Privacy.
Last updated 12 October 2026
This page explains, in plain English, what Plainbase keeps about you, why, and what you can ask us to do. Plainbase is run by the Plainbase team, who is responsible for your account information.
What we keep
- Your account: your email, your name if you give one, and your password. Your password is stored scrambled, so nobody can read it, including us.
- What you put in Plainbase: your tables, records, files, team members and settings. This is your data. We only use it to run Plainbase for you.
- Your customers: if you use Plainbase to let your own customers sign in, we keep their email addresses and sign-in activity for you. You decide why you collect them. We only handle them on your behalf, and you are responsible for telling your customers.
- API keys: we store only a scrambled copy of each key, never the key itself.
- Change history: a record of edits and deletions, kept for 30 days so you can undo mistakes.
- Basic server records: the technical information a website needs to run and stay safe, such as the time of a request and any error. We keep these for a short time.
- Payments: if you pay, Stripe handles your card. We never see or store your card number.
Cookies
We use one cookie, which keeps you signed in. We do not use advertising or tracking cookies, so there is no cookie banner to accept.
Why we use it
To give you the service you signed up for, to keep it secure, to take payment, and to reply to you. We do not sell your data and we do not use it for advertising.
Who else handles it
Only the companies we need to run Plainbase: our hosting provider, our email sender (for sign-in codes and invites) and Stripe (for payments). They may only use your data to do that job. If data is handled outside the UK, we make sure it is properly protected.
How long we keep it
For as long as your account is open. If you ask us to close your account, we delete your account and project data. Backups are removed on their normal schedule.
Your rights
You can ask to see your data, correct it, take a copy, or have it deleted, and you can object to how we use it. You can already take a full copy yourself from the Export page. To use any other right, contact us. If you are not happy with our answer, you can complain to the Information Commissioner’s Office (ico.org.uk).
Keeping it safe
Passwords and API keys are stored scrambled. People can only see projects they belong to. Secret keys are refused when they are sent from a web page. We keep software up to date and limit repeated sign-in attempts.
Changes
If this page changes in a way that matters, we will tell you by email or in the dashboard.
Questions? Contact the Plainbase team through the Plainbase website.