Privacy Policy

Preview correction: 25 October 2026. Owner legal review is pending.

1. Who we are

This policy explains how airgap, of Zion Hall, 24a Red Lion Street, Chesham HP5 1EZ, United Kingdom, handles personal data when you use https://www.airgap.bot and the airgap backup and restore service. For privacy questions, contact privacy@airgap.bot.

In this policy, "we", "us" and "our" mean airgap. For customer account data and service administration data, we are the controller.

2. What we collect

We collect the data needed to run the service:

• if you join the waitlist, your email address and any integration preferences you choose;
• your account email address;
• payment data handled by Stripe, including Stripe Link where used. We do not store full card numbers;
• OAuth tokens, Google Workspace Domain-Wide Delegation access, or equivalent tokens needed to back up the sources you connect;
• captured content from supported connected Google services, subject to granted permissions, account eligibility and scope. Supported data types include Drive, Gmail, Calendar and, with the required scope, Contacts. Notion and Airtable are planned; their pages do not connect those sources. The implementation uses Cloudflare R2 object storage for saved copies;
• logs needed to run, secure and troubleshoot the service; and
• connecting codes used for CLI login.

3. Why we use it

We use personal data to:

• send the Airgap launch updates you request and help prioritise integrations;
• provide the backup, restore and rollback service;
• take payment and manage subscriptions;
• keep the service secure, prevent abuse and diagnose problems; and
• meet legal obligations, including billing, tax and accounting duties.

Under the UK GDPR, our legal bases are contract where processing is needed to provide the service you bought, legitimate interests for security, abuse prevention and service operation, and legal obligation where the law requires us to keep or use records.

4. Processors and connected services

The service uses Stripe for payments, Google where you connect supported Google services, Cloudflare R2 for object storage and Railway for hosting. Notion and Airtable connections are planned. The website runs on Vercel; waitlist details are stored in Airgap's database when a signup succeeds. We do not sell personal data.

5. International transfers

Some processors may process data outside the United Kingdom. Where that happens, their processor terms apply, including standard contractual clauses or other transfer terms where their terms use them.

6. Retention

We keep account data while your account is active. Snapshot retention, deletion and handling after cancellation must be set out in approved subscription terms before new purchases open; no fixed snapshot retention period is confirmed here. To withdraw a request for launch updates or ask us to remove a waitlist entry, use the privacy contact below. For an existing account or deletion request, use the same contact. We may keep billing, tax and accounting records for longer where required by law.

7. Your rights

You may have rights to access, correct, erase, restrict or receive a portable copy of your personal data, and to object to some processing. To ask, email privacy@airgap.bot. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

8. Agents and restore keys

airgap is designed so customer AI agents do not hold restore keys. We do not give those keys to agents. Restore is performed by the customer as a logged-in human in the browser. This is a product design fact, not a legal guarantee that no system can ever be compromised or misconfigured.

9. Cookies

We use session cookies needed for login and service operation. We have not found non-essential analytics cookies in the app.

10. Children

The service is not for people under 18.

11. Changes

We may update this policy by posting a new version on this page. Continued use of the service after a posted change means the updated policy applies.