Privacy Policy

Your privacy matters to us. This policy explains what data we collect, how we use it, and the controls you have over your information.

Last updated: February 8, 2026

AES-256 EncryptionNo data sellingHTTPS onlyGDPR ready

Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (hashed with bcrypt). If you sign in via OAuth (Google, GitHub), we receive your profile information from the provider.

Database Credentials

When you add a database connection, we store the host, port, database name, username, and password. Passwords are encrypted using AES-256-GCM before storage and are never logged or exposed in plaintext.

Usage Data

We collect information about how you use the Service, including queries submitted, features used, error reports, and performance metrics. This data helps us improve the Service.

Technical Data

We automatically collect IP addresses, browser type, device information, and access timestamps for security (audit logs) and analytics purposes.

How We Use Your Information

Service delivery:Execute queries, generate SQL, export results

Account management:Authentication, billing, support

Security:Audit logging, rate limiting, abuse prevention

Improvement:Anonymized analytics to improve AI accuracy and UX

Communication:Service updates, password resets, team invitations

Data Storage & Security

Your data is stored in PostgreSQL databases with encryption at rest. Database credentials are encrypted with AES-256-GCM. We use HTTPS for all data transmission. API keys are stored as SHA-256 hashes.

AI Processing

Your natural language questions and database schema information are sent to our third-party AI inference providers to generate SQL queries. We do not send your actual data or query results to any AI provider. Schema information is cached locally and transmitted only as needed for query generation. We may update our AI providers over time to ensure the best quality and performance.

Data Sharing

We do not sell your personal information. We share data only with trusted parties for specific purposes:

Lemon Squeezy:Payment processing and merchant of record (name, email, billing info, transaction data)

AI providers:Query generation (schema metadata only, no row data)

Law enforcement:When required by valid legal process

Data Retention

Account data:Retained while your account is active

Query history:Retained per your plan (30 days for Free, unlimited for paid)

Audit logs:Retained for 90 days

Deleted accounts:Data purged within 30 days of deletion

Your Rights

You have the following rights regarding your personal data:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Export your data (queries, connections, settings)
Withdraw consent for optional data processing

Cookies

We use essential cookies for authentication (session tokens) and preference storage (theme). We do not use third-party tracking cookies or advertising pixels.

Children's Privacy

NatureQuery is not intended for users under 16 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.

Privacy questions or data requests?

To exercise your data rights or ask about this policy, reach out directly.

support@naturequery.app