Privacy

Who we are

Vulcbase is a backend platform run by its maintainers. For anything about your data, write to slimbennasrallah@gmail.com.

What we store

• Your account: your name, email address and a hashed password (never the password itself), plus the organizations and projects you belong to.
• Your project data: the databases, files and users you and your apps put into your projects. We treat it as yours and only touch it to run the service: to serve requests, make backups, restore or import when you ask, and to keep the platform healthy.
• Usage and logs: counts such as database size, storage, monthly active users and requests, and request logs (method, path, status, duration, role, IP address and user agent) that power the Logs and usage pages in your dashboard.
• Payments: when you pay by bank transfer or cash we note the date, amount, method and plan so we can activate it and answer questions. We never see or store card details, because there is no card checkout.
• Emails: the messages we send to run your account and your project's auth emails, using the SMTP server configured for the service or your project.

Cookies

We set one session cookie to keep you signed in to the dashboard. The public website has no advertising or analytics cookies and loads no third-party tracking scripts.

Where it is stored

On Vulcbase servers in the European Union. Backups are kept on the same infrastructure for the period of your plan.

Who sees it

• We do not sell your data, share it for advertising or use it to train models.
• Vulcbase does not send your data to third-party APIs to work. The infrastructure provider that hosts our servers and the email provider that delivers messages process data on our behalf.
• We may disclose data if a law requires it.

Your end users

If your app stores personal data about its own users in a Vulcbase project, you are responsible for that data and for telling your users how you use it. We act on your behalf as the service that stores it. If you need a data processing agreement, write to us.

Your rights and choices

• You can export your data at any time: download a backup, run pg_dump, or connect with any Postgres client.
• You can delete a project in the dashboard. Its database and files are removed; copies in backups disappear when those backups expire.
• You can ask us to access, correct or delete your account data by writing to slimbennasrallah@gmail.com. If you are in the EU, you also have the rights that GDPR gives you, including the right to complain to your data protection authority.

Security

Passwords are hashed, project secrets are encrypted at rest, traffic uses TLS, and each project has its own database. No system is perfectly secure. If we learn of a breach affecting your data, we will tell you.

Changes

If we change this page in a way that matters, we will say so in the changelog or by email. Questions are welcome at slimbennasrallah@gmail.com.