Privacy Policy

Last updated: June 25, 2026

• Data you sync
• Pro: scheduled syncs
• Information we do collect
• Google API User Data Policy
• How we protect your data
• How we use information
• Sharing
• Retention
• Your choices
• Contact

Data you sync

• Airtable records. Read from your base and written to your warehouse by the extension, in your browser. This data does not pass through BaseBridge servers.
• Warehouse credentials. When you connect Google BigQuery, an OAuth access token is issued to your browser and used to write to your project. It is kept only for the session and is not transmitted to or stored by us.
• Sync configuration. Settings such as destination names, type mappings, and table selections are stored in your Airtable base via Airtable’s extension storage — not on our servers.

Pro: scheduled syncs

The free tier runs entirely in your browser. Pro keeps your warehouse in sync on a schedule, which by definition runs while your browser is closed, so it works differently. We want to be precise about it.

• Transient server-side processing. During a scheduled run, the BaseBridge worker reads your Airtable records and writes them to your BigQuery dataset. Your records pass through our service in memory only, for the duration of that run, and are not stored at rest.
• Stored credentials. To run unattended, Pro stores a Google refresh token (BigQuery scope, offline access) and an Airtable token (read-only: data.records:read and schema.bases:read). Both are encrypted at rest with AES-256-GCM and decrypted only in memory at run time.
• Metadata we store. We store your schedules, run history (counts, durations, status), and a schema manifest (column names and types, used to detect drift). None of this includes the contents of your rows.
• Alerts. If you configure drift or failure alerts, a run summary (schedule name, status, row counts, never row contents) is sent to the email address or webhook you specify.
• Sub-processors. Pro metadata is stored with Neon (Postgres) on encrypted infrastructure; alert emails are delivered by Resend.

Information we do collect

• Contact details you submit. If you join the waitlist or send feedback, we collect the email address and message you provide. These forms are processed by Formspree.
• Payment information. If you subscribe to Pro, payments are processed by Stripe. We do not receive or store your full card details.
• Basic site analytics. Our hosting provider may log standard request data (such as IP address and user agent) to operate and secure the site.

Google API User Data Policy

BaseBridge’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Our application (an Airtable extension) uses the https://www.googleapis.com/auth/bigquery scope to allow users to export data from their Airtable bases into their own Google BigQuery datasets.

• Access. We only access your BigQuery account when you explicitly initiate a data sync.
• Use. The data accessed is used solely to facilitate the transfer and formatting of Airtable records into your BigQuery tables.
• Storage. BaseBridge does not store your BigQuery data on our servers. On the free tier, all transfers occur directly between the client (your browser) and the Google BigQuery API, and no Google credentials are retained. On Pro, we store a Google refresh token (encrypted at rest), used solely to write your Airtable data into your BigQuery dataset during a scheduled run; the data itself is processed in memory and not stored.
• Sharing. We do not share, sell, or use your Google user data for advertising, serving third-party content, or any other purpose outside of the core data-sync functionality.

How we protect your data

We apply the following safeguards to protect your information, including sensitive data such as Google user data accessed via the BigQuery scope:

• Encryption in transit. All connections to BaseBridge and between the extension and Google’s APIs use HTTPS with TLS 1.2 or higher. Your Airtable records travel directly from your browser to the Google BigQuery API over an encrypted connection.
• Encryption at rest. The limited data we do retain (waitlist and feedback messages, subscription records) is stored with our processors — Formspree and Stripe — which encrypt data at rest using industry-standard AES-256.
• Data minimization. On the free tier, your Airtable table contents and BigQuery data never pass through, and are never stored on, BaseBridge servers. On Pro, scheduled runs process them transiently in memory (see Pro: scheduled syncs) and never store them at rest. In neither case do we retain the contents of your rows.
• Secure handling of OAuth tokens. The Google OAuth access token is issued directly to your browser, held only in memory for the duration of your session, expires automatically (typically within one hour), and is never written to disk, persisted in storage, logged, or transmitted to BaseBridge. It is used only to call the Google BigQuery API directly.
• Least-privilege access. We request only the single https://www.googleapis.com/auth/bigquery scope needed to write to your warehouse, and access your account only when you explicitly start a sync.
• Access controls. Access to the limited contact and billing data we hold is restricted to authorized personnel on a need-to-know basis, and our sub-processors maintain their own SOC 2 / PCI-DSS security programs.
• Incident response. If we become aware of a security incident affecting your personal data, we will investigate promptly and notify affected users as required by applicable law.

How we use information

• To respond to your messages and notify you about access and product updates you requested.
• To process and manage Pro subscriptions.
• To operate, secure, and improve the website and extension.

Sharing

We don’t sell your personal information. We share the limited data above only with the service providers that help us operate (e.g. Formspree, Stripe, Neon, Resend, our hosting provider), or when required by law.

Retention

We keep waitlist and feedback messages for as long as needed to respond and to run the product, and subscription records for as long as required for billing and legal obligations. You can ask us to delete your contact details at any time.

Your choices

You can request access to or deletion of the contact information you’ve given us by emailing privacy@basebridge.dev. You can revoke BaseBridge’s access to your Google account at any time from your Google security settings.

Contact

Questions about this policy? Email privacy@basebridge.dev.

Terms of Service