Privacy Policy

Last updated: September 9, 2026

1. What we collect

• Account information — name, email address and password hash, or your Google account identity if you sign in with Google.
• Workspace content — the bases, tables, records and attachments you create.
• Billing information — handled by Stripe. We store only your Stripe customer and subscription identifiers, never full card numbers.
• Usage data — basic logs (IP address, browser, pages visited) needed for security and reliability.

2. How we use it

To provide and secure the Service, process payments, send transactional email (confirmations, password resets, billing receipts), respond to support requests and improve the product. We do not sell personal data and do not show third-party advertising.

3. Sub-processors

• Supabase — authentication, database and file storage.
• Netlify — hosting and serverless functions.
• Stripe — payments and subscription management.
• Google — optional sign-in and web fonts.

4. Retention and deletion

Your content is retained while your account is active. You can delete records, bases or your whole workspace at any time. When an account is deleted its data is removed from production systems within 30 days and from backups within 90 days.

5. Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, or to object to certain processing. Email privacy@datatomically.com and we will respond within 30 days.

6. Cookies

We use only strictly necessary cookies and browser storage for authentication and to remember your preferences. We do not use tracking cookies.

7. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to authorized personnel and protected by multi-factor authentication. Row-level security ensures workspace members can only access their own workspaces.

8. Changes

We will post updates to this policy here and, for material changes, notify workspace owners by email.