Privacy Policy

1. Introduction

WoWSQL ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (encrypted)
• Company name (for business accounts)

Usage Data

We automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent
• API usage statistics
• Error logs and performance metrics

Payment Information

Payment processing is handled by third-party providers (Razorpay). We do not store complete credit card numbers or payment credentials on our servers.

User Data

Your project databases and files stored through our Service remain your property. We do not access, use, or disclose this data except as necessary to provide the Service or as required by law.

MCP & Third-Party AI Client Data

When you connect WoWSQL to an AI assistant or editor through our Model Context Protocol (MCP) server (for example ChatGPT, Claude Desktop, Cursor, Windsurf, VS Code, or any other MCP-compatible client), we may process the following on your behalf:

• OAuth authorization records (client name, granted scopes, project scope, token metadata)
• Project metadata (names, slugs, regions, status, configuration you choose to expose)
• Database schema information (table names, column metadata, approximate row counts)
• SQL statements you or the connected client submit through authorized MCP tools
• Query results and documentation content returned to the connected client
• Storage bucket names and metadata, when storage features are enabled
• API request logs related to MCP tool calls (timestamps, endpoints, success or error status)

We do not collect your WoWSQL password through MCP. Authentication uses OAuth 2.0 with PKCE. Database credentials are not sent to third-party AI providers by WoWSQL.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain our Service
• Process transactions and send transaction notifications
• Provide customer support and respond to inquiries
• Send administrative information and service updates
• Monitor usage patterns and improve our Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations
• Authenticate and operate MCP connections you authorize with third-party AI clients
• Execute database, documentation, and storage operations requested through authorized MCP tools

4. Data Sharing and Disclosure

We may share your information with:

Service Providers

Third-party companies that provide services on our behalf (hosting, payment processing, analytics). These providers are contractually obligated to protect your data.

Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights and safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Third-Party AI Clients (MCP)

When you connect WoWSQL to a third-party AI client via MCP, that client may receive tool responses from WoWSQL (such as project details, schema information, SQL results, and documentation). WoWSQL and the third-party AI provider are separate controllers of their respective data.

If you use the WoWSQL app in ChatGPT, your prompts and tool responses may also be processed by OpenAI under OpenAI's own privacy terms. Similar applies to Anthropic (Claude), Cursor, and other connected clients — each provider's privacy policy governs how they handle conversation data on their side.

We do not sell your personal data or database contents to AI providers. We share data with a connected client only when you authorize the connection and the client invokes an authorized MCP tool.

5. Data Security

We implement industry-standard security measures:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Monitoring and logging of suspicious activities
• Regular backups and disaster recovery procedures

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we retain data for 30 days to allow account recovery, then permanently delete all data except where retention is required by law.

MCP OAuth tokens and authorization grants remain active until you revoke them from your WoWSQL dashboard or delete your account. MCP-related API logs are retained for up to 90 days for security, debugging, and abuse prevention, unless a longer period is required by law.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Export your data in a portable format
• Object to processing of your data
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with a data protection authority
• Revoke MCP connections authorized for ChatGPT, Claude, Cursor, or other clients from your dashboard
• Request information about MCP-related data we hold about your account

To exercise these rights, contact us at privacy@wowsql.com

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns (Google Analytics, with IP anonymization)
• Improve service performance

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

9. International Data Transfers

WoWSQL Technologies Pvt. Ltd. is registered in Thoothukudi, Tamil Nadu, India. Your application data is primarily stored in cloud data centers located in Mumbai, India and Singapore. If you access our Service from outside these regions, your data may be transferred internationally. We ensure adequate safeguards are in place for such transfers.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. AI Assistants & MCP Integrations

WoWSQL offers an MCP server at https://mcp.wowsql.com/mcp that lets you connect supported AI assistants and development tools to your WoWSQL account. This includes, without limitation, ChatGPT apps, Claude Desktop, Cursor, Windsurf, VS Code extensions, and other MCP-compatible clients.

What happens when you connect:

• You sign in to WoWSQL and approve specific permissions (read and/or write) on our OAuth consent screen
• The connected client may call WoWSQL tools only within the scopes and project limits you approved
• SQL and other write operations run only when you request them through the connected client
• You may use read-only MCP mode to restrict write operations where supported

Your responsibilities:

• Do not connect MCP clients if your database contains data you are not permitted to expose to an AI assistant
• Do not query or store payment card data, government IDs, health records, or authentication secrets through MCP tools
• Review each client's privacy policy before connecting (OpenAI, Anthropic, Cursor, etc.)
• Revoke unused MCP connections promptly from your WoWSQL dashboard

For questions about MCP data handling, contact privacy@wowsql.com.

12. Third-Party Links

Our Service may contain links to third-party websites and AI platforms. We are not responsible for the privacy practices of these sites or clients. We encourage you to review their privacy policies before connecting or sharing data.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates when changes were last made.

14. GDPR Compliance

For users in the European Economic Area (EEA), we comply with GDPR requirements. Our legal basis for processing includes contract performance, consent, and legitimate interests. You have additional rights under GDPR, including data portability and the right to lodge complaints with supervisory authorities.

15. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

WoWSQL Technologies Private Limited.
Email: privacy@wowsql.com
Data Protection Officer: dpo@wowsql.com
Registered Office: 7/54 East Street, Kulaiayanakarisal, Thoothukudi, Tamil Nadu 628103, India