Request deletion of your hosted data
Email privacy@openbacky.com to request deletion of your openBacky hosted account and its associated files and personal information, or to request deletion of particular data while keeping your account. Include your sign-in email and what you want deleted. You can request this without the app installed. Please do not send passwords, share links, storage credentials, or file contents.
We may verify account ownership. After an account-deletion request, we remove or anonymise account data and content, except what we must retain for security, disputes, legal obligations, or limited backup recovery. We will explain any retained data in our response.
What this covers
This policy covers openbacky.com and the hosted beta at app.openbacky.com. “We” means the operator of those services. If you use a self-hosted installation, its operator controls the data and sets its privacy practices; ask them for their policy.
Information we process
Marketing site: Our host receives standard request details, including IP address, browser, pages visited, timestamps, and security events. Google Fonts may receive similar details when your browser loads the typeface. We use no advertising pixels or analytics cookies.
Hosted beta: We process information needed to run your account and library:
- Your email, profile, household role, and account status; files, names, previews, media details, albums, tags, favourites, and reactions.
- Invitations, guest emails, permissions, share links, contribution records, and connected-storage settings and credentials.
- Device details and optional push tokens; sessions, upload status, activity, errors, and security logs. Search terms in request URLs may appear in operational logs.
We may receive your email when someone invites you, before you have an account.
How we use it
We use this data to provide accounts, storage, previews, sharing, sign-in emails, and optional notifications; enforce permissions and quotas; and keep the service secure and reliable. Where a legal basis is required, we rely on providing the service, legitimate security and reliability interests, consent for optional features, and legal obligations. We do not sell personal information or use file contents for advertising.
Hosted files are not end-to-end encrypted. The service and any storage provider you connect can process file contents for uploads, downloads, and previews.
Retention and security
We keep hosted account data and content while needed for the service. Files in Trash are normally deleted after 30 days; notifications are limited to 90 days or 500 items per person. Links, codes, sessions, and invitations expire. Logs and activity records are kept as needed for security and operations. Connected storage providers may have separate retention and backup rules.
We use encrypted connections, access controls, hashed tokens, encrypted storage credentials and push endpoints, and rate limits. No service can guarantee perfect security.
Your choices and questions
You can download or remove content, revoke sharing and devices, disconnect storage, and turn off notifications. Email privacy@openbacky.com to request access, correction, export, or deletion, or to exercise other rights available under local law. We may verify your identity; you may also contact your local privacy regulator.
The hosted beta is not intended for children to manage accounts independently. Contact us if a child provided information without appropriate permission. We may update this policy as the beta changes; we will update the effective date and give additional notice for material changes.