Privacy Policy

1. Introduction

Life Boat Backup ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automated backup service that synchronizes Google Drive and Slack data to AWS S3.

By using our service, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

• Email address (for authentication and communication)
• Payment information (processed securely through Stripe)
• Account preferences and settings

2.2 Service Data

• OAuth tokens for Google Drive and Slack access (encrypted and stored securely)
• AWS S3 credentials (encrypted with user-specific keys)
• Backup logs and metadata (file names, timestamps, backup status)
• Usage statistics and performance metrics

2.3 Technical Information

• IP addresses and browser information
• Device and operating system details
• Application logs and error reports

3. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining our backup service
• Processing payments and managing subscriptions
• Authenticating users and securing accounts
• Sending service-related communications and updates
• Monitoring service performance and preventing abuse
• Improving our service and user experience
• Complying with legal obligations

4. Data Protection and Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption of OAuth tokens and S3 credentials
• User-specific encryption keys derived from master keys
• Secure transmission using HTTPS/TLS encryption
• Regular security audits and monitoring
• Limited access controls and employee training
• Secure data centers and infrastructure

5. Data Flow and Third-Party Services

5.1 Your Data Never Touches Our Servers

Your backup data (files, messages, documents) flows directly from Google Drive and Slack to your AWS S3 bucket. We never store, cache, or access your actual backup content.

5.2 Third-Party Integrations

• Google: OAuth authentication and Drive API access
• Slack: OAuth authentication and Workspace API access
• AWS: Your S3 bucket for data storage (you maintain control)
• Stripe: Secure payment processing
• Mailgun: Transactional email delivery

6. Data Retention and Deletion

• Account information is retained while your account is active
• Backup logs are automatically cleaned up (maximum 12 logs per user)
• OAuth tokens are deleted when you disconnect services
• Upon account deletion, all personal data is permanently removed within 30 days
• Your backup data in S3 remains under your control and ownership

7. Cookies and Tracking

We use minimal cookies for essential functionality:

• Session cookies for authentication (7-day expiration)
• Preference cookies for user settings
• No advertising or tracking cookies
• No third-party analytics or marketing tools

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request information about data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your account data
• Control: Disconnect services and manage backup settings

9. International Data Transfers

Our services are hosted in the United States. By using our service, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your jurisdiction.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete such information immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: