Privacy Policy

1. Information We Collect

We collect information you provide directly, including:

• Account information: name, email address, password (hashed)
• Database connection details: host, port, database name, credentials (encrypted at rest with AES-256)
• Payment information: processed by Stripe — we do not store card numbers
• Usage data: backup logs, schedule configurations, storage usage

2. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Service
• Execute automated database backups on your behalf
• Send backup status notifications and alerts
• Process payments and manage subscriptions
• Respond to support requests
• Comply with legal obligations

3. Data Storage and Security

Your backup data is stored encrypted using AES-256-GCM. Database credentials are encrypted before being stored in our database. We use industry-standard security practices including TLS for data in transit. Access to production systems is restricted to authorized personnel only.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Cloud storage providers — to store your backup files (MinIO/S3, as configured by you)
• Law enforcement — when required by applicable law

5. Data Retention

Backup files are retained according to your configured retention policy (default: 30 days). Account data is retained for the duration of your subscription plus 30 days after cancellation. You may request deletion of your data at any time by contacting support.

6. Your Rights

You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at [email protected]. We will respond within 30 days.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

8. Third-Party OAuth

If you sign in with GitHub or Google, we receive your name, email, and profile picture from those providers. We do not receive or store your OAuth provider passwords.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Service. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions, contact us at [email protected].