Last updated: December 26, 2025

Privacy Policy

VaultSQL Inc. (VaultSQL, we, us, or our) respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, store, and protect information when you interact with our websites, products, or services (collectively, the Services).

Information We Collect and How We Use It

We collect information that you voluntarily provide when you create an account, configure database connections, or communicate with us. This may include your name, email address, workspace identifiers, and authentication credentials for the VaultSQL service (not your database passwords).

We automatically collect limited technical information when you use the Services, such as browser type, device details, IP address, and usage patterns. This helps us improve security, diagnose issues, and enhance functionality.

Information we collect may be used for purposes such as:

  • Providing and maintaining the Services
  • Authenticating users and enforcing workspace access controls
  • Responding to support inquiries and communications
  • Improving features, security, and reliability
  • Complying with applicable legal obligations

Database Credentials and Encryption

Vault Mode: In Vault Mode, VaultSQL never sees your plaintext database credentials. You generate an RSA-4096 keypair protected by a passphrase. Database credentials are encrypted with ChaCha20-Poly1305, and your private key decrypts them locally. The server only stores encrypted credentials and your public key.

Managed Mode: In Managed Mode, database credentials are encrypted server-side with a master key. Authorized users can query databases in a single call. Credentials remain encrypted at rest and are only decrypted in memory during query execution.

We do not log, persist, or share your database passwords, connection strings, or query results beyond what is necessary to execute your queries and maintain audit logs within your workspace.

Sharing, Retention, and Security of Information

We do not sell your personal information. We may share information with third-party service providers (such as hosting or analytics providers) only to the extent necessary for them to perform services on our behalf. We may also disclose information if required by law or in response to valid legal requests.

We retain account information and audit logs according to the retention settings and product defaults that apply to your workspace. Workspace data, including encrypted credentials, is retained until you delete the workspace or terminate your account.

We implement strong security measures, including encryption at rest (AES-256 or ChaCha20-Poly1305), TLS for data in transit, and role-based access controls. However, no system is completely secure, and we cannot guarantee absolute security.

Your Choices, Updates, and Contact Information

You control your data within VaultSQL. You can revoke user access, delete database profiles, or close your workspace at any time. Depending on your location, you may have rights under applicable privacy laws (such as GDPR or CCPA) to access, correct, or delete your personal information.

We may update this Privacy Policy from time to time. Changes will be reflected by updating the Last updated date at the top of this page. Continued use of the Services after changes indicates acceptance of the updated policy.

If you have questions about this Privacy Policy or VaultSQL’s security architecture, contact us at:

VaultSQL Inc.