What we collect
- Account details: your email address. If you sign in with a password, it is stored securely hashed by our sign-in provider. If you sign in with Google, we also receive your name, your profile picture and the account ID Google gives us.
- Subscription: Paddle, our reseller and Merchant of Record, handles checkout. Paddle collects your payment details. We never see or store card numbers. Paddle tells us your subscription status, your plan and its customer ID for you. Paddle’s privacy policy covers what Paddle does with your data.
- Messages to us: if you email us, we keep the conversation so we can help you.
What we don’t collect
- Your dashboards and their data. Reports are displayed by your BI tool, straight to your device. They don’t pass through our servers and we don’t keep copies.
- Your catalog. Owners, tags, glossary terms, lineage, conversations and announcements are read from, and written to, your catalog directly from your device. We don’t store them.
- Your catalog access token. It is kept on your device and sent only to your catalog.
Your BI tools and your catalog have their own privacy terms, set by whoever runs them.
Cookies and storage on your device
This website sets no cookies. The checkout page loads Paddle’s checkout, which may set cookies it needs to take a payment securely.
The app keeps a few things in your browser’s or device’s storage so it works: that you’re signed in, your light or dark theme, and your catalog access token. None of these is used to follow you across sites.
Why we use it (legal bases)
- To provide the service you signed up for (contract): your account, your free trial and your subscription.
- To keep the service secure (legitimate interests): preventing abuse and fraud.
- To meet legal duties: billing records, tax, and responding to lawful requests.
- Email: we send account emails, such as verification and important notices. We’ll only send marketing email if you opt in, and every marketing email has an unsubscribe link.
Who we share it with
We use a few service providers, each bound by a contract to protect the data and use it only for us:
- Google (Firebase and Google Cloud) hosts this website and the app, runs sign-in, and stores account and subscription records.
- Paddle processes payments as our Merchant of Record.
We don’t sell or rent personal data. We’ll disclose data if the law requires it, for example in response to a valid court order. Where we’re allowed to, we’ll tell you first.
How long we keep it
- Account and subscription records: while your account is open. When you close your account, we delete them within 30 days.
- Payment notifications from Paddle: 90 days.
- Billing records: as long as tax and accounting law requires (Paddle keeps its own records).
Your rights
Wherever you live, you can ask us to:
- give you a copy of your personal data, including in a machine-readable form you can take elsewhere;
- correct it;
- delete it, or close your account;
- stop or limit how we use it, or object to a particular use.
Email support@ebic.io from the address on your account. We’ll reply within 30 days. You also have the right to complain to your local data protection authority.
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.
Security
All traffic is encrypted with HTTPS. Account and subscription records can be read and written only by our own server-side code, never directly from a browser. No system is perfectly secure. If a breach affects your data, we’ll tell you and the authorities as the law requires.
International transfers
Our service providers process data in the United States. If you’re elsewhere, your data is transferred there. Where the law requires it, we use safeguards such as the European Commission’s Standard Contractual Clauses.
Children
ebic.io isn’t for children. You must be at least 16 to create an account, and we don’t knowingly collect children’s data.
Changes
If we make significant changes to this policy, we’ll email account holders before they take effect and update the date at the top.
Contact
ebic.io · support@ebic.io
Also see: Terms of Service · Refund Policy