Privacy policy
Last updated
How Northstar Labs handles personal information when you use KeepMyBase.
On this page
Who is responsible for your information
Northstar Labs, Norway, operates KeepMyBase and is responsible for personal information used to manage your account, run the website, and communicate with you. For a privacy question or request, email help@keepmybase.com.
When a business uses KeepMyBase to process personal data from its Airtable bases, that business determines the purpose of the processing. We process that content on its instructions as a data processor, under an applicable data processing agreement. This policy explains our handling of account information and the backup workflow; it does not replace that agreement.
Information we collect
- Account information. Your email address, display name, verification status, account dates, and an optional profile image provided by Google sign-in.
- Connections and settings. Provider and account identifiers, authorized permissions, encrypted access credentials, destination bucket or folder details, backup configuration, and notification preferences.
- Backup data. When you enable a capture, the selected records, metadata, and supported attachment files pass through our processing infrastructure to your chosen destination. Operational information includes capture times, counts, results, file integrity information, and usage.
- Technical information. Session identifiers, IP addresses, browser or device information, and request or error information needed to operate the service and investigate access or delivery problems.
- Billing and support. If you purchase a subscription, billing contact details, payment-provider identifiers, subscription status, and transaction records. We also receive the information you include in support messages. Stripe collects and processes your card details during payment.
How and why we use information
We use account and connection information to sign you in, maintain your settings, carry out authorized operations, and provide support. We use subscription and billing information to manage payments and your plan. The legal basis is performing our contract with you. For business representatives, it is our legitimate interest in providing and administering the service for your organization.
We use technical and security information to prevent abuse, protect accounts, diagnose failures, and keep the service working. Our legal basis is our legitimate interest in operating a secure and reliable service. Records required for tax, accounting, or a lawful request are processed to meet legal obligations.
Backup content is processed to carry out the customer's instructions. We do not sell personal information or use customer backup content to train AI models.
Essential account messages include sign-in codes and important security or service notices. Optional summaries follow your notification settings. Promotional email, if offered, requires a separate choice and a way to unsubscribe; where consent is required, you can withdraw it at any time.
Google sign-in and Google Drive
Google sign-in provides your Google account identifier, name, email address, verification information, and profile image. We use these to identify you and maintain your KeepMyBase account. Signing in with Google does not itself authorize access to Google Drive.
If you separately connect Google Drive, its authorization screen explains the requested permissions. We use the authorized access to create, upload, verify, list, and manage KeepMyBase backup files and the relevant folder metadata. Retention settings can authorize deletion of older backup files. Access and refresh tokens support the operations you enable, including background captures.
We use Google data only for the authorized account and backup functions. Human access is limited to what you authorize for support, what is necessary for security or legal obligations, or what Google's Limited Use rules otherwise permit. Google data is not used for advertising or generalized AI model training.
KeepMyBase's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke authorization through your Google Account connections. Revoking access stops operations that need that permission; it does not remove files already stored in your Drive.
Service providers and sharing
Our hosted service uses providers for the following purposes. A provider receives the information needed for its role, subject to the relevant service and data processing terms.
- Cloudflare for website and API infrastructure, network security, processing, and service email delivery.
- PlanetScale for the service database, including account information, configuration, and encrypted credentials.
- Stripe for checkout, subscriptions, payment processing, and billing records when you purchase a subscription.
Airtable supplies the data you authorize us to capture. Google or your selected S3-compatible storage provider receives archives you instruct us to store there. Those accounts and their storage remain subject to your agreements with those providers. Provider support access, storage location, and retention can differ.
We can disclose information when required by law or necessary to address fraud, security threats, or legal claims. If the business is transferred, relevant service records can transfer with it, subject to applicable privacy obligations and notice.
International processing
Our providers and the connected services you choose can process information outside Norway or the European Economic Area. Transfers are subject to applicable data protection requirements. An appropriate transfer mechanism must be in place where the law requires one. Contact help@keepmybase.com for information about the locations and safeguards relevant to your account. Your chosen storage region also affects where completed archives are stored.
Retention and account deletion
We keep your account and backup configuration until you delete your account, and saved credentials until you remove the connection or delete your account. Removing a stored connection removes its saved credentials from the active service database. Deleting your account removes your profile, sessions, stored connections, and backup settings from that database.
Support records are retained through resolution and related follow-up. Security records are retained through investigation and any related legal claims. Accounting and payment records are retained for the period applicable law requires. Where a record must remain after account deletion, access and use are limited to that purpose.
Completed archives are stored in your destination. While a schedule is active, older KeepMyBase snapshots are subject to its retention settings. Canceling a subscription stops automatic retention cleanup immediately; scheduled captures continue until the paid period ends. When your subscription ends, you disconnect a destination, or you delete your account, future captures stop and completed destination files remain. You control any further deletion in that storage, including its own lifecycle rules.
How information is protected
We use account access controls and encrypt stored storage credentials and OAuth tokens. Access to service information is limited to what is needed to operate and support KeepMyBase. Keep your connected accounts secure and use private storage with permissions limited to the backup workflow. Contact us promptly if you suspect an account or data security problem.
Your privacy rights
Depending on applicable law, you can request access to or a copy of your personal information, correction, deletion, restriction of processing, or data portability. You can object to processing based on legitimate interests and withdraw consent where processing relies on it. Withdrawing consent does not affect earlier lawful processing.
Email help@keepmybase.com to make a request. We may need to verify your identity before disclosing information or changing an account. If your request concerns personal data inside another business's Airtable base or archive, contact that business; we assist it with requests relating to the processing we perform for it.
You can complain to your local data protection authority or to Norway's Datatilsynet. KeepMyBase does not make decisions producing legal or similarly significant effects about you solely through automated profiling.
Updates and contact
We update this policy when data handling changes and show the revised date above. We notify account owners of material changes and obtain any new authorization or consent required before using information for a new purpose. For questions, contact Northstar Labs at help@keepmybase.com. The terms of service explain subscriptions, cancellation, and backup responsibilities.