Privacy Policy

Effective 5 September 2026

This Privacy Policy explains how Tribastion Technologies ("we", "us") handles information in Tribastion Control (the "Service"), the operations console hosted at auth.tribastiontechnologies.com. Tribastion Control is a private, internal tool used by our team to back up, monitor and administer our own web platforms.

Information we handle

Account information of console users: name, email address, role, and authentication data (including multi-factor secrets), used to sign you in and enforce access control.
Operational data you create in the console: managed-site metadata, DNS zone backups, backup archives, and activity logs.
Credentials you connect: for example a Hostinger API token and cloud-storage access tokens. These are stored encrypted at rest and are used only to perform the actions you request.

Google user data

When you connect a Google account as a backup destination, the Service requests only:

openid and email, to identify and label the connected account.
https://www.googleapis.com/auth/drive.file, a per-file scope that lets the Service create and manage only the backup files it creates in your Google Drive.

The Service does not read, access, modify, or delete any other files in your Google Drive. It uses Drive solely to store backup archives that you initiate, and it uses your email address only to label the connected account in the console. Your Google OAuth tokens are encrypted at rest and are never sold, shared, or transferred to any third party.

Limited Use. Tribastion Control's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read it except where required for security, to comply with law, or with your explicit consent.

How we use information

We use the information above only to operate the Service you asked for: creating and storing backups of files and databases, backing up DNS records, monitoring site health, and administering access. We do not use it for advertising or profiling, and we do not sell it.

Storage and security

Secrets (API tokens, OAuth tokens, per-site keys) are encrypted at rest using AES-256-GCM. Access to the console is protected by role-based permissions and optional multi-factor authentication, and every significant action is written to a tamper-evident audit log. Backups are stored in the cloud-storage accounts you connect, under your control.

Sharing

We do not sell your data or Google user data, and we do not share it with third parties for their own purposes. Data remains within our own infrastructure and the cloud-storage accounts you connect. We may disclose information if required by law.

Data retention and your choices

Backups are retained according to the settings you choose in the console, and you can delete them at any time.
You can disconnect a connected Google account at any time from the Storage page, which stops all further access.
You can also revoke the Service's access directly from your Google Account at myaccount.google.com/permissions.

Changes

We may update this policy from time to time. Material changes will be reflected here with a new effective date.

Contact

Questions about this policy can be sent to support@tribastiontechnologies.com.