How we handle your information.

Who we are

ArchiveBridge is operated by Cloud Ready Solutions, a registered business name of Cloud Recovery Solutions Pty Ltd (ABN 68 166 375 766), an Australian company. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Questions or requests: hello@archivebridge.app.

What we collect

Account information — your name, work email, company, and (for partner applications) job title, phone and website. Provided by you at signup.

Microsoft 365 metadata — when your Global Administrator grants consent, we read file and site metadata from your tenant: names, paths, sizes, timestamps and content hashes. This is what scans, backup verification and the console are built on.

File content, in transit— during backup, archiving and restore, file content passes through our service between Microsoft 365 and the storage bucket configured for your account. Content is transferred over TLS, verified with SHA-256, and stored only in that bucket — we don’t keep a separate copy of your files.

Billing information — usage metering (terabytes protected per day) and payment records. Card details are collected and stored by our payment provider, Airwallex; we never see or store full card numbers.

Website analytics — our sites use Google (advertising measurement) and Vercel Analytics. These collect standard usage and device information via cookies or similar identifiers.

How we use it

To provide the service (scanning, backup, archiving, restore, the console), to bill for it, to send service email (run failures, weekly digests, receipts, account notices), to respond to support requests, and to measure whether our advertising works. We don’t sell personal information, and we don’t use your file content or metadata for anything except operating the service you configured.

Where it lives

Our service infrastructure and databases are hosted in Australia. Storage we provision for customers is in the Sydney region by default (other Wasabi regions are available on request); bring-your-own buckets live wherever you put them. Some providers we use (Microsoft, Airwallex, Google, Vercel) may process data outside Australia under their own safeguards.

Who we share it with

Only the providers needed to run the service: Microsoft (Graph API access you consented to), your configured storage provider, Airwallex (payments), our email delivery provider, and Google/Vercel (site analytics). If your account is managed by an IT provider or MSP, they can see your account’s data in the console as part of managing your service. We disclose information where required by law.

Security and control

Access to Microsoft 365 is application-level and revocable by your administrator at any time from your own Entra admin centre — revoking consent immediately cuts off all access. Data is encrypted in transit; stored secrets are encrypted at rest; every action the engine takes is written to an audit log you can export.

Retention and deletion

Backup and archive data is retained according to the policies you configure, in your account’s bucket. If you close your account, we delete our copies of your metadata after a wind-down period, except records we’re required to keep (such as tax and billing records). Note that immutable backups you enabled cannot be deleted by anyone — including us — until their retention window expires; that’s their purpose.

Your rights

You can ask us to access, correct or delete your personal information at hello@archivebridge.app. If you’re not happy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).