Legal

Privacy Policy

Last updated: January 2025

TL;DR

We take your privacy seriously. We encrypt your database credentials, never store your business data permanently, and only collect the minimum information needed to provide our service.

1. Information We Collect

1.1 Account Information

Name, email address, and password (encrypted)
Profile information if using Google OAuth

1.2 Database Connection Information

Database credentials (host, port, username, password)
Database type and connection settings

1.3 Usage Data

Queries you run and their results (temporarily)
Usage statistics (query count, features used, session duration)

2. How We Use Your Information

We use your information to:

Provide and maintain the AI analytics service
Connect to and query your databases on your behalf
Process and respond to your support requests
Send service-related emails (verification, password reset, billing)
Improve our AI models using anonymized query patterns (no actual data)
Monitor and prevent fraud or abuse

3. Data Security

3.1 Encryption

AES-256-GCM encryption for all database credentials at rest

TLS/SSL encryption for all data in transit

Connection strings are never stored in plain text

3.2 Query Results

Query results are temporarily stored in memory for visualization purposes only. We do not permanently store your business data.

3.3 Access Controls

Only read-only SQL queries (SELECT, WITH) are allowed by default. Write operations (INSERT, UPDATE, DELETE, DROP) are blocked to protect your data.

4. Data Sharing

We do not sell, rent, or share your personal information or database credentials with third parties, except:

Service Providers: Hosting (Vercel), payments (Polar), AI (Google Gemini) - all under strict data processing agreements
Legal Requirements: When required by law or to protect our rights

5. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Opt-out of marketing communications

To exercise these rights, contact us at privacy@whoprompt.com

6. Data Retention

We retain your information for as long as your account is active. When you delete your account:

Account data and database credentials are deleted within 30 days
Anonymized usage statistics may be retained for analytics
Billing records retained as required by law (typically 7 years)

7. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

8. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

9. International Transfers

Your data is primarily stored in US-based data centers. By using our service, you consent to this transfer and processing.

10. Policy Changes

We may update this policy from time to time. We'll notify you of significant changes via email or through the platform.

Questions About Privacy?

For privacy concerns or to exercise your rights, contact us at:

privacy@whoprompt.com