Privacy Policy

Last updated: 28 August 2026.

1. Who we are

This policy explains how airgap, of Zion Hall, 24a Red Lion Street, Chesham HP5 1EZ, United Kingdom, handles personal data when you use https://www.airgap.bot and the airgap backup and restore service. For privacy questions, contact privacy@airgap.bot.

In this policy, "we", "us" and "our" mean airgap. For customer account data and service administration data, we are the controller.

2. What we collect

We collect the data needed to run the service:

• your account email address;
• payment data handled by Stripe, including Stripe Link where used. We do not store full card numbers;
• OAuth tokens, Google Workspace Domain-Wide Delegation access, or equivalent tokens needed to back up the sources you connect;
• snapshot contents from connected Google services, including Drive, Gmail, Calendar and Contacts, and from connected Notion and Airtable workspaces or bases. Snapshots are stored in Cloudflare R2 object storage;
• logs needed to run, secure and troubleshoot the service; and
• connecting codes used for CLI login.

3. Why we use it

We use personal data to:

• provide the backup, restore and rollback service;
• take payment and manage subscriptions;
• keep the service secure, prevent abuse and diagnose problems; and
• meet legal obligations, including billing, tax and accounting duties.

Under the UK GDPR, our legal bases are contract where processing is needed to provide the service you bought, legitimate interests for security, abuse prevention and service operation, and legal obligation where the law requires us to keep or use records.

4. Processors and connected services

We use Stripe for payments; Google where you connect Google services; Notion where you connect Notion; Airtable where you connect Airtable; Cloudflare R2 for object storage; and Railway for hosting. We do not sell personal data.

5. International transfers

Some processors may process data outside the United Kingdom. Where that happens, their processor terms apply, including standard contractual clauses or other transfer terms where their terms use them.

6. Retention

We keep account data while your account is active. We keep snapshots until you delete them or your subscription ends, plus a short winding-down period of 30 days. We may keep billing, tax and accounting records for longer where required by law.

7. Your rights

You may have rights to access, correct, erase, restrict or receive a portable copy of your personal data, and to object to some processing. To ask, email privacy@airgap.bot. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

8. Agents and restore keys

airgap is designed so customer AI agents do not hold restore keys. We do not give those keys to agents. Restore is performed by the customer as a logged-in human in the browser. This is a product design fact, not a legal guarantee that no system can ever be compromised or misconfigured.

9. Cookies

We use session cookies needed for login and service operation. We have not found non-essential analytics cookies in the app.

10. Children

The service is not for people under 18.

11. Changes

We may update this policy by posting a new version on this page. Continued use of the service after a posted change means the updated policy applies.