Privacy Policy

Last updated: July 20, 2026

What we collect

Your email address and a hashed password (bcrypt — we never store or see the plain password), your saved database connection strings (encrypted at rest with AES-256-GCM), your question history (question, generated SQL, answer, row count), and standard billing records via Stripe if you subscribe. We do not use analytics trackers or advertising cookies — the only cookie is your login session.

Where your query data goes

To answer a question, we send your question, your database's schema (table and column names), and a sample of the query results to an AI model via OpenRouter, a third-party AI API. This is the honest core of how the product works — if your database contains data you would not be comfortable passing through a third-party AI provider (for example protected health information), do not connect it.

Where your data lives

Application data is stored in Cloudflare D1 (accounts, encrypted connections, history) on Cloudflare's network. Your connected database itself is never copied — queries run against it live and only the returned rows pass through the system.

What we never do

We never sell your data, never use your data to train models, and never share it with anyone except the processors named above (Cloudflare, OpenRouter, Stripe) as needed to provide the service.

Deletion

Email hello@ermantechsolutions.com from your account address and we will delete your account, connections, and history within 30 days.