Privacy Policy — Extables

This policy explains what personal data Extables collects, why, who we share it with and the choices you have.

What we collect

Account details: your name, email address and password (stored only as a salted hash).
Onboarding answers you choose to give, such as how you plan to use Extables and your team size.
Your content: the workspaces, bases, records, comments and files you create.
Billing details: your Stripe customer and subscription IDs, plan and payment status. Card details are handled entirely by Stripe.
Messages you send through our contact forms and support chat.
Security and usage logs: sign-in times, IP address for rate limiting and fraud prevention, and AI request counts.

How we use it

To provide, secure and support the Service.
To process payments and send receipts, verification codes and important account emails.
To answer your questions and support requests.
To prevent fraud and abuse and to keep the Service reliable.
To improve Extables, using aggregated information.

We do not sell your personal data, and we do not use your records for advertising.

Who we share it with

Only with service providers that help us run Extables, under contracts that protect your data:

Stripe — payments and billing.
Our AI provider (OpenAI, Anthropic, Google or Groq, depending on configuration) — only the text you send to AI features or the support chat, to generate a response.
Our email provider — to deliver account and support emails.
Our hosting provider — to store and serve the Service.

We may also disclose data where the law requires it.

Cookies

We use one essential, secure, HTTP-only cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Retention

We keep your data while your account is open. When you ask us to delete your account, we delete your content and personal data, except records we must keep by law (for example, invoices and tax records).

Security

Traffic is encrypted with HTTPS. Passwords are hashed, accounts are isolated from each other, sign-in and forms are rate-limited, and access to production systems is restricted.

Your rights

Access and export your data at any time (CSV export in the app).
Correct your details from your account.
Ask us to delete your account and data, or ask questions about your data, at support@extables.com.
Where applicable (for example under GDPR), you may also object to or restrict processing and complain to your data protection authority.

Children

Extables is not intended for children under 16, and we do not knowingly collect their data.

Changes

If we make material changes to this policy we will tell you by email or in the app before they take effect.

Contact

Privacy questions: support@extables.com.