This explains what SablePower holds about you, who else sees it, and how long it stays. It is written to be accurate rather than reassuring. Where something is kept indefinitely, it says so.
SablePower is a product of Sable Designs, which is operated by a registered company. Where this policy says "we", that is the operator, and the operator is the controller of this data. It covers the SablePower app, the team server we run for it, and these pages.
1. What our server stores encrypted
The parts of a profile that are the account itself are encrypted on the computer that saves them, before they leave it, with your team's key. Our server stores them and hands them back. It never receives your team's key, so it cannot open what it stores, and neither can we from what it stores.
- The browser data of every profile: cookies and sessions, history, site data, passwords and autofill saved in the browser, bookmarks, extensions and their data.
- The profile's saved Logins: usernames, passwords and two factor seeds.
- Proxy logins and passwords, and WireGuard settings.
The team key is sealed separately for each person, so it opens only on their computer, with their password. Your password is sent to our server over an encrypted connection (TLS) when you sign in, so the server can check it; the server keeps only a hash of it, not the password and not your team's key. This protects the stored data against anyone who reads our server's disk or its backups. It depends on our server running our program unchanged, because that program sees your password each time you sign in.
2. What our server holds and can read
To run your team, the server needs to see some things in the clear:
- Your account. Your email address, which is how we know you, and your role and rights in the team.
- Your team. Its name, its plan and billing period, the limits, and how many profiles and members it uses.
- Profiles and proxies, apart from the encrypted parts. Project and profile names, tags, notes, stage, numbers, platforms, start pages and app window addresses, and the device and fingerprint settings. For proxies: the label, type, host and port, the check results, notes and your own columns. Not the login and password.
- The computers members use. Each time the app starts it sends the computer's name, its system and version, the processor, the memory, the graphics card, the screen and its scaling, how many speech voices it has and in which languages (never their names), and the SablePower version. The team owner and admins see this, to pick the right device for a profile.
- Active time. While a team profile is open, the app counts the minutes its window is in front and the mouse or keyboard is in use, per person and profile. Those minutes go to the team server and from there to SableSpace on sabledesigns.com, where the team owner sees them; the owner and admins also see the last 24 hours per profile in the app. SableSpace also gets, for each member, the names of the profiles and projects they can open, so their SableSpace lists them. Nothing else about your screen, your typing or your other programs is recorded or sent.
- Activity and sign ins. The activity log records who opened, changed, shared or deleted what, when, and from which computer. Every sign in, failed sign in and session is recorded with its IP address, the computer's name and the app's details.
- Billing. Stripe's references for the team and its subscription, the plan and extras bought, the amounts and the dates. We never see your card number: payments are made on Stripe's own page.
- Email choices. Whether you said yes to emails about new versions.
- What you send us by email, including attachments.
So keep secrets out of names, tags and notes: the server can read them. Passwords belong in the password fields and in Logins, which are encrypted.
We do not collect your name, postal address or phone number for SablePower, and the app does not send us the pages you visit in your profiles. There are no analytics, no advertising and no tracking in the app or on these pages.
3. On your computer
- The app keeps its settings, your session and, if you choose, your unlocked team key on your computer, in the system's own secure store.
- While a profile is open, its data is on the computer it is open on. For a VA without the rights to export cookies and see passwords, nothing of the profile is left on their computer after it closes. Those limits turn off the buttons and the usual ways to take data out, not what a determined technical person can do on their own computer while the profile is open.
4. Who else sees what
- Stripe handles card payments. It receives your card details, your email address and your billing address under its own privacy policy.
- Brevo sends our emails: sign in codes, payment notices and, if you said yes, emails about new versions. It sees your email address and the message.
- Our server. The team server and these pages run on our own server in the Netherlands, rented from Sharktech in Amsterdam.
- Cloudflare sits in front of our server and these pages, so it sees connection details, including your IP address. Profile data passes through it as encrypted as everywhere else.
- Backups. Every night the server's database is copied, encrypted, to Cloudflare R2 storage, and so are the profiles' saved data, which is already encrypted by your computer.
- GitHub. On its first start, and when its browser is updated, the app downloads the browser it runs on from GitHub, which sees your IP address.
- Address lookup services. When a proxy is checked or a profile opens, the app asks ipinfo.io, ipwho.is or ipapi.is, through that proxy, where the proxy comes out. They see the proxy's address, not yours.
- Our own records. When a team is made, stops paying or pays, our server sends a line about it, through Sable Designs' server, to our company's private group on Telegram: what happened, the amount, and a short code made from the team's id. Never a name, an email address or anything inside the team.
- Sable Designs, only if you press Log in with Sable Designs. Sable Designs tells our server your email address, the id of your Sable Designs account, and, for a VA, whose team you are in. We keep the id to link the two accounts. Sable Designs learns that you use SablePower. It never gets your SablePower password or your team's data.
- SablePhone, our phone app, only if you connect it in Settings, Data. Its key stays in your computer's secure store. When you press Send to phone, your computer sends that proxy's type, host, port, login and password straight to SablePhone, to put it on the phone user you picked. Nothing else goes there, and our team server never sees the login in the clear.
- Your proxy providers carry the traffic of the profiles that use them, under their own terms.
We do not sell your data, and we do not share it for advertising.
5. How long we keep it
- Your account, your team and its profiles: while the team exists.
- A profile you delete goes to the Trash, where it can be restored. Delete for good removes it from the server. The server keeps the last 10 saved versions of each profile's data.
- Backups: the database copies for 30 days; a copy of profile data for 30 days after the server stops keeping it.
- The activity log and the sign in records: indefinitely, also after a team is closed. They are the record of who did what, and they are needed most after somebody's access has been taken away.
- Billing records: as long as the law requires us to keep accounting records.
- Closing your team: the team owner writes to us. We delete the team from the server, with its profiles, its proxies, its settings and its people's place in it, and an account that is in no other team. The backups of them age out within 30 days. The activity log and billing records are kept, as above.
6. Cookies
These pages set no cookies and run no scripts. The app uses no advertising or tracking cookies of ours. Stripe's payment and billing pages are Stripe's own, under Stripe's cookie policy.
7. Your rights
If you are in the UK or the EU, data protection law gives you rights over your data. You can ask us for a copy, to correct it, to delete it, or to stop a particular use.
There is no export button. For any of these, email [email protected]. Every request is handled by a person, by hand, so it will not be instant.
Some things cannot be fully erased on request. The activity log and billing records are kept because we need them to run the service responsibly and to account for money received. If you ask for deletion we will tell you exactly what was removed and what was kept, rather than claiming everything went.
8. Security
Everything between the app and our server goes over HTTPS, and the account data of every profile is encrypted on your computer as described above. Sign ins can require a code from an authenticator app, and the team owner can limit where people sign in from.
We are a small operation. If you think something is wrong with our security, write to us and a person will look at it.
9. Children
SablePower is for adults. We do not knowingly hold data about anyone under 18. If you believe we do, email us and we will delete it.
10. Changes
We will update this page when what we do changes, and the date at the top will move. If a change is material we will email team owners.