Privacy Policy
Last updated: 15 October 2026
Who is responsible
The controller of your personal data is Lucjan Bator, Błażowa Górna 314, 36-030 Błażowa. Contact for any privacy question: contact@basecellar.com.
What we process
- Account data: the e-mail address and user ID of your Airtable account, and the e-mail address of the Google account you connect.
- Access keys: the access tokens Airtable and Google give Basecellar, stored encrypted (AES-256-GCM).
- Service data: the names of the bases you share, record counts, the history of backup runs and API usage, and the e-mails we send you.
- Content of your bases: read during a backup and written straight to your Google Drive. We do not keep copies of your records on our servers. The only exception: to show you what a restore will change, we store up to 10 example values from that restore.
- Payment data: handled by Paddle. We receive your subscription status, customer number and the amounts paid, never your card details.
- Technical logs: error messages and similar records needed to run the service securely, kept for up to 30 days.
Why and on what legal basis
- To provide Basecellar under our agreement with you (Article 6(1)(b) GDPR).
- To keep tax and accounting records required by law (Article 6(1)(c) GDPR).
- To keep the service secure and to find errors, which is our legitimate interest (Article 6(1)(f) GDPR).
Who else processes data
- Hetzner Online GmbH, Germany: servers that run Basecellar.
- Brevo, France: sending our e-mails.
- Paddle.com Market Ltd, United Kingdom: payments, invoices and taxes, as the seller of record.
- Airtable and Google: the services you connect; Basecellar reads from Airtable and writes to your Google Drive on your instruction.
Where data leaves the European Economic Area, this happens under an adequacy decision of the European Commission or the safeguards these providers offer, such as standard contractual clauses.
How long we keep it
Account and service data: while your account exists, and deleted within 30 days after it is closed. Payment records: as long as tax law requires, which in Poland is 5 years from the end of the year of payment. The backups in your Google Drive are under your control; you can delete them at any time.
Your rights
You can ask for access to your data, correction, deletion, restriction of processing and a copy in a portable format, and you can object to processing based on our legitimate interest. Write to contact@basecellar.com. You can also complain to the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych) or the authority in your country.
Cookies
Basecellar uses only cookies needed to work: one that keeps you signed in and one that protects the sign-in with Airtable or Google for 10 minutes. There are no analytics, advertising or tracking cookies.
Google user data
Basecellar asks Google only for access to the files it creates in your Drive. Basecellar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Changes
If we change this policy in a way that affects you, we will tell you by e-mail before the change takes effect.