Section 01What we hold
| Account | Your name, email address, and company: the identifiers needed to provision coverage and to reach you when a job fails. |
|---|---|
| Billing | Subscription records and receipts. Card details are handled entirely by Stripe and never touch our servers; we see the last four digits and the outcome, and nothing more. |
| Service metadata | Which machines, mailboxes, drives, company files, and tenants you protect, together with job status and history. |
| Backup content | The backed-up data itself, encrypted with 256-bit AES at rest and protected in transit. It is your material in our custody, not our dataset. |
| Site logs | Standard web server logs recording address, timestamp, and page. No advertising or profiling trackers. |
Section 02What we do with it
Set up the coverage, operate it, invoice it, and support it. Notify you when a job is failing, when something appears to be a security problem, and when your account needs attention. Satisfy tax and legal obligations. That is the complete list. Personal information is not sold, and the data we hold for you is never mined, sampled, or used to train anything. Its only purpose is to be handed back.
Section 03Who else touches it
Only the processors we require in order to run the service: Stripe for payments, our backup platform and cloud storage vendors for the vaults, and an email delivery provider for receipts, alerts, and sign-in links. Each acts on our instructions and for no purpose of its own. If a subpoena or court order arrives, we comply with what the law actually requires and nothing broader.
Section 04How long we keep it
Backup content is retained on the schedule of the line you purchased, for example 28 days of file versions, 7 years of Exchange mail, and unlimited history for Entra ID configuration. After a subscription ends, backup data is deleted in accordance with our vendors' deprovisioning schedules. Account and billing records are kept for as long as tax and accounting rules require.
Section 05Your rights
Residents of California and a number of other jurisdictions hold statutory rights to see, correct, take away, or erase the personal information a company holds on them. Write to us from your account email address and we will honor what applies to you. Deleting an account is not reversible, and neither is deleting the backups within it, so we will confirm before acting.
Section 06Contact
Fortify 24x7 · support@backupyourdata.io