Privacy Policy

Last updated: June 2025

What We Collect

Account information: email, name, password hash
Billing information: handled by Stripe (we do not store card data)
Server credentials: encrypted with AES-256-GCM
Backup metadata: job names, run status, timestamps, file sizes
Usage data: backup runs, API calls for plan enforcement

What We Don't Collect

The contents of your backup files (they go directly to your storage)
Your database records or application data
Raw credentials in any unencrypted form

How We Use Your Data

We use your data to:

Provide the backup service
Send backup alerts and notifications
Enforce plan limits
Improve the service
Comply with legal obligations

Data Security

All sensitive credentials are encrypted with AES-256-GCM. Passwords are hashed with bcrypt. We use TLS for all data in transit. We do not log sensitive values.

Third-Party Services

Stripe: payment processing
Resend: transactional email
Sentry: error tracking (no PII in error context)

Data Retention

We retain your account data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days. Backup metadata is deleted with your account.

Your Rights

You may request a copy of your data, correction of inaccuracies, or deletion of your account by emailing privacy@vpssnaps.com.

Contact

For privacy questions, contact privacy@vpssnaps.com.