Privacy
We collect your name, email and organization, because a licence is issued to a person and an unreachable account is a licence nobody can use. We collect nothing about your databases.
What the app never sends us
- Server, instance or database names
- Connection strings, usernames or passwords
- Script content, query text or results
- Schema, table or column names
- Anything from a run log
That is a property of the code rather than a promise layered over it. The only outbound calls the application makes are a licence request carrying an access token, and an update check against a public GitHub repository. There is no telemetry endpoint.
What we hold
Your name, email address, organization, and the answer you gave to the eligibility question - which is the record of what you declared. If you choose to add a password, it is held hashed and we cannot read it. A sign-in code is kept only as a hash, for ten minutes, and is deleted once used. The licences we have issued you, so we can answer what has been signed and for whom. Payment records are held by our payment provider; card details never reach us.
The identifier in your licence
Your licence carries an opaque identifier derived from your account — a hash, not your email address. The desktop app uses it as a folder name. It is deliberately not your address: addresses change, and a folder named after one would write your email onto every machine you ever sign in from.
Release email
Optional, unticked by default, and never a condition of getting a licence. Separate consent, because it is a separate purpose.
Your data on your machine
Workspaces, projects, scripts, connection details and run logs stay on your machine. Connection secrets are held by Windows DPAPI, scoped to your user account. Run logs record target and database names and SQL error text — your production topology — and are kept outside your workspace folder specifically so that committing a workspace to source control does not commit them too.
Your rights
Ask us for a copy of what we hold, a correction, or deletion, and we will do it. Get in touch.
The full text, including retention periods, ships with the product and is kept in the
repository as docs/privacy.md.