Loading…
Bastro operates the data platform at bastro.ai. You upload calling lists to us so we can check them — which means this document matters more than most privacy policies. It states what we collect, why we collect it, who touches it, how long we keep it, and how to make us delete it.
"Bastro," "we," and "us" mean the operator of the services at bastro.ai: the marketing site, the customer application, and the scrub and leads-marketplace services behind it. This policy covers all of them. Where you upload lists containing other people's phone numbers, you are the controller of that data and we process it for you — the data processing addendum at /legal/dpa governs that relationship in detail.
We collect four categories of data, and nothing exotic:
Account data — name, email address, company, phone number, and role, provided when you create an account.
Uploaded lists — the files you submit for scrub jobs, including the phone numbers and any columns your files carry.
Job results — per-number verdicts, flagged and clean output files, job metadata (row counts, scopes, timestamps), and your credit ledger.
Operational data — IP addresses, access timestamps, and security logs; payment metadata from our payment processor (we never store card numbers); and support correspondence.
We use data to run the jobs you initiate, deliver lead orders, keep your credit wallet accurate, secure the platform against fraud and abuse, meet legal obligations, and send service email about your jobs and account.
Three things we do not do: we do not sell your uploaded lists or job results; we do not use them to train models; and we do not reuse scrub verdicts across customers — verdicts are stored only as your job's report.
Two categories of processor touch your data, each bound by contract to process it only on our instructions:
Cloud hosting and storage providers — the infrastructure the platform and your files run on.
Scrub data vendors — at job time only, the phone numbers in your list are sent server-side to the vendor backing each scope you selected. Vendors receive the numbers and nothing else: no names, no emails, no other columns.
Our payment processor handles purchases directly; card details go to them, not to us.
Uploaded files and job results are your audit record, so we keep them until you say otherwise:
Closing your account starts deletion of your account data, uploaded lists, and job results; deletion completes within 30 days, except billing records we are required to retain.
You can access, export, correct, or delete your data at any time. Most of it you can handle yourself in the dashboard — download job results and delete jobs. For anything else, or to exercise rights under the privacy law of your state, email privacy@bastro.ai. We verify the request and respond within 30 days.
This policy is effective 2026-07-18. If we change it materially, we email account holders before the change takes effect and update the effective date above. The current version always lives at bastro.ai/legal/privacy.