Legal

Privacy policy.

Short version: we collect the minimum we need to run BakBas, we don't sell your data, and you can export or delete it any time. Long version below.

Last updated · April 1, 2026

1. Who we are

BakBas ("we", "us", "our") is a website hosting and publishing service operated by BakBas Technologies Pvt. Ltd., registered in Delhi, India. If you have questions, email us at privacy@bakbas.com.

2. What we collect

Account data

When you sign up, we collect your email address, name, and a hashed password. If you pay, our payment processor (Stripe) collects billing details on our behalf — we never see your card number.

Site content

We store whatever you put into your BakBas sites — text, images, settings. This is yours. We don't read it, train on it, or hand it to anyone else.

Usage data

Basic telemetry: which pages you visit in the editor, what errors you hit, and how long requests take. We use this to fix bugs and make the product better. No third-party analytics, no advertising cookies.

3. How we use your data

  • To run the service you signed up for
  • To bill you if you're on a paid plan
  • To send occasional product updates (you can opt out any time)
  • To respond to your support messages
  • To comply with legal obligations where required

4. Who we share with

We use a small number of sub-processors to run BakBas. Current list: Stripe (payments), Amazon Web Services (hosting), Postmark (transactional email). We don't sell, rent, or trade your data with anyone else, ever.

5. Your rights

You can access, correct, export, or delete your data at any time from your account settings. If you're in the EU, UK, or California, you have additional rights under GDPR and CCPA — all of which we honor worldwide as a matter of principle.

6. Data retention

Account data stays as long as your account is open. If you delete your account, everything is removed from our production systems within 30 days and from backups within 90 days.

7. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Passwords are hashed with bcrypt. We run quarterly security reviews and welcome responsible disclosure at security@bakbas.com.

8. Cookies

We use a single essential session cookie to keep you logged in. No tracking, advertising, or analytics cookies. That's the whole list.

9. Changes to this policy

If we change anything material, we'll email you at least 30 days in advance. Minor edits (typos, clarifications) get a note at the top of this page.

10. Contact

Questions, data requests, or concerns? Email privacy@bakbas.com and a real human will reply within two business days.