Trust Center

Everything your security, privacy, and procurement teams need about PrimeBase — in one place. Plain language, no buried clauses.

Encrypted, isolated.

TLS in transit, AES-256 at rest, every workspace isolated by row-level security at the database.

You own your data.

Export it, delete it, restrict who in your team can see what. The keys are yours.

Plain-language docs.

Privacy, terms, cookies, sub-processors — written so a human can actually read them.

§01

What's here

This Trust Center is the single page to send to your security, privacy, or procurement team. Every linked document is written in plain language and reflects what PrimeBase actually does today — not aspirational claims.

If you can't find what you need, email support@primebase.io. A real engineer reads it.

§02

Security

Encryption everywhere, strict workspace isolation, role-based access. Application-layer encryption for sensitive identifiers and authentication tokens. CAPTCHA and honeypot on public forms. Secrets in Google Cloud Secret Manager.

→ Read the security overview

§03

Privacy

What we collect, why we collect it, who it's shared with, and the controls you and your end users have. Includes the Google API Services User Data Policy section (required for our Calendar and Gmail integrations).

→ Read the Privacy Policy

§04

Terms of Service

The agreement between you and PrimeBase. Covers your data, acceptable use, third-party integrations, copyright complaints, fees, limitation of liability, indemnification, termination, and governing law.

→ Read the Terms of Service

§05

Cookies and tracking

We use cookies for sign-in, basic preferences, anonymised product analytics, and bot protection on public forms. We don't use advertising or cross-site tracking cookies.

→ Read the Cookie Policy

§06

Sub-processors

The third-party services we use to deliver PrimeBase — mostly Google Cloud Platform for hosting and AI, plus Postmark for email and hCaptcha for bot protection. We keep the list short on purpose.

→ See the sub-processor list

§07

Your data controls

Inside the product

Custom roles & permissions on Business+ — restrict who can see and do what in your workspace.
Access rules — scope users to their own records, assigned records, or specific tags per module.
CSV export — admins can self-serve exports for customers and inventory batches.
Account closure — self-serve from Settings, with 30-day recovery before permanent deletion.

→ Account deletion guide

§08

Where we host

PrimeBase is hosted on Google Cloud Platform in the United States. Your workspace data is encrypted at rest, backed up daily, and isolated from every other customer by Postgres row-level security. See the hosting section on the security page for more.

§09

Reporting a security issue

Found a vulnerability? Email support@primebase.io with “Security” in the subject line. We'll acknowledge your finding, work with you on the fix, and credit you publicly if you'd like. Researchers acting in good faith are welcome.

§10

Talk to us

Procurement questionnaire, custom DPA request, security review, or anything else — we'd rather you write than guess. A real engineer reads support@primebase.io and we aim to respond within one business day.

Email us anything · support@primebase.io

Questions?

Need something specific?

A real human reads support@primebase.io and we aim to respond within one business day.

Email us anything

support@primebase.io