Privacy Policy

1.1 Information You Provide Directly

• Database Connection Information: When you create a database connection, we collect connection details including host, port, username, password, and database name. This information is stored locally on your device and is encrypted.
• User Queries: Natural language queries and SQL statements you input into the Application.
• Application Preferences: Settings such as preferred AI model, security level, language preferences, and other configuration options.

1.2 Information Collected Automatically

• Application Usage Data: We may collect information about how you interact with the Application, including features used, error logs, and performance metrics.
• Device Information: Basic device information such as operating system version, application version, and system specifications may be collected for support and improvement purposes.

1.3 Information We Do NOT Collect

We do NOT collect, store, or transmit:

• Actual Database Records: We never access, read, or transmit actual data rows from your databases.
• Sensitive Data Values: We do not collect or transmit any actual data values stored in your database tables.
• Personal Information: We do not collect personal information unless you voluntarily provide it (e.g., in support requests).
• Database Credentials: While we store encrypted credentials locally for connection purposes, we never transmit them to our servers.

2.1 Primary Uses

• SQL Query Generation: We use your natural language queries and selected database schema information to generate SQL queries through AI models.
• Query Optimization: We analyze your SQL queries and database schema to provide optimization suggestions.
• Application Functionality: We use your preferences and settings to provide personalized features and maintain your application state.

2.2 Data Transmission to AI Providers

When you request SQL generation or optimization, we transmit the following information to third-party AI service providers (OpenAI, Anthropic, etc.):

What We Send:

• Your natural language query or SQL statement
• Database schema metadata (table names, column names, data types, constraints, relationships)
• Index information (if selected in security settings)
• Table row counts (if selected in security settings)
• Database metadata (version, engine, character set - if selected)

What We Never Send:

• Actual database records or data values
• Database connection credentials
• Personal or sensitive information
• Complete database schemas (only selected relevant tables/views)

2.3 Third-Party AI Service Providers

Prompt Query uses third-party AI services including:

These providers process your queries and schema information according to their respective privacy policies. We encourage you to review their privacy policies to understand how they handle your data.

3.1 Local Storage

• Database Credentials: Encrypted and stored locally on your device
• Application Data: Queries, conversation history, and preferences are stored locally
• No Cloud Storage: We do not store your database information on our servers

3.2 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Database credentials are encrypted before local storage
• Local-Only Storage: Sensitive information remains on your device
• Secure Transmission: All communications with AI providers use encrypted HTTPS connections
• Access Controls: Only you have access to data stored on your device

3.3 Your Responsibility

You are responsible for:

• Maintaining the security of your device
• Protecting your database credentials
• Using appropriate security levels based on your data sensitivity
• Following your organization's security policies

4.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information or database information to third parties.

4.2 Limited Sharing

We may share information only in the following circumstances:

• AI Service Providers: As necessary to provide SQL generation services (schema metadata only)
• Legal Requirements: If required by law, court order, or governmental authority
• Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

4.3 Aggregated Data

We may use aggregated, anonymized data for analytics, improvement, and research purposes. This data cannot be used to identify you or your databases.

5.1 Access and Control

You have the right to:

• Access: View all data stored locally in the Application
• Delete: Delete database connections, queries, and application data at any time
• Export: Export your queries and conversation history
• Modify: Change your preferences and settings at any time

5.2 Security Level Controls

You can control what information is sent to AI providers by adjusting security levels:

• Level 1 (Schema Only): Maximum privacy - only table/column names
• Level 2 (Sanitized): Balanced - includes structure but excludes sensitive logic
• Level 3 (Minimal): Includes sanitized views
• Level 4 (Full): Complete context - use only in trusted environments

5.3 Opt-Out

You can stop using the Application at any time and delete all locally stored data.

10.1 GDPR (European Users)

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise these rights, please contact us using the information provided in Section 11.

10.2 CCPA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination