Privacy Notice

This notice explains what personal data MyBase Live collects, why, and what you can do about it. It applies to the MyBase Live website and application.

1. Who is responsible

Mohammed Almadhoun, trading as Olive Arc Technology, of Gazimağusa, North Cyprus, is the controller of the personal data described here. Contact: [email protected].

2. What we collect

Account data

Your name, email address, password (stored only as a cryptographic hash, never in readable form), optional company name, and your currency and display preferences.

Connected platform data

When you connect Google AdMob, Unity Ads, Google Play or the Apple App Store, we store the access credentials or tokens needed to read your reports. These are held encrypted at rest and are never shown back to you in full or shared with anyone else. From those platforms we read earnings, impressions, installs, subscription and country-level performance figures for your own apps.

Billing data

We store your subscription status, plan, the price locked to your subscription, and the identifiers Paddle gives us for your customer and subscription records. We never see or store your card number, bank details or billing address — those go directly to Paddle.

Technical data

Server logs recording requests to the Service, including IP address, timestamp and error diagnostics, kept for security and troubleshooting.

3. What we do not do

• We do not sell your personal data, and we never have.
• We do not share your revenue figures with other users, advertisers or data brokers.
• We do not use your connected platform data to train machine-learning models for third parties.
• We do not run advertising or third-party tracking pixels on the Service.

4. Why we use it

• To provide the Service — reading, storing and displaying your platform data. Necessary to perform our contract with you.
• To bill you — managing subscriptions, renewals and credit. Necessary to perform our contract with you.
• To keep the Service secure — detecting abuse, fraud and faults. Our legitimate interest in running a safe service.
• To contact you — service notices, billing notices and support replies. Necessary to perform our contract with you.

5. Who we share it with

We use a small number of processors, each only for what it does:

• Paddle — payment processing and as Merchant of Record. Paddle is an independent controller for the payment data you give it; see the Paddle privacy notice.
• Google Cloud — hosting and database services for the Service, in the European Union.
• The platforms you connect — Google and Apple, when we request your reports on your behalf.

We also disclose data where the law requires it.

6. Where your data is held

The Service runs in Google Cloud’s europe-west1 region. Where data moves outside the region — for example to Paddle, or to a platform you have connected — it does so under that provider’s own safeguards and standard contractual clauses.

7. How long we keep it

• Account and platform data: while your account is open, and deleted within 30 days of you deleting the account.
• Platform credentials: deleted immediately when you disconnect a platform.
• Billing records: retained as long as tax and accounting law requires, typically several years.
• Server logs: retained for a limited period for security and diagnostics.

8. Your rights

You may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it, and you may ask for your data in a portable format. Write to [email protected] and we will respond within 30 days. You can also disconnect any platform, or delete your account, yourself from your settings. If you are in the UK or EEA and are not satisfied with our response, you may complain to your local data protection authority.

9. Cookies

We use only what the Service needs to work: a session cookie to keep you signed in, and local storage for your own display preferences. We do not use advertising or analytics cookies. Paddle sets its own cookies during checkout, which its privacy notice covers.

10. Security

Traffic is encrypted in transit with TLS. Platform credentials are encrypted at rest. Passwords are hashed, not stored. Access to production systems is restricted and audited. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant authority as the law requires.

11. Children

The Service is for developers and businesses and is not directed at children. We do not knowingly collect data from anyone under 18.

12. Changes

We will post any update here and change the date at the top. If a change materially affects how we use your data, we will email account holders before it takes effect.