This Privacy Policy describes how Baseline DCF (“we”, “us”, or “Baseline DCF”) collects, uses, and discloses information when you visit baselinedcf.com or use Baseline DCF, our desktop modeling software (collectively, the “Services”). We have designed Baseline DCF so that as little personal information as possible flows through our systems.
1. Information we collect
Information you provide
Account creation, sign-in, and the 30-day free trial are handled by our authentication provider, Clerk, Inc., at account.baselinedcf.com. Clerk collects the identifiers you supply during sign-up (typically name, email address, and password) and is the controller of that account data. When you purchase a subscription, you provide billing and payment information directly to our payment processor, Stripe, Inc. We never see, store, or process your full card number or banking credentials.
Information collected automatically
When you visit baselinedcf.com, our hosting provider (Vercel, Inc.) may automatically collect standard web server logs, including your IP address, browser type, referring page, and pages visited.
We also use Google Analytics 4(loaded through Google Tag Manager) to measure aggregate site usage — page views, session duration, referrers, and general geographic region of visitors. Google Analytics places first-party cookies (such as _ga) in your browser to distinguish unique visitors and sessions. We have configured Google Analytics with IP anonymization where available and do not use it for advertising retargeting. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by blocking cookies in your browser.
We also use PostHog for product analytics, click heatmaps, and anonymized session replays of the marketing site. PostHog records interactions (clicks, scrolls, form input events, and pageviews) that help us understand how visitors navigate the site. Text you type into any form field is masked by default.
We do not use marketing cookies, advertising pixels, or cross-site tracking beyond the analytics described above.
Information the software does NOT collect
Baseline DCF is a locally installed desktop application. It does not phone home. Your models, assumptions, cash flows, and any data you enter into the application remain on your computer and are never transmitted to us.
2. How we use information
- To provide, operate, and maintain the Services.
- To send account-related messages, product updates, and customer support responses.
- To process payments and issue receipts via Stripe.
- To detect, prevent, and respond to fraud and abuse.
- To comply with our legal obligations.
3. Third parties that process your information
We use a small number of carefully chosen service providers. Each is contractually required to protect your information.
- Clerk, Inc. — authentication and account management at account.baselinedcf.com. Stores your account identifiers (name, email, hashed password) and session data. See Clerk’s privacy policy.
- Stripe, Inc.— payment processing. Stripe is the controller of your billing and card data. See Stripe’s privacy policy.
- Vercel, Inc. — web hosting for baselinedcf.com; standard web server logs (IP, user agent, requested URL).
- Google LLC — Google Analytics 4 and Google Tag Manager for aggregate site analytics.
- PostHog Inc. — product analytics, click heatmaps, and session replays that help us understand which parts of the site work and which do not. Collects click, scroll, form-interaction, and pageview events. See PostHog’s privacy policy.
4. Data Processing Agreement
For business customers in any jurisdiction (including the EU, UK, Switzerland, and California) who require a data processing agreement, our standard Data Processing Agreement applies and is incorporated by reference into the Software License Agreement.
5. Legal bases for processing (EEA / UK visitors)
If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases: (a) your consent when you create an account or subscribe; (b) the performance of a contract when you purchase a subscription; (c) our legitimate interests in operating and securing the Services; and (d) compliance with legal obligations.
6. Your rights
California residents (CCPA/CPRA)
California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined by California law.
EEA / UK residents (GDPR / UK GDPR)
You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal information. You may also lodge a complaint with your local supervisory authority.
To exercise any of these rights, email us at info@baselinedcf.com.
7. International transfers
We are based in the United States. Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.
8. Data retention
Clerk retains your account identifiers for as long as your Baseline DCF account is active; you can delete your account from account.baselinedcf.com at any time. Stripe retains billing records as required by applicable financial regulations. Server logs are retained for up to 30 days.
9. Security
We use industry-standard administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is 100% secure.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “Effective date” above will always reflect the latest version. Material changes will be communicated to active subscribers.
11. Contact us
Baseline DCF
Email: info@baselinedcf.com