Privacy Policy
Last Updated: 3rd Feb 2025
Exaba Limited (“Exaba”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you visit or use exaba.io and its subdomains (collectively, the “Site”), which provide a range of services including storage services, cloud services, authentication services, and more.
By accessing or using our Site, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
1a. Personal Information from External Authentication Providers and Direct Inputs
External Authentication: We allow users to log in using external authentication providers (for example, Google login). When you authenticate through any external provider, we collect the information that such providers make available to us. This typically includes your email address and public profile information.
Direct Inputs: In addition to authentication data, we collect any information you provide directly through our Site. This may include, but is not limited to, your name, contact details, and other information you choose to enter when using our services.
1b. Anonymous and Analytics Information
Anonymous Data: We collect anonymous analytics data, which may include your IP address, browser type, and other technical data.
Analytics Tools: This information is gathered via third-party analytics tools (such as PostHog and Wix) as well as our internal analytics systems.
1c. Cookies and Tracking Technologies
We use cookies and other tracking technologies for analytics purposes. These help us understand how users interact with our Site and allow us to improve our services.
2. How We Use Your Information
2a. Personal Information
Authentication and Functionality: Data collected via external authentication providers is used primarily to verify your identity and to provide essential functionality (e.g., account access, two-factor authentication, and personalized services).
Communication: Your email address may be used for functional communications (such as 2FA emails) and, if you have opted in, for marketing communications.
2b. Anonymous Analytics Data
Business and Marketing Purposes: Anonymous metrics are used to help us make informed business decisions, improve our services, and support marketing efforts.
Internal Use: Analytics data collected by our internal systems is used to monitor, maintain, and enhance the performance and security of our services.
3. Data Storage and Security
Primary Storage: Personal data is stored primarily on our own infrastructure, secured by industry-standard encryption and other technical safeguards.
Third-Party Platforms: Data collected by third-party services (such as analytics providers and hosting platforms) is managed according to the policies of those providers. In some cases, we may retain copies of such data on our own systems.
Security Measures: We employ various security measures, including encryption, access controls, and regular security reviews, to protect your data from unauthorized access, alteration, or disclosure.
4. Data Sharing and Third Parties
Service Providers: We share your information with third parties only to the extent necessary to provide our services. This includes:
Analytics Providers: For example, PostHog and Wix, which help us analyze and improve our service.
External Authentication Providers: Such as Google and other providers used for user authentication.
No Sale of Data: We do not sell your personal data to any third parties.
Legal Requirements: We may disclose your information if required to do so by law or in response to a valid legal process.
5. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention period may vary depending on the type of data and legal obligations.
6. Your Rights and Choices
Access and Updates: You have the right to access and update your personal data. If you wish to review or make changes to your information, please contact us at the email address provided below.
Opt-Out: If you do not wish to receive marketing communications, you may opt out by following the unsubscribe instructions provided in those communications.
Cookies: Most web browsers allow you to control cookies via your settings. Please note that disabling cookies may affect the functionality of our Site.
7. Geographic Scope and Legal Compliance
Our services primarily operate in New Zealand and are governed by New Zealand laws. By using our Site, you agree that your information will be processed in accordance with these laws.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updates will be posted on our website at exaba.io/privacy-policy. We encourage you to review this page periodically to stay informed about our privacy practices.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us.