Privacy Policy

dbanalyst.ai is operated by ThinkVidya Learning Pvt Ltd ("dbanalyst," "we," "us"), based in Bangalore, India. This Policy explains what information we collect when you use dbanalyst.ai, how we use it, and the choices you have. It applies together with our Terms of Use. You accept this Policy every time you sign up for or sign in to the Service.

Account information: your name, work email, password (stored as a salted hash, never in plain text), role title, organization name and size, and timezone.

Database connection details: the host, port, and credentials you provide to connect a database. Credentials are encrypted at rest and are never shown back to you in plain text after entry.

Schema and sample data used for documentation: to auto-draft documentation, we read table and column names, types, and relationships; row counts; up to 5 sample rows per table; and a sample of distinct values for columns that look categorical. Columns whose names match common secret or credential patterns (e.g. password, token, api_key, ssn, credit_card) are automatically excluded from sample data before it is used. This filter is a heuristic on column names, not a guarantee that no personal data is ever included in a sample — you should review generated documentation and can edit or redact it before publishing it to your team.

Query activity: when you or a connected AI assistant run a query through dbanalyst, we log metadata about the request (who ran it, when, against which connection) for audit and access-control purposes.

Usage and audit data: sign-in history, actions taken in the product (e.g. inviting a member, publishing documentation), and the settings you configure.

Communications: emails you send us for support, and transactional emails we send you (verification, invitations, password resets).

• To provide the Service — connecting to your database, generating documentation, and enforcing the access controls (owner/editor/viewer) you configure;
• To generate AI-assisted documentation, as described in Section 4;
• To secure your account, investigate abuse, and maintain audit logs of activity within your organization;
• To send transactional email (verification, invitations, password resets) via our email provider;
• To improve the Service, including diagnosing errors and understanding feature usage;
• To communicate with you about the Service, including changes to this Policy or our Terms.

We do not sell your data, and we do not use it for advertising.

There are two distinct ways AI touches your data in dbanalyst, and they work differently:

Automated documentation generation.When you connect or resync a database, dbanalyst sends schema metadata and the limited sample data described in Section 2 to Google's Generative AI (Gemini) API to draft table and column descriptions, glossary suggestions, and metric definitions. This is a single-purpose call to generate a draft; results are staged for your review and are not published to your team until an owner approves them.

Third-party AI assistants you connect (Claude, ChatGPT, Gemini, or others).When you authorize an assistant to query your database through dbanalyst's connector, the query is executed directly against your database and the results are returned straight to that assistant — this traffic is not additionally routed through our own AI provider. Once results reach the assistant you connected, that provider's own terms and privacy policy govern how they handle it; we encourage you to review those before connecting an assistant.

We do not use your database content to train our own models or share it with model providers for their training purposes beyond the single documentation-generation call described above.

We rely on the following categories of service providers to operate dbanalyst:

• Google Cloud Platform — hosting (Cloud Run), our application database, file storage, and background job processing, primarily in the Mumbai (asia-south1) region;
• Google Generative AI (Gemini) — automated documentation generation, as described in Section 4;
• Resend — delivery of transactional email (verification, invitations, password resets).

These providers process data only as needed to deliver their part of the Service and are not permitted to use it for their own independent purposes.

Database credentials are encrypted at rest. Queries run through dbanalyst's AI-assistant connector are restricted to read-only statements (SELECT/EXPLAIN/SHOW/DESCRIBE); statements that modify data or schema are rejected. Columns flagged as sensitive can be blocked from query results entirely, and result sets are capped in size. Access within your organization is controlled by role (owner, editor, viewer), and key actions are recorded in an audit log visible to owners.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

We retain your account and connection data for as long as your account is active. If you want your account and associated data deleted, contact us at privacy@dbanalyst.ai and we will delete or anonymize it within a reasonable period, except where we are required to retain it for legal, security, or accounting reasons.

Depending on where you are located, you may have rights to access, correct, export, or request deletion of your personal data — for example under India's Digital Personal Data Protection Act, 2023. To exercise any of these rights, contact us at privacy@dbanalyst.ai.

Our infrastructure is hosted in India. Where we use third-party AI providers (Section 4), your data may be processed on that provider's infrastructure, which may be located outside India.

We use a single essential cookie to keep you signed in. We do not currently use third-party advertising or tracking cookies.

The Service is intended for business use and is not directed at, or knowingly used to collect information from, individuals under 18.

We may update this Policy from time to time. We will update the "Last updated" date above, and for material changes we will make reasonable efforts to notify you before they take effect.

Questions about this Policy or your data? Contact us at privacy@dbanalyst.ai.