Estra is a backend service for apps: databases, sign-in, file storage, realtime, email and push notifications, run for you at estra.cloud. It is operated by Realm 8 ("Realm 8", "we", "us"). This policy explains what personal information we collect when you use Estra, how we use it, who we share it with, how long we keep it, and the choices you have.

It covers the estra.cloud website, the Estra dashboard (estra.cloud/app), the Estra API (api.estra.cloud), the backends we host for our customers, Estra Mail and Estra Push.

1. Two kinds of data, two roles

• Your account and how you use Estra. When you sign up and run projects, we decide how that information is used, and this policy applies to it in full.
• Your app's data and your app's users. The documents, files, user accounts, emails and notifications your app stores in or sends through Estra ("Customer Content") belong to you. We process them only to run the service for you and on your instructions. Your own privacy policy governs how your app collects and uses your users' information. If you are a user of an app built on Estra, contact that app's operator about your data; we will pass along requests we receive and help them respond.

2. What we collect

Account information

Your email address, and optionally your name and company. You sign in to the dashboard with a link we email you; we don't store a password for your Estra account.

Project information

For each project: its name and address, the web origins and settings you choose, the schema and security rules files you upload, the public identifiers of sign-in providers you turn on, and notes the migration kit keeps about your progress. Secrets you give us, such as sign-in provider client secrets, Apple and Firebase push credentials, and the keys we create for your backend, are stored encrypted and are never shown again in the dashboard (a new backend's service key is shown to you once).

Customer Content

Whatever your app stores in its backend: documents, files, and the accounts of your app's users (such as email addresses, display names, profile photos, password hashes, and the identifiers of the Google, Apple or GitHub accounts they sign in with). We don't look at Customer Content except to run the service, to keep it secure, to answer a request from you, or when the law requires it.

Usage and operational data

To run the service, show you your project's numbers and plan capacity, we record measurements such as request and error counts, processing time, response times, database and storage sizes, numbers of documents per collection, numbers of sign-ins and sign-ups, realtime connection counts, emails and notifications sent, the kind of operation a request was, and the country a request came from (derived from the network, not from GPS). These measurements don't include document contents, your users' email addresses or user ids. We also keep short-lived technical logs (which can include IP addresses, request paths and error details) to debug problems and protect the service.

Email sent through Estra

When you or your app send email through Estra Mail, we process the sender, recipients, subject and content to deliver it, and keep a delivery log (sender, recipients, subject, status, and bounce or complaint reports) for 30 days. Recipients who bounce or complain may be kept on a suppression list so we don't send to them again.

Push notifications

When you send notifications through Estra Push, we process device tokens and the notification content to deliver them through Apple's and Google's push services, and keep delivery counts and a list of device tokens those services reported as no longer valid.

Communications

Messages you send us, for example to hello@estra.cloud, and our replies.

The website

estra.cloud has no analytics, advertising or tracking scripts. Its fonts are loaded from Google Fonts, so your browser shares your IP address and browser details with Google when it loads them.

3. Cookies and browser storage

• The dashboard keeps your sign-in session in your browser's local storage. Signing out removes it.
• When someone signs in to an app on Estra with Google, Apple or GitHub, the app's backend sets a short-lived cookie (about 10 minutes) that ties the sign-in to that browser and prevents forged sign-ins.
• An app may use session cookies from its Estra backend; that's part of the app, and its operator decides.

We don't use advertising or analytics cookies.

4. How we use information

• To provide and run Estra: host your backends, carry out your app's requests, deliver your email and notifications, and show you your project's numbers.
• To keep Estra secure and reliable: prevent abuse and fraud, enforce sending limits, pause sending with high bounce or complaint rates, investigate incidents, and fix problems.
• To communicate with you: sign-in links, notices about your projects (for example that a backend is live, failed to update, or was deleted), service and policy announcements, replies to your messages, and the weekly digest if you turn it on.
• To improve Estra, using aggregated usage measurements.
• To comply with the law and enforce our Terms of Service.

We don't sell personal information, we don't share it for cross-context behavioral advertising, and we don't use Customer Content to train machine learning models.

5. Who we share information with

• Service providers who run parts of Estra for us under contracts that limit their use of the data: our infrastructure provider (hosting, databases, file storage, networking and email delivery), Amazon Web Services (email delivery for customers' own domains), Resend (email delivery), Google (Google Fonts on our website, and delivery of Android and web push notifications) and Apple (delivery of push notifications to Apple devices).
• Sign-in providers, when you or your app's users choose to sign in with Google, Apple or GitHub.
• The law and safety: when we believe in good faith that disclosure is required by law or legal process, or is needed to protect the rights, property or safety of our users, the public or Realm 8.
• Business transfers: if Realm 8 is involved in a merger, acquisition or sale of assets, information may transfer as part of it, under this policy's protections.
• With your permission, or at your direction.

6. Estra's shared Google sign-in

Customers may let their app's users sign in with Google through a Google sign-in client operated by Estra, instead of registering their own. In that case Google's sign-in screen names Estra. Google sends the result of the sign-in (the user's name, email address, profile photo and Google account identifier) back through Estra to that app's backend, where it is stored as the app's Customer Content; Estra doesn't keep a separate copy. The app's operator is responsible for that user's data under the app's own privacy policy.

Estra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. How long we keep information

8. Security

Estra uses encrypted connections (HTTPS) everywhere, encrypts stored secrets and keys, gives each customer backend its own database and keys, and limits who at Realm 8 can reach production systems. No system is perfectly secure; if we learn of a breach that affects your information, we'll notify you as the law requires. You're responsible for keeping your service keys secret.

9. International transfers

Estra runs on a global network, so information may be processed in countries other than yours, including the United States, which may have different data protection laws. Where the law requires it, we use appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.

10. Your choices and rights

• You can see and change your account details and projects in the dashboard, delete projects there, and turn the weekly digest on or off in your account menu.
• Depending on where you live (for example in the European Economic Area, the United Kingdom or California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict some processing, and to withdraw consent. To use these rights, email hello@estra.cloud. We'll verify the request and answer within the time the law allows. We won't treat you differently for using them.
• If you're in the EEA or UK, you can also complain to your local data protection authority.
• If you use an app built on Estra, send requests about your data to that app; we'll help its operator respond.

11. Children

Estra is a service for developers and businesses and isn't directed to children. We don't knowingly collect personal information from children under 16 for our own purposes. Customers whose apps are used by children are responsible for meeting the laws that apply to them.

12. Changes to this policy

We'll post changes here and update the date above. If a change is material, we'll tell you by email or in the dashboard before it takes effect.

13. Contact

Questions or requests about privacy: hello@estra.cloud. Realm 8 operates Estra.