This Privacy Policy explains how Generix Solutions Global (“Generix”, “we”, “us”) collects, uses, shares and protects personal information when you use the Bakvora website at bakvora.com, the Bakvora desktop application (the “Application”), the Bakvora license portal at backup.generix.solutions, and our sales and support services (together, the “Services”).
The short version. Bakvora is a backup application that runs on your own computers. We never receive, see or store the files and databases you back up. Your backups go only to destinations you choose. We collect only what we need to sell, license, update and support the software.
1. Who is responsible for your data
Generix Solutions Global, [Registered office address], Pakistan, is the data controller for personal information processed through the Services. You can contact us about privacy at privacy@generix.solutions.
Where you use Bakvora on behalf of your employer or a client, that organisation controls the backup data processed by the Application on its own systems; Generix does not have access to it.
2. Information we collect
2.1 Information you give us
- Contact and sales enquiries: name, work email, company, country, number of machines and the content of your message.
- Purchases and account: name, email address, company name, billing address and country, tax/VAT number (if provided) and order history. Card and bank details are entered directly with our payment provider and are not stored by us.
- Support: the information you include in support requests, which may include screenshots or log excerpts you choose to send. Please remove confidential content before sharing logs.
2.2 Information collected by the Application
| Purpose | What is sent to our servers | When |
|---|---|---|
| License activation & validation | License key, a hardware fingerprint (a one-way identifier derived from machine hardware characteristics), computer name, Application version and edition, Windows version, activation and validation timestamps, IP address. | On activation and periodic license checks |
| Free trial | Hardware fingerprint, Application version, trial start date, IP address — used to prevent repeated trials on the same machine. | When a trial starts |
| Software updates | Current Application version, edition, Windows version, IP address. | On update checks (can be disabled in Settings) |
What the Application never sends us: the contents, names or paths of your files; your database names, schemas or data; your backup destinations; database, network, FTP/SFTP or job passwords; encryption keys; or the Application’s event log. Stored credentials and encryption keys remain on your machine, encrypted with Windows DPAPI and/or keys derived from your passwords.
2.3 Information collected automatically on our website
- Server logs: IP address, browser type, pages requested, referring URL and timestamps, kept for security and troubleshooting.
- Cookies: our website uses only strictly necessary cookies (for example, to remember your language choice or protect forms). We do not use advertising cookies. If we introduce analytics, we will update this policy and, where required by law, ask for your consent first.
3. Google user data
Some optional features of the Services can connect to a Google account using Google OAuth. We only request the access you explicitly approve on Google’s consent screen, and only for the feature you choose to use:
| Feature | Google data / scope | How we use it |
|---|---|---|
| Sign in with Google (license portal) | Basic profile: name, email address, profile picture (openid, email, profile) | To create and sign you in to your Bakvora license account and show which licenses belong to you. |
| Google Drive backup destination (where available) | Files created by Bakvora in your Drive (drive.file) | To upload backup files that you choose to send to Google Drive, and to list, download and delete only those files for restore and retention. Bakvora cannot see other files in your Drive. |
| Email notifications via Gmail (where available) | Send email on your behalf (gmail.send) | To send backup success/failure notifications from your account to the recipients you configure. Bakvora cannot read your mailbox. |
Where the data goes. For Application features (Drive destination, Gmail notifications), the connection is made directly from your computer to Google. OAuth tokens are stored only on your computer, encrypted with Windows DPAPI, and your Drive content and email content are never transmitted to Generix servers. For Sign in with Google on the license portal, we store your name, email address and Google account identifier with your license account.
Limited Use. Bakvora’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we:
- use Google user data only to provide and improve the user-facing features described above;
- do not sell Google user data, or use or transfer it for advertising, retargeting or interest-based advertising;
- do not use Google user data to develop, improve or train generalised artificial-intelligence or machine-learning models;
- do not allow humans to read Google user data, unless you give us explicit permission (for example, in a support case), it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymised for internal operations;
- do not transfer Google user data to third parties except as necessary to provide the feature, to comply with law, or as part of a merger or acquisition with your notice.
Revoking access. You can disconnect a Google account in the Application settings at any time, and revoke Bakvora’s access from your Google Account at myaccount.google.com/permissions. Revoking access deletes the stored token from your computer the next time the Application runs; you can ask us to delete portal data linked to Google sign-in as described in section 9.
4. Other third-party accounts
If you connect other third-party services (for example, a Microsoft account, an FTP/SFTP server or a network share), the same principles apply: credentials and tokens are stored encrypted on your computer, data flows directly between your computer and that service, and we do not receive the content.
5. How we use information and our legal bases
| Use | Legal basis (EU/UK GDPR) |
|---|---|
| Provide, activate, validate and update licenses; prevent license misuse and trial abuse | Performance of a contract; legitimate interests in protecting our software |
| Process orders, payments, renewals, refunds and invoices | Performance of a contract; legal obligation (tax and accounting) |
| Answer enquiries and provide support | Performance of a contract or steps before entering one; legitimate interests |
| Send service messages (license expiry and renewal reminders, security notices, important updates) | Performance of a contract; legitimate interests |
| Send marketing email about Bakvora | Consent, or legitimate interests for existing customers where permitted — you can unsubscribe at any time |
| Keep the website and Services secure; comply with law; establish or defend legal claims | Legitimate interests; legal obligation |
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
6. How we share information
We do not sell or rent personal information. We share it only with:
- Service providers acting on our instructions — for example, website and license-server hosting, payment processing and tax calculation, email delivery and customer-support tools — under contracts that require them to protect it;
- Authorised resellers and partners, if you buy through them, to the extent needed to fulfil your order and provide support;
- Authorities or other parties where required by law, or to protect our rights, users or the public;
- a successor in the event of a merger, acquisition or sale of assets, subject to this policy.
7. International transfers
We are based in Pakistan and our service providers may process data in other countries. Where we transfer personal data from the European Economic Area, the United Kingdom or other regions with transfer restrictions, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms.
8. How long we keep information
- License and order records: for the life of the license plus the period required by tax and accounting law (typically up to 10 years).
- Trial records: up to 24 months after the trial ends.
- Support and sales correspondence: up to 3 years after the last contact.
- Website server logs: up to 90 days, unless needed to investigate a security incident.
9. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to restrict or object to processing, to withdraw consent, and to lodge a complaint with a data-protection authority. This includes rights under the EU and UK GDPR, the California Consumer Privacy Act (as amended by the CPRA), and data-protection laws in other countries where we offer Bakvora, such as the UAE and Saudi Arabia.
To exercise your rights, email privacy@generix.solutions. We will respond within one month (or the period required by your local law) and may need to verify your identity. We do not discriminate against you for exercising your rights. California residents: we do not sell or share personal information for cross-context behavioural advertising.
10. Security
We use administrative, technical and physical measures to protect personal information, including encryption in transit (TLS), access controls and least-privilege access for staff. In the Application, backups are protected with AES-256 envelope encryption and credentials are encrypted at rest. No system is perfectly secure; if we become aware of a breach affecting your personal information, we will notify you and the authorities as required by law.
11. Children
The Services are intended for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new “Last updated” date and, for material changes, notify customers by email or in the Application.
13. Contact us
Generix Solutions Global
[Registered office address], Pakistan
Email: privacy@generix.solutions