A practical privacy overview.

Account and workspace records

The website stores accounts, organization membership, billing/permission state, account preferences and permitted audit records in our database. Historical web saved SQL, designs, drafts and query history are retained for authorized access; they are not deleted or migrated by disabling the customer web workspace. Desktop saved SQL, designs, drafts, results, history and export jobs stay in the local account workspace and are not automatically synchronized to our server. Account names and email addresses are encrypted at rest. Website contact details, messages and recorded submission/confirmation IP addresses are encrypted and available only to the platform owner. One automatic confirmation email is issued per address. A retained keyed email fingerprint prevents repeated email even after unconfirmed messages are removed after 30 days. Only confirmed inquiries are forwarded to the platform owner. A super admin can explicitly resend a confirmation when needed. SQL can contain sensitive text; save only content you are authorized to retain.

Credentials and query results

App passwords are hashed and saved API keys are encrypted. Only super admin currently has web Oracle execution. Its credentials are temporary server-memory values, and its results are processed on the server for display/export. Customer web accounts do not have Oracle query execution. In the desktop app, Oracle queries and results are processed locally; optional remembered Oracle credentials use operating-system encryption. Desktop background exports create temporary local files. Installers and published autocomplete metadata download from private Cloudflare R2 storage through short-lived signed links; customer query results are not uploaded there. Server recovery backups use separate private Amazon S3 storage.

Optional external services

Enabled AI requests send prompts and SQL to OpenAI without result rows. Billing uses Stripe, and account and contact notifications use Amazon SES. Desktop device/account validation contacts SQL Hop at startup and every 24 hours while open. The server records the device ID, computer name, public key and registration/validation times. The private key and signed authorization are stored with operating-system encryption on the computer. Existing authorization can cover an account-server outage for up to 48 hours since last success, capped by the known trial or subscription end; reopening does not extend it. Enabled AI uses its configured service. Each provider has its own terms and data policies.

Retention

A hashed email identifier and first-trial date are retained to prevent repeat trials, even if an account is removed. Saved work remains until deleted. Query history retains one month of activity or at least the latest ten entries. Audit records older than ninety days are removed by scheduled cleanup. Background download files expire after twenty-four hours.

Website storage

The public pages use no advertising trackers or analytics scripts. The application uses authentication cookies and browser storage for its operation.

Public-form spam protection

Our contact, signup and forgot-password forms use Cloudflare Turnstile to help distinguish legitimate visitors from automated abuse. Loading this verification connects your browser to Cloudflare, which processes technical browser and network information, including your IP address. Our server verifies the applicable challenge before sending form-triggered confirmation, activation or password-reset emails. Contact inquiries are recorded only after the required checks. Verification tokens are transient and are not stored with inquiries or included in emails. We do not send your name, email address, organization or inquiry message to the Turnstile verification service. Read Cloudflare’s privacy policy for details. Our existing submission rate limits, hidden spam field and one-confirmation-email-per-address rule remain in place.