Your work is yours. I run the servers; I don't mine them.
No analytics on you, no pixels, no third-party scripts, and nothing about your work is ever sold or shared.
Cancel in a click. Every area — time, invoices, mileage, files, documents — exports whenever you ask, in formats you can actually open; a one-button whole-workspace bundle is on the runway. A closed workspace goes dormant — nothing is deleted.
The assistant is off unless you bring your own key. Then it talks to your provider, not to me. I never hold the key and never read your work.
Questions about any of this come to me, and I answer.
⟩ Write to AaronThe long version exists and says the same thing in lawyer. If they ever disagree, this one wins.
I don't read your work. Not to improve anything, not to train anything. The only time I'd look at your data is if you write and ask me to fix something in it.
No trackers, no analytics on your work. The marketing pages count page views with a privacy-first, cookieless counter (Tinylytics) — no cookies, and nothing that follows you around the web. Inside the app itself there is no analytics or advertising script at all; the only third-party code there is Spotify's player, and only if you connect it.
Nothing is sold or shared. Four companies touch your data at all: the servers, the file storage, the payment processor and the email sender. Two more only if you switch them on yourself — Spotify for the player, and whichever model you point the assistant at. All six are named in the long version, and none of them get your content to use.
The only email I send is essential account notices (a password reset, something about your account) and the occasional product update — a new feature, a change worth knowing — which you turn off for good in one click from any of them. And, if you send a request through someone's Ground Control, a few emails about that one request — a receipt, their replies, the closing line — each with a one-click stop. No marketing, no tracking pixels, no “we miss you.”
Leaving means your data comes with you — every area exports, files included, in formats that open without me. A one-button whole-workspace bundle is on the runway.
Deleting means deleting — gone from backups within thirty days, and I'll tell you when it's done rather than making you wonder.
If the assistant is on, it reads your workspace to answer — and your key is yours. When you ask it something, it reads the records you can already see, at that moment, to reply — that read access is the whole point of it. The text you send goes to the provider you chose, on your own account and under their terms; I never hold the key and never see the reply, and nothing about your workspace is stored at the provider. It writes nothing back, it's off until you paste a key, and removing the key ends it.
If something leaks, I'll tell you fast — what happened, what was in it, and what I did about it. Within days, not after a legal review.
This is the short version of the site, cut down to what reads well on a small screen. The full thing — every instrument explained, the pricing configurator, the whole story — lives on the desktop site. So does the app: Cloudbase is meant to be worked from a real screen, at a desk, with your hands on it.