Privacy Policy
Last updated: October 4, 2026
At Baci, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Information We Collect
We collect information that you provide directly to us when you register for an account, create a store, make a purchase, or communicate with us. This may include your name, email address, business information, and payment details.
How We Use Your Information
- To provide and maintain our Service
- To notify you about changes to our Service
- To allow you to participate in interactive features
- To provide customer support
- To gather analysis or valuable information so that we can improve our Service
Data Security
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Subscriptions and Payments
Baci offers auto-renewable subscription plans through Apple's App Store. When you subscribe:
- Payment will be charged to your Apple ID account at confirmation of purchase
- Subscription automatically renews unless cancelled at least 24 hours before the end of the current period
- Your account will be charged for renewal within 24 hours prior to the end of the current period
- You can manage and cancel your subscriptions by going to your Apple ID account settings after purchase
- Any unused portion of a free trial period will be forfeited when you purchase a subscription
Subscription data and purchase history are processed by Apple and RevenueCat. We receive confirmation of your subscription status but do not have access to your payment card details.
Third-Party Services
We use the following third-party services that may collect information:
- Apple App Store - For app distribution and in-app purchases
- RevenueCat - For subscription management and analytics
- Supabase - For authentication and data storage
- Payment Processors - Paystack, Korapay for transaction processing
Merchant AI connectors
A merchant owner can connect an AI service such as Muse to read selected information from that merchant's Baci store. Each connection has its own revocable credential and may be limited to selected branches. The available connector tools read orders, inventory levels, and summary analytics; they cannot create or change orders, products, inventory, payments, refunds, or store settings. Baci applies the merchant and branch permissions attached to each connection to every request.
Baci stores a one-way hash of each connector credential, not the raw credential. Connector audit records contain the grant reference, requested tool path, response status, and latency; they do not contain request or response payloads, credentials, or returned store records. Active grant metadata remains while the connection is active. After a grant is revoked or expires, its metadata is retained for one year; a daily purge removes it once it is older than that period. Audit records are retained for one year from the request and removed by the same daily purge once older than that period. Disconnecting a connection blocks further access immediately; its inactive metadata remains subject to that retention period.
Information returned to an AI service is processed under that service's own terms and privacy policy. Baci does not control how the service separately retains information in conversations or its systems. Review the service's privacy information and use its account controls for requests to delete information held there. For questions about Baci connector records, contact privacy@usebaci.com.
Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@usebaci.com.