Privacy Policy
Last updated: November 5, 2026
1. Who we are
Nimble Labs LLC runs the hosted Webase service. This policy covers that service. If you run Webase yourself, we receive none of this information.
2. What we collect
Your account. Your name, email address and password, which is stored only as a hash. If you sign in with Google, we receive your name and email from Google.
Your AI keys. The keys you add. See section 3.
What you build. Your prompts, source code, data models, uploaded files and the records in your apps.
People using your apps. If your app has logins, we store the name, email address and hashed password of the people who sign up, along with the records they create. You decide what your app collects, and you are responsible for telling those people.
Usage. Token counts and estimated costs for each app, and server logs. We use session cookies to keep you signed in, and no third-party tracking cookies.
3. How we handle your AI keys
Your keys are encrypted before they are stored, and they are only used to send your own requests to the provider they came from. After you save a key, the service only ever shows its last four characters. Other users and connected tools cannot read it, and our administrators cannot see it through the service or sign in as you.
The encryption keys are held on our servers, because the service has to use your key while you are building. So set a spending limit with your provider, and replace your key if you think it has been exposed. When you remove a key, we delete it.
4. Who receives your information
Your AI provider receives your prompts and code under your own account with it, governed by its terms and privacy policy.
Our service providers host and support the service: our server host, file storage and email delivery. If you use them, Google handles Google sign-in and Netlify hosts apps you deploy there.
We do not sell personal information, and we do not use your apps or prompts to train AI models.
5. Retention and deletion
We keep your information while your account is open. Deleting an app or data model deletes its records. To delete your account, email us, and we will delete your keys and apps within 30 days, except what we must keep by law.
6. Security
We use encrypted connections, hashed passwords and encrypted key storage, and each app runs on its own address, separate from your account. No system is perfectly secure, and we cannot guarantee absolute security.
7. Your rights
You can update your account details on your Account page. To request a copy of your data or ask us to delete it, email hello@webase.com.
8. Changes and contact
We may update this policy by posting a new version here. Questions: hello@webase.com. Nimble Labs LLC, 2081 Columbiana Road, Suite 100, Birmingham, AL 35216.