Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account via Google, Microsoft, or GitHub authentication, we receive and store:

• Email address
• Display name
• Profile photo URL (if provided by the auth provider)
• OAuth provider ID (for authentication purposes)

1.2 Organization Information

If you create an organization account, we collect:

• Organization name
• Team member email addresses
• Billing contact information

1.3 Payment Information

Payment processing is handled by Stripe. We do not store full payment credentials (card numbers, CVV, or bank account details). We receive from Stripe:

• Payment method summary (e.g., last four digits, payment type)
• Billing address
• Payment status and transaction history (including credit purchases)

1.4 Your Content

When you deploy applications through Telbase, we process:

• Application code: Uploaded through our infrastructure to Vercel or Google Cloud, which build and deploy it and keep it with the deployment. An upload to Google Cloud passes through a storage bucket in our account, which deletes it automatically within two days
• Environment variables: Held by your application's hosting provider, which injects them at runtime
• Database data: Stored in managed PostgreSQL or SQLite databases
• Build logs: Kept by the hosting provider that ran the build, in our account there (see Data Retention); we read them through our infrastructure when you or your agent ask, and keep no copy of our own

1.5 Usage Information

We automatically collect certain information when you use our Service:

• CLI commands executed (command type only, not arguments or secrets)
• Dashboard pages visited
• Deployment timestamps and status
• API request metadata (endpoint, timestamp, response code)
• IP addresses (for security and rate limiting)
• Browser type and version (for dashboard users)

1.6 Information from Third Parties

We may receive information from integrated services:

• GitHub: Repository names and branches, when you link a repository
• Cloudflare: Access logs for authenticated users of your applications

2. How We Use Your Information

We use the information we collect to:

2.1 Provide the Service

• Authenticate you and manage your account
• Build and deploy your applications
• Provision and manage databases
• Configure authentication for your deployed apps
• Process your payments

2.2 Improve and Maintain the Service

• Monitor system performance and reliability
• Identify and fix bugs and errors
• Analyze usage patterns to improve features
• Develop new features based on user needs

2.3 Communicate with You

• Send deployment status notifications
• Alert you to billing issues or account problems
• Respond to your support requests
• Send important service announcements
• Provide product updates (you can opt out)

2.4 Security and Compliance

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service and Acceptable Use Policy
• Comply with legal obligations

3. Data Storage and Security

3.1 Where We Store Your Data

Your data is stored across our infrastructure providers:

3.2 How We Protect Your Data

We implement industry-standard security measures:

• Encryption in transit: All connections use TLS 1.2 or higher
• Encryption at rest: Databases and secrets are encrypted using AES-256
• Secret encryption: Secrets we store are encrypted with AES-256-GCM before storage
• Access controls: Role-based access with principle of least privilege
• Authentication: SSO via established providers (Google, Microsoft, GitHub)
• Monitoring: 24/7 infrastructure monitoring and alerting

For more details about our security practices, see our Security page.

4. Data Sharing

4.1 Service Providers

We share data with third-party service providers who help us operate the Service:

These providers are contractually bound to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to:

• Comply with a law, regulation, or legal process
• Respond to lawful requests from government authorities
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service

4.3 Business Transfers

If Telbase is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

4.4 With Your Consent

We may share your information in other ways if you explicitly consent to such sharing.

5. Cookies and Tracking Technologies

5.1 Cookies We Use

5.2 Third-Party Cookies

Our Service may include third-party cookies from:

• Cloudflare: Performance, security, and analytics

5.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of the Service, including staying logged in.

5.4 Do Not Track

We respect Do Not Track (DNT) signals. When we detect a DNT signal, we disable non-essential analytics tracking.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You can request a copy of the personal information we hold about you. We will provide this in a commonly used, machine-readable format.

6.2 Correction

You can update your account information through the dashboard. For other corrections, contact us and we will update inaccurate information.

6.3 Deletion

You can request deletion of your account and personal information. Note that:

• We may retain certain data as required by law
• Deletion of your account will delete all your deployed applications
• Some information may persist in backups for up to 30 days

6.4 Objection and Restriction

You can object to certain processing of your data or request that we restrict processing while we address your concerns.

6.5 Withdraw Consent

Where we rely on consent for processing, you can withdraw that consent at any time. This does not affect processing that occurred before withdrawal.

6.6 How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

7. Data Retention

We retain your information for as long as necessary to provide the Service:

Our hosting providers keep some of this data longer, under their own policies:

• Vercel removes an application's older deployments, with their build logs, on its retention schedule (between 30 days and a year, by plan and kind of deployment), and can restore a removed deployment for 30 days.
• Google Cloud also keeps a copy of each build's log in its own storage, under its policy.
• Neon keeps up to 30 days of a PostgreSQL database's history for point-in-time restore, and keeps a deleted database recoverable for 7 days.
• Turso keeps up to 90 days of a SQLite database's history for point-in-time restore, and keeps a deleted database recoverable for up to 5 days.

8. Children's Privacy

Telbase is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at [email protected] and we will delete that information.

9. International Data Transfers

Telbase is based in Spain, but our servers and service providers are located in the United States, so your information is transferred to and processed there. Data protection laws in the United States may differ from those in your country.

For transfers from the European Economic Area, we rely on:

• Standard Contractual Clauses approved by the European Commission
• Service providers' certifications and compliance frameworks

By using the Service, you consent to the transfer of your information to the United States and other countries where we operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email to your registered email address
• Displaying a notice in the dashboard

The "Last updated" date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.

11. Contact Us