Privacy Policy
Applicable to customers on any plan.
This Privacy Policy explains our practices regarding the collection, use and disclosure of the information we process to provide our Services. This Privacy Policy does not apply to any third-party websites, services or applications, even if they are accessible through our Services.
When we refer to “AskYourDatabase” (“we”, “our” or “us”), we mean the AskYourDatabase entity that acts as the controller or processor of your information, AskYourDatabase Inc. Please refer to the section titled ‘Identity of the Data Controller and Data Processor’ for more information.
Introduction
This Privacy Policy applies to: AskYourDatabase’s AI-powered SQL chatbot platform that enables Customers and their Authorized Users to interact with databases using natural language (individually and collectively, the “Services”); askyourdatabase.com (the “Website”); and other interactions you may have with AskYourDatabase.
In this Privacy Policy, “you” and “your” refer to the person or entity visiting our Website or using our Services. If you are a purchaser of our Services, you are a “Customer”. If you are authorized by a Customer to use our Services, you are an “Authorized User”. Where AskYourDatabase collects information that is associated with an identified or identifiable individual and is protected as personal data under applicable data protection law, it is referred to as “Personal Data”. Personal Data that is de-identified or aggregated to the extent that it is no longer reasonably associated with an identified or identifiable natural person may be used by AskYourDatabase for any purpose.
Customers can create SQL queries, generate database insights, and build custom database interactions using the Services (“Database Applications&rdquo). Databases, applications and software products also interoperate with the Services which are provided by a Customer or a third-party, and not AskYourDatabase (“Non-AskYourDatabase Products&rdquo).
This Privacy Policy does not apply to any Non-AskYourDatabase Products or any third-party websites, services or applications, even if they are accessible through our Services, (“Third-Party Services”) which are provided under their own terms of service and privacy policy. A separate master subscription agreement may govern the provision, access and use of the Services (the “Subscription Agreement”), including the processing of electronic data or content that an Authorized User submits to a Database Application (“Customer Data”) but excluding Non-AskYourDatabase Products and the Services. The Customer (e.g., your employer or another entity or person) that entered into the agreement with AskYourDatabase controls its instance of the Services and any associated Customer Data. If you have any questions about specific settings and privacy practices, please contact the Customer whose Service you use.
*California Notice of Collection of Personal Information: We collect the information described below under “Information AskYourDatabase Collects and Receives” for the business and commercial purposes described below under “Information Use.” To learn more about exercising your California Privacy Rights please review the “California Privacy Rights” section below.
Identity of the Data Controller and Data Processor
Certain jurisdictions distinguish between a “controller” or “processor” of Personal Data. A controller is the decision-maker and exercises overall control over how and why Personal Data is collected and used. In general, the Customer is the controller of Customer Data. A processor acts on behalf of, and only on the instructions of, the relevant controller. In general, AskYourDatabase is the processor of Customer Data and the controller of Other Information (which is described in the ‘Information AskYourDatabase Collects and Receives’ section below).
AskYourDatabase Inc., a US company, is the controller of Other Information and a processor of Customer Data.
Information AskYourDatabase Collects and Receives
AskYourDatabase collects and receives the following information through the Services, Website and your other interactions with AskYourDatabase. This information includes Customer Data and other information and data (“Other Information”):
Customer Data. Customers or Authorized Users submit Customer Data to AskYourDatabase when they use the Services.
Other Information. AskYourDatabase also collects, generates and/or receives the following categories of Other Information:
Service Information
We may collect information you post to, or collect from, Authorized Users of the Services. We use this information to operate, maintain, and provide to you the features and functionality of the Services. For example:
Account Information: To help us deliver the Services, you or our Customer (e.g. your employer) may supply AskYourDatabase with an email address, display name, and other account set up details obtained through OAuth authentication providers (Google, GitHub, Microsoft). Customers that subscribe to the Services provide AskYourDatabase (or its third-party payment processors) with billing details such as payment information and a billing address.
Profile Information: When your AskYourDatabase account is active, you or your organization may provide information during the operation of your account, such as roles and permissions of particular Authorized Users, such as “administrators,” “users” or “viewers.”
Usage Information
We may also collect and aggregate information about the use of our Website and our Services. That information includes:
Device Information: browser and device data, device type, screen resolution, browser type, operating system name and version, language, as well as add-ons for your browser.
Log Information: including your IP address, the pages visited and links clicked on our Website, the time spent on those pages, and the page that was visited before our Website.
Services Metadata: When a Customer or an Authorized User interacts with the Services, metadata is generated that provides additional context about the way that Customer and Authorized User configures and uses the Services. For example, AskYourDatabase logs query requests (including query type and frequency), database connections (including database type), and usage patterns (including response times and error rates).
Location Information: We receive information from you, our Customer and other third parties that helps us approximate your location. We may, for example, use a business address submitted by your employer (who is our Customer) or an IP address received from your browser or device to determine approximate location.
Cookie Information: We may also permit third-party online advertising networks to collect information (through cookies or similar tracking technologies) about your and others’ use of our Services and any of your mobile or web applications, in order to allow those third-party networks to display ads that may be relevant to your interests on our Services as well as on other websites or apps.
Third-Party Services
A Customer can choose to permit or restrict Third Party Services for its instance of the Services and Database Applications. Typically, Third Party Services are databases, APIs, software or applications that integrate with our Services, and a Customer can permit its Authorized Users to enable and disable these integrations for its Database Applications. Authorized Users should check the privacy settings and notices in these Third-Party Services to understand what data may be disclosed to AskYourDatabase. When a Third-Party Service is enabled, AskYourDatabase is authorized to connect and access Other Information made available to AskYourDatabase in accordance with our agreement with the Third-Party Service and any permission(s) granted by our Customer (including, by its Authorized User(s)). We do not, however, receive or store passwords for any of these Third-Party Services when connecting them to the Services.
Additional Information Provided to AskYourDatabase
We also receive Other Information when submitted to our Websites or in other ways, such as responses or opinions you provide if you participate in a focus group, contest, activity or event, information you provide if you apply for a job with AskYourDatabase, request support, interact with our social media accounts or otherwise communicate with AskYourDatabase.
In general, you are not subject to a statutory or contractual obligation to provide Customer Data or Other Information (together, “Information”). However, various Other Information is collected automatically and, if you do not provide certain information (such as account setup details), we may be unable to provide the Services.
How We Process your Information and our Legal Bases (under GDPR) for Doing So
Customer Data will be used by AskYourDatabase in accordance with Customer’s instructions, including any applicable terms in the Customer Terms of Service (“Terms”), Subscription Agreement, or DPA, and as required by applicable law. As explained above, in general, AskYourDatabase is a processor of Customer Data and the Customer is the controller. The Customer may, for example, use the Services to provision or deprovision access to the Database Application, enable or disable Third Party Services, manage permissions and otherwise apply its policies to the Services.
AskYourDatabase uses Other Information to operate our Services, Website and business for the following purposes:
Compliance With a Legal Obligation
| Why And How We Process Your Information | Information Categories Used |
|---|---|
| To comply with a legal obligation We may access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others. For example, a search warrant or production order from law enforcement to provide information in relation to an investigation, such as your profile information or IP address. | The actual information used depends on the specific legal obligation, but could include any of the following: Service Information, Profile Information, Usage Information, Cookie Information, Third-Party Services, Additional Information Provided to AskYourDatabase |
Legitimate Interests
We rely on our legitimate interests or the legitimate interests of a third-party where they are not outweighed by your interests or fundamental rights and freedoms (“legitimate interests”).
| Why And How We Process Your Information | Legitimate Interests Relied On | Information Categories Used |
|---|---|---|
| To operate, maintain, and provide to you the features and functionality of the Services. This includes use of Other Information to support delivery of the Services under a Subscription Agreement, prevent or address service errors, security or technical issues, analyze and monitor usage, trends and other activities, or at an Authorized User’s request. | In our and your interests to provide, update, maintain and protect our Services, Website and business. | Service Information, Profile Information, Usage Information, Cookie Information, Third-Party Services, Additional Information Provided to AskYourDatabase |
| To improve our Website and our Services. We continually strive to improve our site and product offerings based on the information and feedback we receive from you. If you contact us, we may use your Other Information to respond. | It is in our interest and in the interest of Customers and Authorized Users to continuously improve and develop the products and customer support we provide. | Service Information, Profile Information, Usage Information, Cookie Information, Third-Party Services, Additional Information Provided to AskYourDatabase |
| To improve customer service. Your Information helps us to more effectively respond to your customer service requests and support needs. If you contact us, we may use your Other Information to respond. | It is in our interest and in the interest of Customers and Authorized Users to continuously improve and develop the customer support we provide. | Service Information, Profile Information, Usage Information, Third-Party Services, Additional Information Provided to AskYourDatabase |
| To send periodic emails. For example, we may use the email address you provide to send you information, send notifications that you request about changes to our Services, alert you of updates, and send periodic emails containing information relevant to your account. | In our Customers and Authorized Users’ interests to address service-related issues. | Service Information, Profile Information, Usage Information, Third-Party Services, Additional Information Provided to AskYourDatabase |
| To send you email marketing. We sometimes send emails about AskYourDatabase products and services, invite you to participate in events or surveys, or otherwise communicate with you for marketing purposes. You can control whether you receive these messages and we allow you to opt-out from receiving marketing communications from us as described in the ‘Your Rights’ section below. | In our interest to promote the Website and Services and send our direct marketing. | Service Information, Profile Information |
| To enable you to purchase, renew and appropriately use a commercial license to our Services. If you purchase our Services, we may need to contact you for invoicing, account management, and similar reasons. We use account data to administer accounts and keep track of billing and payments. | In our interest to facilitate the effective provision and administration of the Website and Services. | Service Information, Profile Information, Usage Information |
| To compile statistics and analysis about use of our Website and our Services. AskYourDatabase tries to make the Services as useful as possible. For example, we may: develop and improve AI models and database interaction features by using Other Information to help determine utility and relevance of responses; make suggestions for queries and database optimizations based on historical use and predictive models; identify organizational trends and insights; customize a Services experience; or create new productivity features and products. | It is in our interest and in the interest of Customers and Authorized Users to personalize the Services and Website support we provide. | Account Information, Profile Information, Usage Information, Cookie Information, Third-Party Services, Additional Information Provided to AskYourDatabase |
| To investigate and help prevent security issues and abuse. We may use a variety of tools such as email, device and IP address login information to prevent issues and abuse. We may use Other Information to better understand how AskYourDatabase is used or to prevent abuse. | In our interest to keep the Service secure and to detect, prevent, and address abuse (such as spam) and to investigate and take action in respect of suspicious activity on the Services. | Account Information, Profile Information, Usage Information, Cookie Information, Third-Party Services, Additional Information Provided to AskYourDatabase |
How We Share And Disclose Information
This section sets out how AskYourDatabase may share and/or disclose the Information described under ‘Information AskYourDatabase Collects and Receives’ above. Except as set out below, we do not sell, trade, or otherwise transfer to outside parties your Information. Designated members of our staff may access your Information to help our customers with any questions they have, including help using our Services, investigating security issues, or following up on bug fixes with a Customer. This activity is logged in our system for compliance, and we maintain different levels of access for its employees depending on their role in our company. The policies and practices for sharing and/or disclosure of Customer Data to third parties is determined by the Customer. AskYourDatabase has no control over the Customer’s or any other third parties’ choice to share and/or disclose Information.
Customer’s Instructions. AskYourDatabase may share and disclose Information in accordance with a Customer’s instructions and with appropriate consent, including any applicable terms in the Terms, Subscription Agreement, DPA and the Customer’s use of Services functionality and in compliance with applicable law and legal process.
Third-Party Service Providers and Partners. We may disclose your Information to third-party service providers (for example, payment processing and data storage and processing facilities) that we use to provide the Services. We limit the Information provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such Information.
Corporate Affiliates. We may share Information with other companies owned by or under common ownership as AskYourDatabase, which also includes our subsidiaries. These companies will use your Personal Data in the same way as we describe under this Privacy Policy, unless otherwise specified.
Law Enforcement, Regulators and to Enforce our Rights, Prevent Fraud, and for Safety: We may release your Information when we believe it is appropriate to comply with the law, comply with or respond to a valid legal request, enforce our Site policies or our Terms, protect our or others’ rights, property, or safety, or to respond to or address any other activity that may expose us, you, or any other of our Authorized Users or Customers to legal or regulatory liability.
With Consent. AskYourDatabase may share Information with third parties when we have consent to do so.
International Data Transfers
Your Personal Data is processed and stored exclusively within the United States. AskYourDatabase utilizes US-based infrastructure providers including Vercel (for application hosting) and Neon (for database services), both of which maintain their data centers within the United States. All data processing activities, including backup and recovery operations, are conducted within US jurisdiction to ensure compliance with applicable US data protection regulations including HIPAA.
Data Retention
Customer Data
AskYourDatabase retains Customer Data in line with the Customer’s instructions (including through use of the Services, the performance of any applicable terms in the Subscription Agreement and DPA), and as required by applicable law. The deletion of Customer Data and other use of the Services by the Customer may result in the deletion and/or de-identification of certain associated Other Information.
Other Information
Other Information relating to you is retained by AskYourDatabase for as long as reasonably necessary for the purposes described in this Privacy Policy. We may need to retain your Other Information for a period of time after you or your administrator has deactivated your account to pursue our legitimate business interests, comply and demonstrate compliance with relevant legal obligations, resolve disputes, conduct audits and enforce our agreements with the Customer or third parties.
For example, AskYourDatabase will retain:
- Service Information for as long as you use the Services
- Account Information for account active period plus 1 year
- Usage logs for 30 days
- Other Information for legal reasons where applicable
Your Rights
Individuals in various jurisdictions, including the European Economic Area, the United Kingdom and Brazil, have legal rights in relation to their personal data. You may have the right to request access to your personal information and/or to request that this information is updated, corrected or deleted. You can do this by emailing sheldon@askyourdatabase.com.
AskYourDatabase primarily relies on its legitimate interests, described in the “How We Process your Information and our Legal Bases for Doing So” section above, to process your Personal Data in the European Economic Area, UK and Brazil. You have a right to object to processing of your Personal Data where we rely on legitimate interests. You can exercise this right by emailing sheldon@askyourdatabase.com.
Your California Privacy Rights
This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or “CCPA,” as amended by the California Privacy Rights Act or “CPRA”.
California law requires that we detail the categories of personal information that we collect and disclose for certain “business purposes.” In addition to the information provided above in the ‘Information AskYourDatabase Collects And Receives’ section, we collect the following categories of personal information:
- Identifiers/contact information
- Commercial information
- Internet or electronic network activity information
- Geolocation information
- Professional or employment-related information
- Inferences drawn from any of the above categories
AskYourDatabase does not sell (as such term is defined in the CCPA or otherwise) the personal information we collect. Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect, to delete their personal information, and to not be discriminated against for exercising these rights.
California consumers may make a request pursuant to their rights under the CCPA by contacting us at sheldon@askyourdatabase.com.
Security
AskYourDatabase takes security seriously. We utilize enterprise-grade cloud infrastructure with comprehensive security measures including end-to-end encryption, OAuth 2.0 authentication, and automated security monitoring. Our US-based data centers provide round-the-clock security, fully redundant power systems, and comprehensive audit logging.
Protecting Customer Data is a top priority for AskYourDatabase. We take a minimalist approach to storing or processing Customer Data. For database connections, AskYourDatabase only stores connection metadata and does not persist actual database content unless explicitly configured by the Customer for caching purposes, which can be disabled at any time.
Age Limitations
These Services are not directed to individuals under the age of 18, and we kindly request they not provide any Information through the Services. Please contact us if you become aware that anyone younger than 18 has provided us with Personal Data and we will take steps to delete such information.
Data Protection Officer
Our Data Protection Officer can be contacted at sheldon@askyourdatabase.com.
Contact AskYourDatabase
You can contact AskYourDatabase directly at sheldon@askyourdatabase.com if you are seeking to exercise any of your statutory rights or if you have any questions or concerns about AskYourDatabase’s practices or this Privacy Policy. We will respond within a reasonable timeframe.
Changes To This Privacy Policy
AskYourDatabase may make occasional changes to this Privacy Policy. If we decide to change our Privacy Policy, we will post those changes on this page. If we are going to use Personal Data collected through the Site in a manner materially different from that stated at the time of collection, then we will notify users via email and/or by posting a notice on our Site for 30 days prior to such use or by other means as required by law. Please work with your administrator to deactivate your account if you disagree with any change to this Privacy Policy.
Last updated: July 22, 2025