Privacy Policy

This policy applies to multibasestudio.com, account and payment pages, APIs operated by MultiBase Studio, and the desktop application. It does not apply to processing performed by databases, infrastructure, drivers, extensions, or external services that you connect to.

• Account data: first and last name, email address, optional phone number, country, language, time zone, avatar, and verification status.
• Authentication data: password stored in hashed form, session identifiers, verification date, and sign-in provider when you choose Google or GitHub. We do not receive your password from those providers.
• License and device data: masked key, plan, status, validity dates, technical device identifier, optional label, first and last activity, and activation or revocation status.
• Payment and subscription data: plan, amount, currency, status, dates, and transaction, order, or subscription identifiers supplied by PayPal. We do not store your full card number or PayPal credentials.
• Technical data: application version, operating system, architecture, download event identifiers, error and security logs, IP address temporarily processed by infrastructure, browser, and timestamps.
• Communications: content and metadata of emails or support requests you send us, together with your marketing communication preferences.

Connection credentials and strings, queries, scripts, schemas, results, and database content are stored or processed on your device according to the application settings. MultiBase Studio does not transmit them to its servers during normal operation.

The application encrypts sensitive connection values locally using mechanisms available in the application and operating system. Effective protection also depends on the security, permissions, and configuration of your device.

To validate a license, the application sends our API the key and the minimum technical information needed to check its status and authorized devices. This validation does not include your database content, queries, scripts, or connection credentials.

If you voluntarily include this type of data in a support request, we process only what is needed to respond. We recommend removing passwords, keys, personal data, and secrets before sending files or screenshots.

We obtain information directly from you when you register, purchase, configure your profile, or contact us; automatically when the website or application communicates with our services; and from providers you authorize, such as Google, GitHub, and PayPal. With OAuth, we request only the data needed to identify, create, or link your account.

When you choose to sign in with Google, we use the authorized profile data, such as your name, email address, and account identifier, exclusively to identify you, create or link your account, and maintain your MultiBase Studio session. We do not request access to Gmail, Google Drive, Calendar, or any other content in your Google Account.

We do not sell, transfer, or use Google data for advertising, advertising profiles, or model training. We retain account data while the account remains active and delete or anonymize it according to this policy's retention section when you request account closure, unless a legal obligation requires a longer retention period.

• Contract performance: create and authenticate accounts, deliver features, activate licenses, manage devices, process purchases and subscriptions, and provide support.
• Legal obligations: retain accounting and transaction documentation, respond to valid requests, and prevent unlawful activity.
• Legitimate interests: protect accounts and systems, detect abuse or fraud, diagnose failures, measure downloads in aggregate, and improve stability and experience.
• Consent: send marketing updates when requested and use optional technologies that require authorization. You may withdraw consent without affecting prior processing.

We use local storage and equivalent mechanisms that are strictly necessary to maintain sessions, remember security and language settings, and operate accounts. We do not use them to sell profiles or for cross-site behavioral advertising. If we introduce non-essential analytics or advertising, we will update this notice and provide controls required by law.

We may disclose the minimum necessary information to providers acting on our behalf for hosting, infrastructure, transactional email, security, support, and payments. PayPal processes payments under its own policies; Google and GitHub process the sign-in you authorize.

We may also disclose information when required by law, a valid order, or the defense of rights, or during a business reorganization subject to confidentiality safeguards. We do not authorize our providers to use it for incompatible independent purposes.

Technology providers may operate in countries other than your own. Where required by applicable law, we use contracts, data protection clauses, or other recognized mechanisms to protect transfers. You may request information about applicable safeguards through our contact email.

• Account and profile data is retained while the account is active and for the time reasonably necessary to complete its closure.
• License, payment, billing, and fraud records are retained for periods required by tax, accounting, contractual, and claims-prevention rules.
• Technical and security logs are retained for limited periods for diagnostics, integrity, and abuse prevention. Download events are used in aggregate statistics, and the event record does not store personal data.
• Support requests are retained as needed to resolve the case and maintain a reasonable service history.

We may retain information longer when required by law, a dispute, security investigation, or the need to establish, exercise, or defend claims. It is then deleted, anonymized, or securely isolated.

We apply reasonable technical and organizational measures, such as encryption in transit, password hashing, access controls, revocable sessions, request throttling, and data separation. No system is completely infallible. Protect your password, keep your device updated, and notify us if you suspect unauthorized access.

Depending on your location and applicable law, you may request information and access, correction or updating, deletion or cancellation, objection, restriction, portability, withdrawal of consent, and review of automated decisions. You may also complain to the competent data protection authority. Residents of Peru may exercise ARCO rights; residents of the EEA or United Kingdom have rights recognized by their laws; and California residents may request to know, correct, or delete information and not receive discriminatory treatment for exercising their rights.

Write to admin@gliyen.com with the subject “Privacy Request.” State the right you wish to exercise and the affected account. We may request reasonable information to verify your identity. You may act through an authorized agent where permitted by law. We will respond within the applicable legal deadline and explain any exception.

We do not sell personal information or share it for cross-context behavioral advertising. Therefore, a separate sale or targeted-advertising opt-out mechanism is not currently necessary.

The service is intended for people with legal capacity to contract and is not designed for children under 16. We do not knowingly collect personal information from children under that age. If you believe a child provided us information without valid authorization, contact us so we can review and delete it where appropriate.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. We may apply automated rules to detect abuse, protect sessions, or enforce license limits; if a measure affects your access, you may request review.

We may update this policy to reflect changes to the product, providers, or legal requirements. We will publish the new date on this page and, for material changes, provide reasonable additional notice. Prior processing is governed by the version in effect when it occurred.