1. Scope
This policy applies to the website www.escbase.xyz, Escbase App on macOS and Windows, accounts, Pro payments, installer/update downloads, device heartbeat and the affiliate program.
Escbase prefers to process on your machine. Projects, scripts and rendered videos are not uploaded to Escbase servers for storage by default.
2. Information we collect
We only collect information reasonably needed to provide and protect the service:
- Google account: name, email, profile photo and Google identifier when you choose to sign in with Google. Escbase never receives your Google password.
- Account and plan: Escbase user id, trial or Pro status, trial render count, plan term and related activations.
- Payments: order code, amount, currency, status. PayPal processes English checkout; PayOS processes Vietnamese checkout. Escbase does not store card or bank account numbers.
- Device and technical: app-open heartbeat, app/engine version, operating system, installer or update requests, IP address and basic request logs processed by hosting/storage providers.
- Affiliate: referral code, clicks and orders attached to a code. The referral cookie is set by the server, typically about 90 days.
- Support: content you send on Messenger.
3. Projects and files on your machine
The app processes projects, images, audio and video on your device. Those files are not uploaded to Escbase unless you send them for support, or you choose to call a third-party service (for example voice or publishing APIs).
4. How we use information
Information is used to:
- authenticate your account and protect the session;
- attach trial, Pro and orders to the correct Google account;
- process payments, prevent fraud and block self-referrals;
- deliver installers, the engine and signed updates;
- show devices that have used the app and provide support;
- calculate affiliate commission;
- meet legal, tax and accounting duties.
Escbase does not sell email lists or account data to third parties for advertising.
5. Google user data
Escbase only requests basic Google identity data to create an account, sign you in, and attach Pro and orders. We do not use Google data for ads, do not sell it, and do not use it to train general-purpose AI models.
Google data is shared only with infrastructure providers acting for Escbase (for example Supabase), to provide a feature you request, when the law requires it, or with your consent. Use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including Limited Use.
6. Service providers
Google (sign-in), Supabase (accounts, orders, plans), PayPal and PayOS (payments), Vercel (website hosting), Cloudflare/R2 (installers, static images, updates). They process data under their own policies. API keys you enter in the app (for example ElevenLabs) are managed by you and that provider.
7. Cookies
The website uses technical cookies and an affiliate cookie. The desktop app does not run third-party ad-network ads. You can block cookies in the browser; some referral features may then fail to attach an order.
8. Retention
Account and plan records are kept while you use Escbase and as needed to run the service. Payment records may be kept longer for accounting, fraud prevention and legal duties. The affiliate cookie expires as stated above. Project files on your machine are deleted only by you.
When we no longer need information, we delete or de-identify it unless the law requires a longer hold.
9. Security
Escbase uses reasonable technical and organizational measures: Google sign-in, access-controlled account and plan data, signed installer/update URLs. No system is perfectly secure. Lock your computer and protect your Google account.
10. Your rights
You can sign out in the app, revoke Escbase access in your Google Account, and delete projects on your machine at any time. You may ask to see, correct or delete account information via m.me/escbasexyz. Some transaction records may have to be kept by law.
11. Children
Escbase is not directed at children under 13 or under the digital-consent age where they live. We do not knowingly collect data from children who cannot lawfully consent. If you are a parent and think your child created an account, contact us to delete it.
12. Changes and contact
This policy may change as the product changes. The new effective date is posted on this page. Privacy questions: m.me/escbasexyz. Terms of use: /terms.