Contents
1. Scope
This Online Privacy Policy explains how BasinAgentic collects, uses, discloses, stores, and protects information when individuals visit our websites, create accounts, use the Client Portal, request reports, communicate with us, or otherwise interact with BasinAgentic services.
2. Information We Collect
We may collect information you provide directly, information generated through your use of the Services, information received from your organization, and information from third-party or public sources.
3. Contact and Account Information
We may collect names, business contact details, organization names, job titles, usernames, account identifiers, authentication information, and account preferences.
4. Transaction and Subscription Information
We may collect subscription plan information, invoices, billing status, report allowances, usage entitlements, payment-related metadata, and related commercial records.
Payment-card details may be processed by third-party payment providers rather than stored directly by BasinAgentic.
5. Technical and Usage Information
We may collect IP addresses, browser type, device type, operating system, referring URLs, session information, login timestamps, feature usage, page interactions, diagnostic information, and security logs.
6. Customer Energy and Subsurface Data
When customers use BasinAgentic workflows, we may process well coordinates, API or well identifiers, production data, injection data, seismicity data, formation information, field attributes, operating parameters, user-selected assumptions, uploaded files, and related subsurface or engineering information.
7. Cookies and Similar Technologies
We may use cookies, local storage, session technologies, and similar tools to support authentication, security, preferences, analytics, and website functionality.
Browser settings may allow users to restrict certain cookies, although doing so may affect functionality.
8. Location and Well Coordinates
BasinAgentic may process geographic coordinates entered by a user, including well latitude and longitude, to perform spatial analysis and generate location-specific intelligence.
We do not require precise personal-device geolocation for ordinary report generation unless a feature expressly requests it.
9. Legal Bases for Processing
Where required by applicable law, our legal bases may include performance of a contract, legitimate interests, compliance with legal obligations, protection of rights and security, and consent where consent is legally required.
10. How We Use Information
We may use information to provide and operate the Services; authenticate users; generate reports and forecasts; administer subscriptions; communicate with customers; provide support; secure accounts and infrastructure; monitor performance; detect fraud or misuse; comply with law; and improve our products and workflows.
11. AI and Automated Processing
BasinAgentic may use automated analytical workflows, machine learning, Transformer-based models, physics-informed models, optimization routines, and agentic AI systems to process energy and subsurface data and generate analytical outputs.
These outputs are intended to support, not replace, professional judgment.
12. Aggregated and De-Identified Information
We may aggregate or de-identify information so that it no longer reasonably identifies an individual or customer.
We may use such information for analytics, benchmarking, research, service improvement, and product development, subject to contractual restrictions.
13. Data Retention
We retain personal information and Customer Data for as long as reasonably necessary to provide the Services, satisfy contractual obligations, maintain business and security records, comply with legal requirements, resolve disputes, and enforce agreements.
Retention periods may vary by data type and customer arrangement.
14. Security
We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.
No security system is perfect, and we cannot guarantee absolute security.
15. How We Share Information
We may share information with service providers, hosting providers, analytics providers, professional advisers, payment processors, and other vendors that help us operate the Services, subject to appropriate contractual or legal safeguards.
16. Legal Disclosures
We may disclose information where required by law, subpoena, court order, governmental request, or other legal process, or where reasonably necessary to protect the rights, safety, security, or property of BasinAgentic, our customers, users, or others.
17. Corporate Transactions
Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction, subject to applicable law and confidentiality protections.
18. Third-Party and Public Data Sources
The Services may combine customer-supplied information with data from governmental, regulatory, public, commercial, or licensed sources.
This Privacy Policy does not control the independent privacy practices of third-party data providers.
19. International Data Transfers
Information may be processed in jurisdictions other than the jurisdiction where a user is located.
Where required, we use appropriate legal mechanisms or safeguards for international transfers.
20. Children's Privacy
The Services are intended for business and professional users and are not directed to children under 13.
We do not knowingly collect personal information from children in violation of applicable law.
21. Your Privacy Rights
Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, restriction, or objection concerning certain personal information, and to withdraw consent where processing is based on consent.
22. How to Exercise Privacy Rights
Privacy requests may be submitted using the contact information provided on the BasinAgentic website.
We may need to verify identity or authority before completing a request.
Authorized-agent requests may require additional verification.
23. U.S. State Privacy Disclosures
Residents of certain U.S. states may have additional rights under applicable state privacy laws.
These rights may include access, correction, deletion, portability, and the ability to opt out of certain processing activities where legally applicable.
24. California Privacy Disclosures
Where the California Consumer Privacy Act, as amended, applies, California residents may have rights regarding categories of personal information collected, sources, business purposes, categories of recipients, access, correction, deletion, and certain opt-out rights.
BasinAgentic does not sell personal information for money.
25. Sensitive Personal Information
BasinAgentic does not seek sensitive personal information unrelated to providing the Services.
Customers should avoid submitting unnecessary sensitive personal information through report inputs, support requests, or uploads.
26. Payment Information
Payment processing may be provided by third-party payment processors.
BasinAgentic may receive transaction status, billing contact information, invoice information, and limited payment metadata, but may not receive or store full payment-card credentials.
27. Confidential Business Information
Customer operational, engineering, and subsurface information may constitute confidential business information under customer agreements.
Such information is handled in accordance with applicable contractual confidentiality obligations in addition to this Privacy Policy.
28. Model Improvement and Service Development
Subject to applicable contracts, law, and customer settings, BasinAgentic may use service telemetry, de-identified data, aggregated patterns, and feedback to evaluate and improve system performance, workflows, interfaces, security, and analytical quality.
29. Production Intelligence Data
Production Intelligence may process well coordinates, formation information, historical oil, gas, water, or liquid production, analog-well attributes, geometry proxies, decline parameters, and forecast results, including P10, P50, and P90 ranges.
30. Induced Seismicity Intelligence Data
Induced Seismicity Intelligence may process earthquake catalogs, event times, locations, magnitudes, b-values, clustering metrics, temporal patterns, risk indicators, and other seismic or geospatial information used to generate risk forecasts and analytical reports.
31. SWD Injection Intelligence Data
SWD Injection Intelligence may process injection-well coordinates, injection volumes, rates, depth or formation attributes, operational limits, nearby seismicity, connectivity indicators, optimization scenarios, and other inputs used for risk-aware injection analysis.
32. Reports and Download Activity
We may maintain records of reports requested, generated, viewed, or downloaded, including report type, relevant well or location identifiers, timestamps, user account, status, and usage allowance information.
33. Communications
We may use contact information to respond to inquiries, provide support, deliver administrative notices, communicate about subscriptions, security, or service changes, and send other business communications permitted by law.
34. Marketing Communications
Where permitted by law, we may send product, event, or service information.
Recipients may unsubscribe from promotional emails using the instructions included in those messages.
Service-related or transactional communications may continue where necessary.
35. Do Not Track and Browser Signals
Some browsers offer “Do Not Track” or similar signals.
Because standards and legal requirements vary, our response to such signals may depend on applicable law and the technology available.
36. External Links
Our websites or Services may contain links to third-party websites or services.
BasinAgentic is not responsible for the privacy practices, security, or content of third-party services.
37. Business-to-Business Contacts
We may process professional contact information for customer, vendor, partner, academic, technical, and commercial relationships, including communications concerning proposals, demonstrations, subscriptions, support, and project collaboration.
38. Data Accuracy
Users are responsible for providing accurate account and business information and for keeping relevant contact and account information current.
Analytical results may be affected by incomplete or inaccurate input data.
39. Account Security
Users should protect passwords, use unique credentials, avoid sharing accounts, and promptly notify BasinAgentic of suspected unauthorized access or compromise.
40. Data Deletion and Account Closure
Subject to contractual, legal, security, and backup-retention requirements, we may delete or de-identify information after account closure or expiration of applicable retention periods.
Certain records may be retained where legally or operationally necessary.
41. Changes to this Privacy Policy
We may update this Online Privacy Policy periodically.
The effective date will be revised when changes are published.
Material changes may also be communicated through the website, Client Portal, or email where appropriate.
42. Contact Us
Questions, concerns, or privacy requests may be submitted through the contact information published on the BasinAgentic website or through the Client Portal.
Please include sufficient information for us to understand and respond to the request.
43. Effective Date
This Online Privacy Policy is effective as of September 30, 2026 .