Last updated: 12 Nov 2026
The contents of your databases and folders never pass through our servers. The agent encrypts each backup on your server and uploads it directly to your Google Drive. We do not have your encryption key.
When you connect Google Drive we request the drive.file permission, which only allows FlashBackup to access files and folders that FlashBackup itself created. We cannot see, read or change any other file in your Drive. We also receive your Google email address to show which account is connected.
We use this access only to create the "FlashBackup" folder, start uploads of your backups, check that uploads completed, and delete backups older than the retention period you chose. We store an encrypted refresh token so backups can run while you are offline. We do not sell Google user data, use it for advertising, or let people read it, except where required by law or with your permission.
FlashBackup's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google Drive at any time in Settings, or revoke access from your Google Account's security page. Disconnecting deletes the stored token.
To run the service, send backup alerts and account emails, process payments, provide support, and keep the service secure.
We share data only with service providers needed to run FlashBackup (hosting, email delivery, Paystack for payments, Google for Drive storage) or where the law requires it.
We keep account data while your account is active. Backup records are kept for up to 12 months. When you delete your organization, its records are deleted from our systems; backups in your Google Drive are not affected.
You can ask for a copy of your data, ask us to correct or delete it, or object to how it is used, by contacting support@flashbackup.com.ng.