Privacy Policy

Last updated: 2026-05-18

This Privacy Policy explains how BackupFort (iGears Technology Limited, "BackupFort", "we", "our") collects, uses, stores, and protects personal data when you use the portal, dashboard, backup APIs, and related services.

1. Data We Collect

Account and identity data: email address, hashed password, account role, verification status, and profile metadata.
Service operation data: device identifiers, device display names, endpoint IP data, backup and restore job metadata, policy/schedule settings, and activity timestamps.
Billing and subscription data: plan selection, subscription status, invoice references, and payment processor identifiers (we do not store full card numbers).
Security and audit data: login events, token/session metadata, API key metadata (name/prefix/created time), and operational logs needed for abuse prevention and incident response.

2. How We Use Data

Provide core functionality: account registration, sign-in, device registration, backup job orchestration, restore workflows, policy scheduling, and API key management.
Operate and secure the service: detect fraud/abuse, troubleshoot failures, monitor reliability, and enforce account and API security controls.
Provide billing and support: process subscription events, respond to support requests, and send required account communications (verification, security, billing notices).

3. Legal Basis and Purpose Limitation

We process data to perform our contract with you (service delivery), for legitimate interests (security/reliability), and to satisfy legal obligations.
We do not sell personal data. Data processing is limited to purposes reasonably related to the service you requested.

4. Backup Content and Responsibility Boundaries

You control the data you back up and restore through your devices, policies, and jobs.
You are responsible for ensuring your backup content is lawful and that you have authority to store and restore it.
Where supported by deployment configuration, data transmission and storage are protected with industry-standard safeguards.

5. Sharing, Processors, and International Transfer

We may share data with sub-processors that support hosting, monitoring, email delivery, and payment processing, only as necessary to provide the service.
Payment processing is handled by third-party payment providers; their own privacy terms apply to payment instrument handling.
If data is transferred across jurisdictions, we apply commercially reasonable safeguards and contractual protections.

6. Retention

Account and operational records are retained while your account is active and for a limited period thereafter for legal, security, and dispute-handling reasons.
Backup/restore metadata and logs are retained according to service settings, retention policies, and legal requirements.
When deletion is requested and permitted, we delete or anonymize personal data unless retention is legally required.

7. Security Controls

We use layered safeguards such as access control, authentication, network protections, and logging to reduce unauthorized access risk.
No Internet system is absolutely secure. You should also protect your account with strong credentials and secure endpoint practices.

8. Your Rights and Choices

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or export of your personal data.
You can manage account profile details in the portal settings, and may request account deletion subject to legal and security constraints.

9. Cookies and Local Storage

The portal may use browser storage/cookies for authentication state, language/theme preferences, and security/session continuity.
Disabling required storage features may prevent sign-in or dashboard functionality.

10. Changes and Contact

We may update this Privacy Policy to reflect legal, operational, or product changes. Material updates will be posted in the portal.
For privacy requests or questions, contact support through official BackupFort channels.