Last updated: October 24, 2026
This policy explains what Basil Design Company LLC (“we”) collects when you use Sextant Web, and why.
We keep your name, email address, sign-in sessions and, if you sign in with Google, your Google account ID and profile picture. We use them to sign you in and to send you sign-in links and invites.
Stripe processes payments. We keep the billing profile you enter (name, email, address, tax ID) and a card label such as “VISA ···· 4242”. We never see or store full card numbers.
The analytics on your sites records page views, events and, when you turn them on, session replays and heatmaps. It does not use cookies to identify visitors. Replays mask form fields, and stricter masking is available. Replays are kept for 30 days unless you save them. You control this data, and we process it on your behalf.
When you connect Search Console, we store an access token to read your sites’ search data, with read-only scope. You can disconnect at any time. Our use of data from Google APIs follows the Google API Services User Data Policy, including its Limited Use rules.
Vercel and Neon (the app and its database), Railway (analytics), Cloudflare (SEO tools), DataForSEO and OpenRouter (paid SEO and AI lookups that you run), Resend (email) and Stripe (payments). Each one processes data only to provide its part of the service.
You can change or delete your profile, delete sites, and delete your account in the app. To ask for a copy of your data or for other help, email hello@basildesign.co.
We encrypt all traffic, store API keys and sign-in link tokens only as hashes, encrypt Google access tokens, and limit access to the people who need it.
Basil Design Company LLC · 148 Elcho Ave, Crested Butte, CO 81224, USA · hello@basildesign.co