Privacy Policy
Privacy for Airtable backup history.
This policy explains what Airhistory collects, how we use it, when we share it, how long we keep it, and what choices may be available to you.
Overview and roles
Airhistory provides Airtable backup history, snapshot comparison, notification, and restore-to-new-base tools. This policy covers the Airhistory website, application, support conversations, and related services.
When you use Airhistory for Airtable bases or cloud storage that contain information about other people, you are responsible for having the rights, notices, and permissions needed to connect those sources to Airhistory. Where applicable, Airhistory acts as a service provider or processor for customer content and uses that content only to provide and protect the service.
Information we collect
We collect account information such as email address, authentication state, plan state, team membership, notification preferences, product settings, and support messages.
We collect billing-related records through Stripe, such as plan status, customer identifiers, subscription state, and payment event metadata. Airhistory does not store full payment card numbers.
When you connect Airtable, Google Drive, or Dropbox, we collect connection metadata and encrypted token material so Airhistory can create snapshots, read snapshot files, show connection status, and revoke access where supported.
We collect technical data such as IP address, browser details, device information, application logs, security events, and error diagnostics when needed to operate, secure, debug, and improve the service.
Airtable and snapshot content
Snapshot files may contain Airtable table, field, and record data from the bases you choose to protect. Airhistory writes snapshot files to the Google Drive or Dropbox account you connect. Airhistory stores snapshot metadata in its application database so the app can show history, status, comparison, and restore context.
Airhistory does not sell Airtable record values, use them for advertising, or train models on customer content. Do not connect bases containing regulated data such as health information, payment card data, government classified information, or data about children unless you have confirmed that your use is lawful and Airhistory has agreed in writing where required.
How we use information
We use information to create and manage accounts, authenticate users, run backups, display snapshot history, compare snapshots, restore supported data to a new base, send operational emails, process billing, enforce plan limits, prevent abuse, investigate errors, secure the service, comply with law, and respond to support requests.
Where GDPR or similar laws apply, our legal bases may include contract performance, legitimate interests, consent, and legal obligations. For example, contract performance supports account access and backups; legitimate interests support security, fraud prevention, diagnostics, and product reliability.
Security
Airhistory uses technical and organizational safeguards designed to protect account data and token material. Provider tokens are stored server-side and encrypted. Browser code must not include provider secrets, OAuth tokens, webhook secrets, or Supabase service-role credentials.
No internet service can promise perfect security. If we believe a security incident requires notice, we will provide notice as required by applicable law.
Retention
We keep account and application information while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, collect fees, prevent abuse, and enforce agreements.
Snapshot files in Google Drive or Dropbox remain in your connected provider account unless you delete them there. Airhistory may keep limited records after account closure when needed for legal, tax, billing, security, audit, or dispute purposes.
Privacy rights and choices
Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or opt out of certain processing of personal information. You may also have the right to withdraw consent where processing is based on consent.
California and other U.S. state privacy laws may provide additional rights. Airhistory does not sell personal information and does not share personal information for cross-context behavioral advertising. To make a request, email hello@airhistory.app. We may need to verify your identity before fulfilling a request.
International transfers
Airhistory and its service providers may process information in the United States and other countries. If privacy laws require transfer safeguards, Airhistory will use appropriate safeguards for the relevant transfer where required.
Children
Airhistory is not directed to children under 13 and is not meant for use by children. If you believe a child has provided personal information to Airhistory, contact us so we can review and delete it where appropriate.
Account deletion
You can request account deletion from Settings. Airhistory verifies the signed-in user, confirmation details, rate limits, and current password before deleting the account.
Account deletion removes local Airhistory account data and token material where applicable, attempts provider token revocation where supported, and deletes the Supabase Auth user so user-owned database rows cascade. Cloud files and folders remain in the connected provider account unless you delete them there.
Changes to this policy
Airhistory may update this policy as the product, providers, or legal requirements change. The updated date above shows when the policy was last changed. If changes are material, Airhistory may provide additional notice where appropriate.
Contact
For privacy questions or requests, email hello@airhistory.app.
Need privacy context for review?
Use the contact page for marketplace, consultant, or client-review questions about Airhistory data handling.