Terms of Service

Last updated: September 30, 2026

These terms govern the use of Gatebase, a service that publishes the backend workflows of a Bubble application as versioned REST APIs and MCP tools. Gatebase is provided by EI VIGNERES TOM, an individual entrepreneur registered in France under SIREN 904 063 146, whose details are in the Legal notice ("we", "us"). "You" means the person or organization that creates a Gatebase account or uses it on behalf of an organization.

By creating an account or using Gatebase, you accept these terms. If you use Gatebase for an organization, you confirm that you may accept them on its behalf.

1. Who can use Gatebase

Gatebase is a service for professionals: developers, agencies and companies that build on Bubble. You must be at least 18 years old and use Gatebase for your business or profession. Consumer protection rules that apply only to consumers, such as the 14-day withdrawal right, therefore do not apply.

2. The service

Gatebase lets you connect a Bubble application, choose which of its backend workflows to expose, and publish them as REST endpoints and MCP tools. It issues API keys to the consumers of your API, checks each request, calls your Bubble workflow and returns its answer. Each project has a Test environment, where you edit and try routes, and a Live environment, which changes only when you publish a version. The documentation describes how each feature works.

We may improve, change or remove features. When a change removes a feature you rely on or breaks a published API, we tell you by email beforehand whenever we reasonably can.

3. Your account

• You sign in with a code sent to your email address, or with Google. Keep access to that email address and to your Google account secure: anyone who controls them can sign in as you.
• You are responsible for everything done with your account, with the management tokens you create and with the API keys you issue.
• When you invite people to a project, you choose their role. You are responsible for what they do in that project.
• The information you give us, such as your email address and billing details, must be accurate.

4. Your Bubble application and your data

• To connect a Bubble application, you give Gatebase an admin API token of that application. Gatebase stores it encrypted and uses it only to discover your workflows and to call the workflows you publish.
• Gatebase calls Bubble with that admin token. You decide which workflows you publish, which parameters they accept and which tenant each API key is limited to. You are responsible for making sure a published workflow only returns data that its callers are allowed to see.
• You keep all rights to your application, your workflows and the data that passes through Gatebase. You give us the right to host, transmit and process them only to provide the service to you.
• You are responsible for your relationship with your API consumers and the people whose data your application processes, including any terms and privacy notices you owe them.

5. Acceptable use

You must not use Gatebase to:

• break the law or the rights of others, including intellectual property and privacy rights;
• distribute malware, spam, or content that is illegal;
• access systems or data you are not allowed to access, or test the security of Gatebase without our written permission;
• overload the service on purpose, or get around quotas, rate limits or billing;
• resell Gatebase itself as a hosted service without our written agreement. Selling access to your own API built with Gatebase is allowed.

6. Plans and billing

• Billing is per project. The plans, prices, included requests and overage prices are those shown in the dashboard when you subscribe. Prices are in US dollars; taxes are added where the law requires them.
• A free project stops serving Live requests when it reaches its monthly allowance. It is never charged.
• A paid project is a monthly subscription, charged in advance. Requests above the included allowance are charged only if you have enabled overages for that project, and they are billed after each billing period.
• A request counts when it is a Live request that reached your Bubble workflow, whether the workflow succeeded or failed. Test requests and requests rejected before calling Bubble (for example because the API key or the input is invalid) do not count.
• Payments are processed by Stripe. We do not see or store your card number.
• You can cancel a subscription from the dashboard. Deleting a paid project cancels its subscription and issues a final invoice for the usage not yet billed. Amounts already paid are not refunded, except where the law requires it.
• If a payment fails, the project loses its paid allowance and falls back to the free allowance until the payment succeeds.

7. Availability and support

We work to keep Gatebase available and secure, but we do not guarantee that it will be uninterrupted or error-free. Gatebase depends on your Bubble application and on third-party providers. Maintenance may make the service briefly unavailable. We never replay a request to your Bubble workflow automatically: when the outcome of a call is uncertain, Gatebase returns an error and does not charge for it.

For help, write to contact@gatebase.dev.

8. Suspension and termination

• You can stop using Gatebase at any time. You can delete your projects in the dashboard, and ask us to delete your account at contact@gatebase.dev.
• We may suspend a project or an account without notice if it breaks these terms, puts the service or other customers at risk, or if the law requires it. In other cases, we give you at least 30 days' notice by email before closing your account.
• When a project is deleted, it stops serving requests at once. Its data is deleted as described in the Privacy Policy.

9. Intellectual property

Gatebase, its software, documentation and brand belong to us. These terms give you the right to use Gatebase while your account is active; they do not transfer any of our rights to you. If you send us feedback, we may use it freely.

10. Personal data processed for you

When your API is called, Gatebase processes the data sent to your workflows and the data they return. For that data, you are the controller and we are your processor within the meaning of the EU General Data Protection Regulation (GDPR). This section is our data processing agreement under Article 28 GDPR.

• We process that data only to run your API, to show you your request logs and to bill you, following your instructions, which are these terms and your configuration in Gatebase.
• People who work on Gatebase are bound by confidentiality.
• We protect the data with appropriate security measures, including encryption in transit, encryption of your Bubble token at rest and removal of credentials and client IP addresses from request logs.
• We use the subprocessors listed in the Privacy Policy. We tell you by updating that list and by email before adding or replacing a subprocessor that processes your data, and you can object by closing your account.
• Transfers outside the European Economic Area rely on the safeguards described in the Privacy Policy.
• We help you answer requests from the people concerned and meet your security obligations, as far as the service allows.
• We tell you without undue delay after we become aware of a personal data breach that affects your data.
• Request logs are deleted after 7 days. Other project data is deleted when you delete the project, as described in the Privacy Policy.
• On request, we provide the information needed to show that we meet these obligations.

11. Liability

Gatebase is provided "as is". To the extent allowed by law:

• we are not liable for indirect losses, such as lost profits, lost revenue, lost data or damage to reputation;
• our total liability under these terms is limited to the amounts you paid us in the 12 months before the event that caused it.

These limits do not apply to gross negligence, wilful misconduct, or any liability that the law does not allow us to limit.

12. Changes to these terms

We may update these terms. We will email you at least 30 days before a material change takes effect. If you continue to use Gatebase after that date, the new terms apply. If you do not accept them, you can close your account before that date.

13. Governing law

These terms are governed by French law. Any dispute that cannot be settled amicably will be brought before the competent French courts.

Contact

EI VIGNERES TOM, SIREN 904 063 146. Email: contact@gatebase.dev.