave a note on a report, we store the note, your email address, where on the page you left it, and the ID of the analytics session it was written in.
Client data
Data a client provides for reporting, such as statements, billing, CRM and spend records, is processed under that client’s agreement with us, and that agreement governs it ahead of this policy. Each client’s data is held in its own database and is never pooled, benchmarked or shared with other clients.
When you browse
Our hosting provider processes standard request details (IP address, browser and the page requested) to deliver the site and protect it from abuse. The site uses no advertising cookies.
Analytics
We use PostHog to understand how the site and the portal are used. On the public site it records the pages you visit, the links and buttons you click, page performance and errors, and session recordings of how pages are used, with everything typed into forms masked. It also notes when a demo request or a site code is submitted, without recording the code. On the client portal it records the pages you open and where you click, with all page text and report data masked and no session recordings, linked to your user ID, email address and client site. PostHog receives your IP address and browser details with each request and uses them to estimate your approximate location.
How we use it
- To reply to demo requests, schedule demos and follow up about our services
- To provide, secure and support the client portal, and keep a record of who accessed what
- To run, maintain and improve the site and the service
- To meet legal obligations and enforce our Terms of Use
We don’t sell personal information, and we don’t use it for third-party advertising.
Cookies
The public site and the client portal both set one analytics cookie, which stores an identifier so PostHog can recognize repeat visits; PostHog also keeps it in your browser’s local storage (see Analytics). The client portal also uses two cookies that are strictly necessary to sign you in: a short-lived one during sign-in, and a session cookie that expires after eight hours. Our authentication provider sets its own cookies on its sign-in pages, and our hosting provider may set a security cookie to tell people from bots. You can block or clear cookies in your browser settings; the public site works without them.
Who we share it with
We share personal information only with service providers that help us run ABPRO_, under terms that limit what they can do with it:
- Cloudflare, for hosting, the database behind this site and email delivery
- Auth0, for client portal sign-in
- Snowflake, for the data warehouse behind client reporting
- Our email provider, which receives demo-request notifications
- PostHog, for analytics and session recordings on the public site, and analytics on the client portal
- Google Fonts, which receives your IP address when a page loads its fonts
We may also disclose information when the law requires it, to protect our rights or someone’s safety, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.
How long we keep it
- Demo requests: while we’re in conversation with you, and for our business records afterwards. Ask and we’ll delete yours.
- Portal access records: 400 days, then deleted automatically.
- Portal sign-in: the session cookie expires after eight hours.
- Client data: as set out in the client’s agreement.
- Analytics: events for up to seven years, and session recordings for up to five years.
Your choices
You can ask us to show you, correct or delete the personal information we hold about you, or to stop contacting you, by emailing privacy@abovebaselinepro.com. We’ll respond within 30 days, or sooner if the law where you live requires it. Depending on where you live, you may have further rights, such as objecting to or restricting some uses, or complaining to your local data-protection authority.
Security
Connections to the site and the portal are encrypted. Each client portfolio has its own database and its own sign-in, every portal access is logged, and IP addresses on demo requests are stored only as one-way hashes. No method of storage or transmission is completely secure, but we work to protect what you share with us.
Children
ABPRO_ is a business service. It isn’t directed at children, and we don’t knowingly collect information from anyone under 16.
Where information is processed
We’re based in the United States. Information is processed in the United States and wherever our service providers operate.
Changes to this policy
If we change this policy, we’ll post the new version here with a new date at the top. If a change materially affects information we already hold, we’ll tell affected clients directly.
Contact
Questions or requests about privacy: privacy@abovebaselinepro.com.