Privacy Policy
The short version. The DataBK application works against your own SQL Server instances and writes backup files to storage you choose. Your database contents, database names, and backup files are never transmitted to us, and the software contains no analytics or telemetry. The only personal information we ever hold is what you choose to send us by email, and the limited purchase details we receive from our payment provider when you buy a licence.
1. Who we are
DataBK is an independently operated software product, developed and sold by DataBK Software, the trading name of Fayi Chen (“we”, “us”). We are the data controller for the limited information described in this policy.
You can reach us at support@databk.com.
2. What the application collects
Nothing about your databases. This is a deliberate design decision, not an oversight.
- The application connects to your SQL Server instances, and to the mail server you configure for job notifications. It does not connect to us. There is no telemetry endpoint, no licence check against our servers, and no crash reporter.
- It contains no analytics SDK, no advertising identifier, and no usage counter.
- Your database contents, database names, instance names, backup file paths, and job history stay on your machines and on storage you point them at. They are never transmitted to us or to anyone else.
- You can confirm the absence of outbound traffic yourself by running the software on a network with no route to the internet, or by monitoring it with a firewall. Only your SQL Server connection and your configured mail server should appear.
3. What we collect when you buy a licence
Purchases are handled by Creem, which acts as the merchant of record. Creem is the seller from a legal and tax standpoint; we never see or store your card number.
| Data | Who holds it | Why |
|---|---|---|
| Email address | Creem, and us (for licence delivery and support) | To send your licence key and to contact you about your purchase |
| Name, country, tax residence | Creem | Tax compliance and fraud prevention |
| Payment card details | Creem and its payment processors only | Processing the payment. We never receive these. |
| Order amount, date, licence key status | Creem and us | To verify licences and handle refunds |
We do not maintain user accounts, and we do not build advertising or behavioural profiles.
4. What we collect when you visit this website
Our website is served by Cloudflare. Like any web host, Cloudflare processes standard request data (IP address, user agent, requested URL) to deliver pages and protect against abuse. We use Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors: it reports aggregate page views and referring sites, not individual visitors. Because we set no tracking cookies, this site does not show a cookie consent banner.
We do not use advertising networks, social media pixels, or cross-site trackers of any kind.
5. If you email us
If you contact support@databk.com, we receive your email address and whatever you write. We use it only to answer you and to keep a record of support issues. If you are on our release notification list, we will use your address for that notification and nothing else.
Support requests often include details about your environment — SQL Server version, Windows version, database sizes, and error messages. That information is used only to diagnose the problem you reported. It stays in our mailbox and is not published or shared. Before sending us a log file or a configuration file, review it and remove anything you would not want a third party to read; in particular, do not send us database contents or connection strings containing credentials.
6. Legal bases (UK/EU GDPR)
Where the GDPR applies to you, we rely on the following legal bases:
- Performance of a contract — to deliver a licence you purchased and to provide support.
- Legitimate interests — to protect our website and service against fraud and abuse, and to keep minimal business records. We balance these against your rights.
- Consent — where you have asked us to email you (for example the release notification). You can withdraw at any time by replying to any email.
- Legal obligation — to keep tax and accounting records where required.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal information, to receive it in a portable format, and to withdraw consent. If you are in California, you may request disclosure of the categories of personal information we collect; we do not and will not sell or share your personal information for cross-context behavioural advertising, and we do not use it for targeted advertising.
To exercise any right, email support@databk.com. We aim to respond within 30 days. Because our application collects nothing about your databases, most requests will concern only the email address you used to contact us or to buy a licence.
Where we rely on a third party as an independent controller or processor, you may also need to contact them directly: Creem for purchase and payment data (see creem.io for their privacy notice), and Cloudflare for website hosting and analytics.
8. How long we keep information
- Support emails: up to 24 months after the matter is resolved, then deleted.
- Purchase and tax records: retained as long as tax law requires (typically 5 to 10 years). These records are held by Creem and, where applicable, by us.
- Release notification list: deleted once the notification is sent, or on request.
- Application data and backups: none is held by us — there is nothing to delete, because nothing was collected and no backup file ever reaches our systems.
9. Sharing and international transfers
We do not sell, rent, or trade personal information. We share it only with the service providers named in this policy (Creem for payments, Cloudflare for hosting and analytics, and our email provider), and only as needed for those purposes, or where required by law.
These providers may process data outside your country, including in the United States and the European Union. Where required, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. We are based in China, so support correspondence may be handled from there.
10. Security
Our website is served over HTTPS. Payment data never reaches our systems. We limit access to support correspondence to the operator of the product. No system is perfectly secure, but the most effective protection here is structural: the application holds no personal data for an attacker to take, and your backups never pass through us.
Security of the backups themselves is your responsibility and is supported by the product: backup files can be encrypted in flight with AES, and you choose where they are stored and who can reach that storage.
11. Children
DataBK is professional server software intended for use by IT professionals and is not directed at children. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). If you believe a child has sent us personal information, contact us and we will delete it.
12. Changes to this policy
If we change how we handle personal information, we will update this page and revise the “Last updated” date above. Material changes will be noted on the website. Because the application collects nothing, we do not expect to need to change the substance of this policy often.
13. Contact
DataBK Software, operated by Fayi Chen
Email: support@databk.com
Website: https://databk.com
If you are in the European Union or the United Kingdom and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.