Privacy Policy

Last updated: June 14, 2026

1. Introduction

At Savebase, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including our website and Chrome Browser Extension. By using Savebase, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information that you provide directly to us, including:

  • Account information (email address, password)
  • Google account information (name, email address, profile picture) when you sign in with Google
  • Google Sheets access tokens (encrypted) when you connect the Google Sheets integration
  • Saved content, URLs, and bookmarks you explicitly choose to sync to our platform
  • Media files (images, videos) from posts you save — by default, media is displayed using the original platform's temporary URLs and is not stored on our servers. If you are a paid subscriber and explicitly enable the Permanent Media Backup feature in your settings, media files are then fetched from the original platform and stored permanently in our secure cloud storage. This consent-based backup ensures your saved content remains accessible even if the original source removes it. Free users and paid users who have not enabled backup are not affected — no media is stored on our servers for these users.
  • Usage data and preferences

3. Browser Extension Specific Data

To provide our unified bookmarking service, the Savebase browser extension interacts with specific websites you visit. Supported platforms currently include Instagram, Facebook, Threads, X (Twitter), Reddit, LinkedIn, TikTok, and others.

  • Authentication & Session Data: The extension securely captures temporary session data (such as CSRF tokens or cookies) locally on your device for supported platforms. This is strictly used to securely fetch the metadata (text, images, author) of the posts you are saving. This data is never transmitted to our servers.
  • Website Content: When you explicitly save a post or page, or when the extension detects you natively bookmarking a post on a supported platform, we collect the content of that specific post (text, media, URL) to store in your Savebase account.
  • Media Permanence: Social media platforms often serve media via temporary URLs that expire. When you save a post containing images or videos, our service fetches and stores a permanent copy of that media in Backblaze B2 cloud storage on your behalf, so your saved content remains viewable over time.
  • Browser Bookmarks: If you use the "Import Bookmarks" feature, the extension will read your browser's bookmarks strictly to import them into Savebase.

We do not track your general web browsing history, and we only capture the content of pages or posts you actively choose to save.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Authenticate your identity via Google Sign-In
  • Export and sync your saved posts to Google Sheets on your behalf
  • Sync, display, and organize your saved web content
  • Permanently store media from saved posts when you are a paid subscriber and have explicitly enabled the Permanent Media Backup feature — this keeps your library accessible even if the original content is removed
  • Send you technical notices and support messages

5. Chrome Web Store & Data Disclosure

In compliance with the Chrome Web Store User Data Policy:

  • We do not sell your personal information or user data to third parties.
  • We do not share your data for advertising purposes.
  • We only transfer or disclose user data to third parties as necessary to provide the core features of the Savebase service, or to comply with applicable laws.
  • We do not use your data to determine creditworthiness or for lending purposes.

6. Google API Data — Sharing, Transfer & Disclosure

Savebase uses Google APIs to provide Sign-In with Google and the Google Sheets export integration. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • Google Sheets access is used solely to create, read, and update spreadsheets that you explicitly designate for your Savebase library export. We do not read, access, or modify any other Google Sheets files in your account.
  • Sign-In with Google data is used solely for account authentication within Savebase.
  • All Google OAuth tokens are encrypted at rest using industry-standard encryption and are never shared, sold, or disclosed.

7. Third-Party Infrastructure & Sub-Processors

To deliver Savebase, we rely on the following third-party services. Each is contractually bound to handle your data securely and only for the purposes described:

  • Supabase (Singapore): Our primary database and authentication provider. Your account data, saved posts, and metadata are stored on Supabase infrastructure located in the Singapore (ap-southeast-1) region. We have a signed Data Processing Agreement (DPA) with Supabase. Learn more at supabase.com/privacy.
  • Backblaze B2 (Cloud Storage): If you are a paid subscriber and have enabled the Permanent Media Backup feature, media files (images and videos) from your saved posts are stored as permanent copies in Backblaze B2 object storage. This ensures your saved media remains accessible even if the original platform removes it. No media is stored in Backblaze B2 for free users or paid users who have not enabled this feature. Learn more at backblaze.com/privacy.
  • Coolify (Self-Hosted): We use Coolify to self-host parts of our backend infrastructure, including the media processing pipeline responsible for fetching and uploading media to Backblaze B2.
  • Cloudflare: Our website and certain services are delivered via Cloudflare, which provides DNS, CDN, and DDoS protection. Cloudflare may process request metadata (such as IP addresses) as part of this service. Learn more at cloudflare.com/privacypolicy.

8. International Data Transfers

Your personal data is stored and processed on servers located in Singapore (via Supabase) and in Backblaze B2 data centers. If you are accessing Savebase from outside Singapore, your data will be transferred to and maintained on servers in a different jurisdiction. By using Savebase, you consent to this transfer. We take appropriate measures to ensure your data is handled securely and in accordance with this Privacy Policy regardless of where it is processed.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information. All data is encrypted in transit (HTTPS) and at rest. Access tokens for connected platforms (including Google OAuth tokens) are stored using industry-standard encryption. Media files stored in Backblaze B2 (only for paid subscribers who have enabled Permanent Media Backup) are accessible only through signed, access-controlled URLs. While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure.

10. Data Retention & Deletion

We retain your information for as long as your account is active or as needed to provide you services. You can request the deletion of your data at any time through your account settings. Upon account deletion, all saved bookmarks, configurations, associated OAuth tokens, and stored media files (in Backblaze B2) are permanently removed from our active systems.

11. Children's Privacy

Savebase is not directed to anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected] and we will promptly delete such information from our systems.

12. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Revoke Google OAuth access at any time via your Google Account Permissions page or through your Savebase Settings

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are material, notify you via email or a prominent notice within the Savebase dashboard. We encourage you to review this policy periodically. Continued use of Savebase after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].