Privacy Policy

1. Introduction

KwestDB ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information you provide directly:

• Account information: Name, email address, and authentication credentials (via Clerk).
• Database connections: Connection credentials are encrypted client-side and stored encrypted. We never see your plaintext database credentials.
• Queries: Natural language questions you submit and the generated SQL. These are stored to provide query history.

3. How We Use Your Information

• To provide and maintain the KwestDB service
• To generate and validate SQL queries based on your questions
• To store your query history for your reference
• To communicate with you about your account or our service
• To detect and prevent fraud or abuse

4. Data Security

We implement industry-standard security measures including AES-256-GCM encryption for stored credentials, TLS 1.3 for data in transit, per-user data isolation, and regular security audits. Database credentials are encrypted client-side before transmission to our servers.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances: with your explicit consent, to comply with legal obligations, or to protect our rights and safety.

6. Data Retention

We retain your account information and query history for as long as your account is active. You may delete your account at any time, which will remove all associated data from our servers within 30 days.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Export your data in a portable format
• Opt out of non-essential communications

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics that profile your behavior.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on our website.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at our contact page.