Privacy Policy

Draft — not yet published. This page is a checklist of what the final text must cover. Replace it with reviewed wording before launch.

Must cover

What we store: email address, subscription and billing records, backup timestamps and sizes, and — only when the user enables it — IP addresses.
Configuration file contents are encrypted before upload. State plainly that the account encryption key is held on our servers so that a password reset is possible, and that this means we are technically able to decrypt user content. This is a disclosure obligation, not a marketing choice.
Who else sees data: the payment provider (PayPal) receives billing details directly; the email provider handles verification and code delivery.
Retention: backups are deleted after a subscription lapses beyond the purge window; account deletion removes everything.
User rights: export, correction and deletion, and how to request them.
Where the servers are physically located, and the legal basis for processing.
Contact address for privacy requests.