Mainbase

Legal

Privacy Policy

Last updated: April 27, 2026

This Privacy Policy describes how Mainbase ("Mainbase", "we", "us", or "our") collects, uses, and shares information when you use our document management platform and related services (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect information such as your name, email address, profile image, and any other information you provide. If you sign in with a third-party provider (such as Google), we receive basic profile information from that provider as authorized by you.

Content You Upload

The Service allows you to upload drawings, schematics, documents, metadata, tags, comments, and other content ("User Content"). We store and process User Content to provide the Service.

Usage Information

We collect information about how you interact with the Service, including pages viewed, features used, search queries, device and browser information, IP address, and approximate location derived from IP. We use product analytics tools (such as Mixpanel) to understand usage patterns and improve the Service.

Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser settings, but disabling them may impact functionality.

2. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Authenticate users and secure accounts.
  • Process and store User Content as you direct.
  • Communicate with you about your account, updates, and support.
  • Analyze usage and improve product features and reliability.
  • Detect, prevent, and address fraud, abuse, or security issues.
  • Comply with legal obligations.

3. How We Share Information

We do not sell your personal information. We share information only as described below:

  • Service providers: We use trusted third-party infrastructure and tools to run the Service, including Clerk (authentication), Convex (application backend and database), Vercel (hosting), and Mixpanel (product analytics). These providers process information on our behalf under contractual confidentiality and security obligations.
  • Within your organization: User Content and related metadata may be visible to other users within your organization or to recipients you explicitly share content with.
  • Legal requirements: We may disclose information to comply with applicable law, valid legal process, or to protect the rights, safety, and property of Mainbase, our users, or others.
  • Business transfers: If Mainbase is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to standard confidentiality protections.

4. Data Retention

We retain your account information and User Content for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at support@mainbase.net. We may retain limited information as required to comply with legal obligations, resolve disputes, or enforce our agreements.

5. Security

We use industry-standard safeguards to protect your information, including encryption in transit (TLS), encryption at rest where supported by our infrastructure providers, and access controls. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at support@mainbase.net. We will respond within the timeframes required by applicable law.

7. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. International Data Transfers

Mainbase is operated from the United States, and your information may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.

9. Third-Party Services

The Service may link to or integrate with third-party services (such as Google for sign-in). Their privacy practices are governed by their own policies. We encourage you to review them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date above and, where appropriate, by additional notice (such as email or an in-product message). Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at support@mainbase.net.