Privacy Policy

Last updated · 4 May 2026

This policy explains what personal data ScaleBase collects, why we collect it, where it is stored, and the choices you have. ScaleBase is operated by Fixer of the North, a company registered in Finland. By using ScaleBase you agree to the practices described here.

1. Definitions

Throughout this policy, the following terms have the following meanings:

• “Service” refers to the ScaleBase web application and any related products operated by Fixer of the North.
• “Personal Data” is any information relating to an identified or identifiable natural person.
• “Usage Data” is information collected automatically, such as the pages you visit and the actions you take.
• “Account” is the unique account created for you to access the Service.
• “You” is the natural person accessing the Service, or the legal entity on whose behalf they are accessing it.

2. Personal Data we collect

Data you provide directly

When you sign up for ScaleBase using Google, we receive your name, email address, and Google profile picture from Google. We do not request a password, and we never see your Google account password.

If you connect a Scaleway account to ScaleBase, you provide a Scaleway IAM API key (access key and secret key). The secret key is encrypted at rest with AES-256-GCM before it is written to our database. We use this key only to call Scaleway APIs on your behalf — for example, to list your projects, create a database, or read schema information.

Anything you type into ScaleBase’s SQL editor, table filters, or row editor is sent to your own database (not to Fixer of the North) and is not retained by us beyond the lifetime of the request, except where noted in section 4.

Data collected automatically

Like most web applications, ScaleBase collects technical data when you use the Service. This includes your IP address, browser type and version, device type, time zone, the pages you visit on ScaleBase, and the timestamps of those visits. This data is used to operate the Service and to detect abuse.

We use cookies and similar local-storage mechanisms to keep you signed in, remember your interface preferences, and maintain the security of your session. We do not use advertising cookies and we do not sell usage data to third parties.

Data from third-party authentication

When you sign in with Google, Google may share with us the limited profile information you authorise during the consent screen. We do not request access to your contacts, calendar, drive, or any other Google service beyond your basic profile and email address.

3. How we use Personal Data

We use Personal Data to:

• Provide, maintain, and improve the Service.
• Create and manage your account and authenticate you on subsequent visits.
• Call Scaleway APIs on your behalf using the credentials you have provided, in order to deliver the features you have requested.
• Communicate with you about service updates, security notices, and support requests.
• Detect, investigate, and prevent abuse, fraud, or violations of our Terms of Service.
• Comply with legal obligations.

We do not use Personal Data for advertising, profiling, or automated decision-making that produces legal effects.

4. Audit logs and database queries

ScaleBase maintains an audit log of security-relevant events on your account, such as connecting a new Scaleway account, revealing a stored credential, or signing in. The log records the action, the resource it was performed against, the time, and the user who performed it. It does not record query results or row contents from your database.

Queries that you run from the SQL editor, and table reads or writes you perform from the data browser, are forwarded to your own database for execution. The result rows are sent to your browser to be displayed. Fixer of the North does not log query bodies or result rows in long-term storage.

5. Where data is stored

ScaleBase’s application servers and primary database are operated on infrastructure located in the European Union. Your account record, encrypted IAM keys for any database providers you have connected, and audit logs are stored there.

We also use third-party providers for authentication, analytics, logging, observability, and similar operational functions. Some of these providers — or the underlying infrastructure they run on — may operate outside the European Union. The information we share with them is limited to operational telemetry (request paths, error traces, performance metrics, and usage events) and does not include the contents of your databases or the secret half of any IAM key you have stored in ScaleBase. Where transfers of personal data to jurisdictions outside the European Union occur, we rely on the Standard Contractual Clauses or other lawful transfer mechanisms.

If you sign in with Google, your authentication request transits Google’s infrastructure, which is operated globally by Google LLC under its own privacy policy.

6. Sharing and disclosure

We do not sell Personal Data. We may share Personal Data only:

• With sub-processors that operate parts of the Service (hosting, authentication, log aggregation), under contracts that bind them to confidentiality and to using the data only for the purposes we specify.
• When required by law, by court order, or by a binding request from a public authority.
• To protect the rights, property, or safety of Fixer of the North, our users, or others, including to enforce our Terms of Service.
• In connection with a corporate transaction such as a merger, acquisition, or asset sale, in which case the acquirer will be bound by this Privacy Policy or a successor with at least equivalent protections.

7. Retention

We retain Personal Data for as long as your account exists and for as long as we have a legitimate purpose for keeping it (for example, to comply with legal obligations or to defend legal claims). When you delete your account, we delete or irreversibly anonymise your Personal Data within 30 days, except for records we are required to retain for legal, accounting, or fraud-prevention purposes.

Encrypted Scaleway credentials are deleted from our database immediately when you remove the corresponding connection from ScaleBase. Once deleted, the encrypted blob cannot be recovered.

8. Security

We use commercially reasonable measures to protect Personal Data, including encryption in transit (TLS 1.3), encryption at rest of sensitive blobs (AES-256-GCM), and access controls on our administrative systems. No method of transmission over the Internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on your jurisdiction, you may have the right to access, correct, port, restrict the processing of, or delete your Personal Data, and to object to certain processing. You may exercise most of these rights directly in the Service (for example, by editing your profile or deleting connections). For requests we cannot satisfy in-product, contact us at contact@fixerofthenorth.com and we will respond within 30 days.

If you are in the European Economic Area or the United Kingdom and you believe we have not handled your Personal Data lawfully, you have the right to lodge a complaint with your national data protection authority. In Finland, that is the Office of the Data Protection Ombudsman.

10. Children

ScaleBase is intended for users aged 18 and over. We do not knowingly collect Personal Data from children under 13. If you believe a child has provided Personal Data to us, please contact us and we will delete it.

11. Links to other websites

ScaleBase contains links to third-party websites and services (including Scaleway, Google, and others). We are not responsible for the privacy practices of those sites. You should review their privacy policies before providing Personal Data.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If the changes are material, we will notify you by email or through a prominent notice in the Service before the changes take effect.

13. Contact

For questions about this Privacy Policy, or to exercise your rights as described in section 9, contact us using the details below.