GDPR at backupd
Your databases hold your customers’ personal data. backupd processes it only to back it up and prove it restores, from servers in the EU, encrypted before it’s stored.
- EU-hosted
- App, workers and restore-test sandboxes run in Frankfurt.
- EU storage
- Pick EU Central and backups never leave the EU.
- Encrypted
- Backups are encrypted with age before they’re stored.
- Consent first
- Analytics and replays only after you accept.
Who does what
For the data inside your databases and backups, you are the controller and backupd is your processor: we only dump, encrypt, store, test and restore it, on your instructions and your schedule. We never look into it, sell it or use it to train models.
For your account (name, email, sign-ins and billing), backupd is the controller. The privacy policy covers it in full.
Where your data lives
- The app, its database, the backup workers and the restore-test sandboxes run on Oracle Cloud in Frankfurt, Germany.
- Backups are stored on Backblaze B2 in the region your workspace picks: EU Central (Amsterdam), US East or US West. Choose EU Central when you create the workspace to keep backups in the EU.
- Restore tests load a backup into a throwaway database on an isolated network, with no internet access, and delete it straight after.
Sub-processors
- Oracle Cloud Infrastructure: Hosting: the website, app, API, its database, the backup workers and restore-test sandboxes. Frankfurt, Germany (EU).
- Backblaze B2: Storage for encrypted backups (backupd Storage). The region your workspace picks: EU Central (Amsterdam), US East or US West.
- Cloudflare: DNS, TLS and network protection in front of every backupd site. Global network.
- Polar: Payments, invoices and sales tax, as merchant of record (an independent controller). See Polar's privacy policy.
- Resend: Email delivery: alerts, invitations and security notices. United States.
- PostHog: Product analytics, session replays and error tracking, only after you accept analytics. United States.
- Zoho Mail: Our support, sales and privacy mailboxes. United States.
- Have I Been Pwned: Checks new passwords against known breaches. Global.
Transfers outside the EEA rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. We tell customers before adding a provider that processes their data.
How long we keep it
- Backups: your retention setting, then deleted for good.
- Deleted backups and workspaces: recoverable for 7 days, then removed with every copy.
- Notification and uptime history: 90 days.
- Audit log: 1 year.
- Your account: until you delete it in Settings → Profile. Your name and email are then removed from audit logs too.
Erasing one of your customers from your database removes them from backupd as your older backups age out of retention. To remove them sooner, delete the backups that hold them.
Who at backupd can see it
Backups are encrypted to backupd’s key for your workspace and to any key you add. Our workers use it to run restore tests and the restores you ask for. Only the founder has access to production, and backupd’s admin panel asks for a fresh two-factor code.
When support signs in as a member of your workspace to help, it lasts at most an hour and your audit log shows “backupd support” for everything done.
Your rights
- Correct your profile and delete your account in the app.
- Download any backup, encrypted or decrypted, at any time.
- Withdraw analytics consent with “Cookie settings” at the bottom of the site.
- Anything else, including a copy of your account data: [email protected]. We answer within one month.
Breaches and agreements
If a breach affects your data, we tell your workspace’s owners without undue delay, so you can meet your own 72-hour duty to your authority.
We’re finalising a standard data processing agreement (DPA). Write to [email protected] and we’ll send it to you as soon as it’s ready.
Keep your backups in the EU
Pick EU Central for your workspace, add a key of your own, and your backups stay in Europe and stay yours.