Privacy policy — 2Click Backup

1. Controller

The controller of personal data collected through 2clickbackup.com is UAB „IT Edge Pro“, registration code 305471831, Miglės g. 36, Didžioji Riešė, 14264 Vilniaus r., Lithuania. Contact for any privacy question: info@2clickbackup.com.

This policy covers data about our customers, their contact persons and website visitors. The data you store in your backup bucket is covered separately: there you are the controller and we act as your processor under section 12 of the terms of service.

2. What we collect and why

Data	Purpose	Legal basis
Name, email, company, country, password (stored only as a salted hash), two-factor authentication seed (stored encrypted)	Creating and securing your account	Contract (Art. 6(1)(b) GDPR)
Subscription details, billing name and address, VAT number, invoices	Providing the service, billing, accounting and tax	Contract; legal obligation (Art. 6(1)(c))
Payment card details	Payment — entered on Stripe's pages and stored by Stripe; we never see or store full card numbers	Contract
Storage usage of your bucket, access key identifiers	Providing the service and showing your usage	Contract
Messages you send through the contact form (name, email, company, message)	Answering your enquiry	Legitimate interest in responding (Art. 6(1)(f)); contract where it leads to one
IP address and technical request data, error logs	Security, preventing abuse (for example limiting login attempts), fixing faults	Legitimate interest (Art. 6(1)(f))
Service emails you receive (confirmation, password reset, account notices)	Operating your account	Contract

We do not use your data for advertising, do not sell it, and do not make automated decisions with legal effects about you.

3. Who we share it with

We use these service providers, each bound by a data processing agreement:

Stripe (Stripe Payments Europe Ltd., Ireland) — payments, invoices, customer billing portal;
Telia Lietuva, AB (Lithuania) — email hosting, including the account emails we send you;
Wasabi Technologies — cloud storage for your backup bucket, EU region (Frankfurt).

The website and account database run on our own server in Lithuania. We disclose data to public authorities only where the law requires it. Where a provider transfers personal data outside the European Economic Area, it does so under the European Commission's standard contractual clauses or another lawful transfer mechanism.

4. How long we keep it

Account data: while your account exists. You can delete an account without subscriptions yourself; otherwise we delete it on request once subscriptions have ended.
Invoices and accounting records: 10 years, as required by Lithuanian accounting law.
Contact form messages: up to 2 years after the enquiry is closed.
Security and error logs: up to 6 months.
Backup data: see section 9 of the terms of service (deleted 30 days after the subscription ends).

5. Security

Connections are encrypted (HTTPS). Passwords are stored as salted hashes, sessions and one-time links only as hashes, and storage secret keys and two-factor seeds are encrypted at rest. Access to customer storage is limited to keys that work only for that customer's bucket. Administrative access to our systems is restricted to authorised staff.

6. Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, email info@2clickbackup.com; we reply within one month.

You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or with the supervisory authority in your own EU country.

7. Cookies

We use one strictly necessary cookie to keep you signed in. See the cookie policy.

8. Changes

We may update this policy; the date at the top shows the latest version. Material changes are announced to account holders by email.