Last updated: 11 September 2026
These Terms of Service (âTermsâ) govern access to the Basestack hosted service at https://www.basestack.co, including the Feature Flags and Forms products, related websites, APIs, and documentation (together, the âServiceâ).
Basestack is operated from Portugal. Basestack is primarily business and professional software for developers, teams, and organisations. If you use the Service as a consumer, nothing in these Terms limits rights that cannot be excluded under the law that applies to you.
By creating an account, signing in, adding billing details, or using the Service, you agree to these Terms. If you use the Service for a company or other organisation, you confirm that you have authority to bind that organisation, and âyouâ means that organisation.
Basestack provides developer tools. The production products are currently Feature Flags and Forms. Future products, beta features, or preview features may be added, changed, or removed over time. Product documentation is available at docs.basestack.co
These Terms apply to the hosted Service. Basestack software, documentation, names, logos, and underlying technology are proprietary and may not be copied, modified, distributed, reverse-engineered, or used to operate a separate deployment except under a written agreement with Basestack.
Custom self-hosted or private deployments are available only under a separate written agreement. Those deployments are governed by that agreement unless it says these Terms also apply.
Basestack provides the Service. Paid features are sold through Polar, which acts as our merchant of record and the seller of record for your purchase. This means your payment transaction is a contract with Polar, and Polar handles checkout, payment collection, invoices, applicable taxes, refunds, and the billing portal on our behalf. Your purchase is also subject to Polar's checkout terms, while these Terms continue to govern your use of the Service itself.
Consumer right of withdrawal. If you are a consumer in the European Union, the United Kingdom, or another jurisdiction that grants a statutory right of withdrawal, you normally have 14 days to withdraw from a distance purchase of digital services. Because the Service is made available to you immediately, at checkout you may be asked to expressly request that we begin providing the Service during the withdrawal period and to acknowledge that you lose the right of withdrawal once the Service has been fully performed. Where you have given that consent and the Service has been fully performed, the statutory withdrawal right no longer applies. Nothing in these Terms removes any mandatory consumer right, including any statutory right of withdrawal that applies to you.
âCustomer Dataâ means data you or your users submit to the Service, including project and flag configurations, identity traits sent for flag evaluation, form submissions, uploaded files, integration credentials, and related metadata. You retain all rights, title, and interest in Customer Data, and Basestack does not claim any ownership rights in Customer Data. You grant Basestack the limited licence needed to host, copy, transmit, display, secure, and process Customer Data to provide, maintain, protect, and improve the Service.
Our processing of personal data is described in the Privacy Policy and, where we act as your processor, the Data Processing Addendum.
You are responsible for your use of the Service and for the people whose data you collect or evaluate through Forms and Feature Flags. You must:
Your use of the Service is subject to the Acceptable Use Policy. A breach of the AUP is a material breach of these Terms.
Forms can accept uploaded files where file uploads are enabled. The current default limits are 5 files per submission and 1 MB per file. Files are stored with the object-storage sub-processor listed on the Sub-processors page and are made available through short-lived presigned URLs.
Basestack does not currently perform virus or malware scanning on uploaded files. Customers are responsible for scanning files before opening them outside the Service. Basestack may, but is not obliged to, scan uploaded files for malware or abuse at any time. If a form has retention disabled, submissions and uploaded files are not stored.
You may connect the Service to third-party services such as Google Sheets. Those services are not part of Basestack and are governed by their own terms and policies. Enabling an integration instructs Basestack to share the relevant Customer Data with that integration on your behalf.
API keys are issued for use within your account. We may apply rate limits, usage limits, and fair-use thresholds to protect the Service. You may not resell, share, or expose API keys outside your organisation or use them to bypass plan limits or access controls.
Basestack may be accessed worldwide, but it is not offered where prohibited by applicable sanctions, export controls, embargoes, or other laws. You must not use the Service if you are located in, or ordinarily resident in, a restricted territory, are subject to sanctions, or intend to use the Service for a prohibited end use.
Features labelled beta, preview, early access, or similar are provided as-is, may change or be removed at any time, and may not be covered by service commitments.
Basestack retains all rights in the Service, documentation, software, names, logos, trademarks, and underlying technology. No licence is granted except the limited right to access and use the Service under these Terms. Suggestions you provide are non-confidential and may be used without obligation to you.
Documentation, examples, blog posts, pricing pages, and marketing materials are provided for general information and may not always reflect every product detail, limitation, or edge case. External links and third-party websites are not part of the Service, are governed by their own terms and policies, and are used at your own risk.
You may stop using the Service at any time. You can delete your projects, flags, forms, submissions, and uploaded files using the in-product controls, and you can request deletion of your account by contacting [email protected]. We may suspend or terminate access if you materially breach these Terms, fail to pay, create security or legal risk, or if required by law. For high-severity abuse, we may act immediately and without notice.
On termination, you remain responsible for any fees incurred up to the termination date, and Basestack may retain limited copies of Customer Data where required by law or as permitted under the Data Processing Addendum.
The Service is provided on an âas isâ and âas availableâ basis. To the maximum extent permitted by law, Basestack disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation.
To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, goodwill, opportunity, savings, or data. Each party's aggregate liability under these Terms is capped at the greater of the fees paid to Basestack in the 12 months before the claim or EURÂ 100. Nothing in these Terms limits liability that cannot legally be limited.
To the extent permitted by law, you will defend, indemnify, and hold harmless Basestack from third-party claims arising from your Customer Data, your use of the Service in breach of these Terms or the AUP, or your violation of law or third-party rights.
We may change the Service and these Terms over time. Material changes to these Terms will be announced through the Service, by email, or on our website and will take effect no sooner than 30 days after publication unless a shorter period is required by law or needed for security or abuse prevention. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Terms; if you do not agree, you must stop using the Service before they take effect.
These Terms are governed by the laws of Portugal, without regard to conflict-of-law rules. The courts of Portugal have exclusive jurisdiction over disputes arising out of or related to these Terms, except where mandatory law gives you rights or venues that cannot be excluded.
Basestack is not liable for any delay or failure to perform caused by events beyond its reasonable control, including internet, hosting-provider, or third-party service failures, denial-of-service or other attacks, power or telecommunications failures, acts of government, natural disasters, epidemics, war, terrorism, civil unrest, or labour disputes. This section does not excuse any obligation to pay amounts due.
Basestack Terms of Service
[email protected]