Privacy
Plain language, not a legal wall of text. If anything here is unclear, email hi@whatbreak.com and ask.
What we store
- Your account email, for login
- Your Airtable Personal Access Token, encrypted at rest (AES-256-GCM) — we can decrypt it to call Airtable's API on your behalf, but it's never stored as plain text
- Your base's schema: table names, field names, field types, and formula text — this is what the dependency graph is built from
What we don't store
The actual records in your Airtable base — the rows, the cell values, your customer data — never reach us. We only ever call Airtable's read-only schema API, not the records API. Formula text is stored because there's no way to build a dependency graph without it; if a formula happens to contain a hardcoded value, that value is stored as part of the formula text.
Write access
WhatBreak never writes to your Airtable base. We ask you to generate a token with read-only schema access, and the app has no code path that calls any write endpoint.
How long we keep it, and how to delete it
We keep your data for as long as your account exists. To disconnect a base, delete your account, or remove your data entirely, email hi@whatbreak.com — this is currently a manual process while WhatBreak is in early beta; self-serve deletion is planned.
Where it's hosted
Data is stored in a Supabase (PostgreSQL) database hosted in the EU (Frankfurt). The app itself runs on Vercel.