Terms of Service

The service is operated by:

The provider operates under the name "BackProve".

BackProve is a SaaS service for creating backups of a customer's databases and files from the Supabase platform, and for verifying that the backups created can be restored.

BackProve is not the primary host of the customer's application, database, or files. The service is a supplementary tool for backup, restore verification, and operational continuity.

• connecting to the customer's database and storage;
• creating encrypted backups;
• storing backups on infrastructure located in the European Union;
• verifying that backups can be restored;
• alerting on backup or verification failure;
• assisted restore at the customer's explicit request.

Using the service requires creating a customer account. Sign-in is passwordless, via a one-time link sent to the customer's email.

The customer must provide accurate and current information and ensure that no unauthorised persons have access to their email inbox or account.

In the initial phase of the service, the provider may restrict registrations, create accounts in a controlled manner, or require prior approval of an account.

The service is intended primarily for persons and entities operating their own digital products, applications, databases, or projects. A customer may be either a business customer or a consumer where the specific plan or ordering process allows it.

A "business customer" means a customer ordering the service in the course of their business, trade, profession, or entrepreneurial activity. A "consumer" means an individual acting outside such activity.

If the customer orders the service as a business customer, consumer-protection provisions do not apply, in particular the consumer's 14-day right of withdrawal, unless expressly stated otherwise.

The provider may require the customer to indicate, when ordering, whether they order as a business customer or as a consumer. The customer is responsible for the accuracy of this declaration.

The contract between the customer and the provider is formed by completing the order, confirming the subscription, or otherwise expressly accepting these Terms within the service.

The contract comprises the following documents:

• these Terms of Service;
• the Privacy Policy;
• the Data Processing Agreement, where the customer processes personal data through the service;
• any special terms of a specific plan;
• the security documentation referenced on the service's website, where expressly referenced.

In the event of conflict, an individual written agreement prevails, then the Data Processing Agreement in matters of personal-data processing, then these Terms of Service.

The service is provided on the basis of a paid subscription according to the selected plan.

Prices are stated on the service's website or in the ordering process. Prices may be stated in USD or another currency according to the payment provider's settings.

Payments are processed by the payment service provider Stripe. The provider does not store the customer's full payment-card details.

The subscription renews automatically at the end of each billing period unless the customer cancels beforehand.

The customer may cancel the subscription in the customer account or by another method stated in the service.

After cancellation, the service remains available until the end of the already-paid billing period, unless expressly stated otherwise.

Cancelling the subscription does not automatically create a right to a refund of a proportionate amount of the price for the already-paid period, unless required by law or an individual agreement.

If the customer is a consumer, they may have the right under applicable law to withdraw from the contract within 14 days of its conclusion.

The customer acknowledges that BackProve is a digital service supplied immediately after ordering. If the consumer expressly consents, when ordering, to the service beginning before the 14-day withdrawal period expires, then in the event of subsequent withdrawal they may be required to pay a proportionate amount of the price corresponding to the service provided up to the moment of withdrawal.

If the service, or the relevant part of it, is fully provided before the withdrawal period expires and the law so permits, the consumer may lose the right to withdraw, provided they gave prior express consent to this and were informed of this consequence.

A consumer may withdraw from the contract by email to legal@backprove.com, stating their name, the email used for registration, and an unambiguous statement that they withdraw from the contract.

Where the contract is concluded through an online interface and the law requires an online withdrawal function, the consumer may also exercise the right of withdrawal through the withdrawal function made available in the service or at: backprove.com/billing. The provider will confirm receipt of the withdrawal statement on a durable medium without undue delay.

This section does not apply to customers who order the service as business customers.

The customer is responsible for the lawfulness, accuracy, and content of the data in their database and storage. The provider does not determine or actively monitor the content of customer data.

• use the service in accordance with the law;
• ensure they have the right to connect BackProve to their database and storage;
• use secure and reasonably limited access credentials;
• provide only such access as is necessary to provide the service;
• not store or process, through the service, data whose backup would be unlawful;
• keep their contact details current;
• respond to security and operational alerts where the nature of the situation requires.

BackProve uses the customer's access credentials solely to provide the service.

For backups, access to the customer's production database is used only for reading and creating backups. BackProve does not write to, edit, or delete the customer's production database.

The exception is assisted restore, where the customer expressly requests restoring a backup into a new, empty project or environment. If the target environment is not empty, the service may refuse the restore. Access credentials provided for assisted restore are encrypted, used only for that purpose, and then permanently deleted.

Backups are created and stored in encrypted form. Backups are stored on infrastructure located in the European Union.

The provider technically holds the encryption keys necessary to create and restore backups. The service is therefore not a zero-knowledge or end-to-end-encrypted service in which the customer alone would hold the keys.

The provider applies appropriate technical and organisational measures to protect data, including encryption, separation of internal components, restriction of administrator access, and operational monitoring.

The customer acknowledges that no service can guarantee absolute security or uninterrupted availability. BackProve is a tool for reducing the risk of data loss, not a guarantee that data loss, outage, or corruption will never occur.

Backups are retained for the period set by the selected plan, the service configuration, or the retention policy available in the service. Older backups may be deleted automatically under the retention policy.

After the paid period ends, the account enters a 30-day data-retention period. During this period the customer may resubscribe to restore access with data intact, export data where available, or request earlier deletion. After 30 days, the customer's backups, related artifacts, and stored access credentials are permanently deleted, unless the law requires otherwise.

Accounting and legal records, such as invoices, tax records, and consent records, are retained for the periods required by law and are not deleted by this process.

The provider endeavours to operate the service reliably and securely. The service may nevertheless be temporarily unavailable, in particular due to maintenance, updates, security measures, third-party outages, or circumstances beyond the provider's control.

The provider does not guarantee a specific level of availability unless a separate SLA is agreed with the customer.

The customer must not use the service:

• in breach of the law;
• to store or back up data they are not authorised to;
• to compromise the security of the service or third parties;
• to attempt to gain unauthorised access;
• to circumvent technical limitations of the service;
• in a manner that would unreasonably burden the service's infrastructure;
• to store data whose processing would require a special legal or security regime, unless that regime was expressly agreed in writing in advance.

The provider processes personal data in two roles.

In relation to the data of the service's customers — such as account, sign-in, payment, communication, and support data — the provider acts as a controller.

In relation to the content of the customer's databases and files backed up through the service, the provider acts as a processor and the customer as controller, or as processor in relation to their own customer.

Where customer data contains personal data, the Data Processing Agreement available at backprove.com/dpa forms part of the contract.

The provider may use third parties to provide the service, in particular for hosting, payment services, and email delivery.

A current list of sub-processors and other relevant service providers is available at backprove.com/sub-processors.

The provider will ensure that sub-processors involved in processing personal data are bound by appropriate contractual obligations.

The provider may modify, improve, extend, or adjust the service over time.

The provider may change these Terms, in particular due to changes in law, technical changes to the service, price changes, security reasons, or feature extensions.

The customer will be informed of material changes by a reasonable means, such as email or an in-service notice. If the customer disagrees with a change, they may terminate the subscription at the end of the current billing period.

The provider is liable for damage only to the extent set by law and these Terms.

The service is provided as a supporting tool for backup and restore verification. The customer remains responsible for their overall backup strategy, the security of their own infrastructure, access management, the lawfulness of data processing, and the operation of their applications.

Towards business customers, the provider's total liability is limited to the amount paid by the customer for the service in the 12 months preceding the event giving rise to the damage, unless the law requires otherwise.

Towards business customers, the provider is not liable for indirect damage, lost profit, loss of business opportunity, reputational harm, or damage caused by misconfiguration of the customer's infrastructure, unless the law requires otherwise.

Nothing in these Terms excludes or limits liability where it cannot be excluded or limited under applicable law, including liability for intentional misconduct, gross negligence where such exclusion is not permitted, or mandatory consumer rights.

The customer may terminate the account or subscription under the rules stated in the service.

The provider may suspend or terminate the service if the customer breaches these Terms, fails to pay, endangers the security of the service, or uses the service unlawfully.

After termination, customer data is handled according to the retention policy, the Privacy Policy, and, where applicable, the Data Processing Agreement. Under the current retention model, customer backup data and stored credentials are retained for 30 days after the paid period ends and then permanently deleted, unless earlier deletion is requested or the law requires otherwise.

These Terms are governed by the law of the Czech Republic.

If the customer is a business customer, disputes will be resolved by the competent courts of the Czech Republic.

If the customer is a consumer, this choice of law and jurisdiction does not deprive the consumer of the protection afforded by mandatory provisions of the law of the country in which the consumer has their habitual residence, where such protection applies.

A consumer may also turn to the Czech Trade Inspection Authority (Česká obchodní inspekce) as the body for out-of-court resolution of consumer disputes.

The former European Online Dispute Resolution platform has been discontinued and is therefore not referenced as a complaint submission channel.

Questions about these Terms: legal@backprove.com · https://backprove.com