# Privacy (Summary)

{% hint style="info" %}
Operator and jurisdiction: BASIS is operated by BASIS DIGITAL INFRASTRUCTURE LTD, a Seychelles IBC (LEI: [254900IX2F2KCWNSSS64](https://lei.bloomberg.com/leis/view/254900IX2F2KCWNSSS64)).

Research Partner: Base58 Labs contributes execution research, systems modeling, and risk design.
{% endhint %}

This page summarizes privacy considerations for user onboarding and ongoing platform use. For the full privacy policy, refer to the official documents published by the operator.

***

## 1. Email-Based Login

BASIS uses email-based login for account access. Users should treat their email account as a critical security component.

We recommend:

* Enabling two-factor authentication (2FA) on your email account
* Using a strong, unique password
* Monitoring your inbox for account-related notices from <support@basis.pro>

{% hint style="warning" %}
If your email account is compromised, your BASIS account security may be affected. Secure your email provider first.
{% endhint %}

## 2. Authentication Model

BASIS uses MPC-based authentication through Privy to reduce single-secret risk. No single party, including BASIS, holds the complete private key to your wallet.

The key is split across multiple parties using Multi-Party Computation, which helps ensure that compromise of any single party does not by itself compromise access to funds.

This model supports:

* Reduced single-point-of-failure risk
* Deterministic access controls
* Operational resilience aligned with state machine risk controls

For additional security questions, contact <support@basis.pro>.

## 3. Data Collection and Minimization

BASIS applies data minimization principles and collects only information necessary for platform access, security, operations, compliance, and auditability.

| Data Type                     | Purpose                                     | Retention                     |
| ----------------------------- | ------------------------------------------- | ----------------------------- |
| Email Address                 | Account login, notifications, support       | Duration of account           |
| Wallet Addresses              | Deposit and withdrawal processing           | Duration of account + 5 years |
| Transaction History           | Reward calculation, audit trail, compliance | Duration of account + 7 years |
| IP Address                    | Security monitoring, fraud prevention       | 90 days (rolling)             |
| KYC Documents (if applicable) | Regulatory compliance, AML/CFT              | As required by law            |

{% hint style="info" %}
BASIS supports native asset funding only:

* BTC deposits use a BASIS-assigned unique deposit address
* ETH, SOL, and PAXG deposits use a connected Web3 wallet such as MetaMask
* USDT is used only as an internal display and accounting unit
  {% endhint %}

## 4. Third-Party Services

BASIS interacts with third parties such as exchanges, infrastructure providers, wallet services, and blockchain networks. These parties maintain their own privacy and data handling policies.

BASIS shares data with third parties only where necessary:

| Circumstance            | Description                                                                     |
| ----------------------- | ------------------------------------------------------------------------------- |
| Regulatory Requirements | Required by law or valid legal process                                          |
| Service Providers       | Infrastructure providers bound by applicable processing obligations             |
| Security Incidents      | Relevant authorities or investigators in the event of breach or suspected fraud |

User data is never sold to third parties for marketing or advertising purposes.

## 5. User Rights

Users may have the right to access, correct, delete, or export their personal data, subject to applicable law and regulatory retention obligations.

To exercise these rights, contact:

* <support@basis.pro> for general requests
* <legal@basis.pro> for privacy-related legal requests
* <compliance@basis.pro> for compliance-related requests

Requests are generally processed within 30 days unless a longer period is required by law or operational review.

## 6. Cookies and Tracking

The platform uses essential cookies only for:

* Session management
* Authentication continuity
* Security controls

BASIS does not use third-party advertising pixels or non-essential marketing trackers on core platform surfaces.

## 7. Operational Privacy Context

BASIS operates infrastructure designed for deterministic execution and controlled risk. Privacy controls are implemented alongside system integrity controls, including:

* Math-constrained reward accounting
* State machine-based operational controls
* Deterministic execution pathways
* Structured audit retention for compliance and dispute resolution

Research and execution systems are informed by work associated with Base58 Labs as a research partner, with a focus on structural alpha capture, precision execution, and robust infrastructure design.

***

For the full privacy policy, see: [Privacy Notice](/legal-and-corporate/privacy-notice.md)

For authentication and session security details, see: [Authentication & Security](/getting-started/authentication-and-security.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.basis.pro/reference/privacy-summary.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
