Privacy Policy

Introduction

At Metriql, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered natural language to SQL conversion platform ("the Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use the Service.

1. Information We Collect

1.1 Personal Information

We collect information that you provide directly to us when you:

• Create an account (name, email address, company name)
• Subscribe to our service (billing information, payment details)
• Contact us for support (communication history, support tickets)
• Use the Service (queries, database connections, saved queries)

1.2 Automatically Collected Information

When you access or use our Service, we automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log data (access times, errors, performance metrics)
• Cookies and similar tracking technologies

1.3 Database Information

When you connect your databases to Metriql, we collect and process:

• Database connection credentials (encrypted and securely stored)
• Database schema and metadata
• Query results (temporarily, for display purposes)
• Natural language queries and generated SQL

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your queries and generate SQL statements
• Manage your account and subscription
• Send you technical notices, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Improve our AI models and query processing algorithms
• Comply with legal obligations

3. Data Storage and Security

3.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Secure database credential storage
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection

3.2 Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Query results are temporarily cached and automatically deleted after a specified period. You can request deletion of your account and associated data at any time.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (payment processing, hosting, analytics)
• Legal Requirements: When required by law or to respond to legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Protection: To protect the rights, property, or safety of Metriql, our users, or others
• With Your Consent: When you explicitly consent to sharing

5. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt-out of marketing communications
• Restriction: Request restriction of processing
• Objection: Object to processing of your information

To exercise these rights, please contact us at privacy@metriql.com. We will respond to your request within 30 days.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information:

• Essential Cookies: Required for the Service to function
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track your browsing habits to deliver relevant ads

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

7. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

We use the following third-party services:

• Payment processing (Stripe)
• Cloud hosting (AWS, Google Cloud)
• Analytics (Google Analytics)
• Customer support (Intercom, Zendesk)
• AI services (Anthropic Claude API)

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

10. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

Note: We do not sell your personal information.

11. GDPR Compliance

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). We are committed to GDPR compliance and process your data lawfully based on:

• Your consent
• Performance of a contract
• Legitimate interests
• Legal obligations

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We will also notify you via email or through a prominent notice on our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: