Privacy Policy

Last updated October 22, 2026·Applies to Cloud

How we collect, use, share, and retain personal data, including OAuth, MCP, and analytics.

In short

  • We collect account, billing, and usage data to run the Service.
  • Your tables and files stay yours. We do not sell them.
  • Payments go through Dodo Payments. Infrastructure is AWS. Website analytics may use Google Analytics and Clarity.
  • AI tools only see data after you authorize a connection.

1. Who we are

WoWSQL Technologies Private Limited (“WoWSQL”, “we”) provides hosted Postgres, Auth, Storage, Realtime, APIs, and related tools. This policy explains how we handle personal data. Project databases and files you store are your content; see Data ownership.

Controller for account and billing data: WoWSQL Technologies Private Limited, 7/54 East Street, Kulaiayanakarisal, Thoothukudi, Tamil Nadu 628103, India. Privacy: privacy@wowsql.com. DPO: dpo@wowsql.com.

2. Information we collect

Account

  • Email, name (optional), encrypted password, company name if you provide it
  • Team memberships and roles

Usage

  • IP address, browser, pages, API usage, error and security logs

Payment

Checkout is handled by Dodo Payments. We do not store full card numbers. We receive payment status, customer identifiers, and plan information needed to provision the Service.

Project content

Tables, files, and auth users in your project stay yours. We access them only to run the platform, to debug with your request, or as required by law.

OAuth, MCP, and AI

When you connect Sign in with WoWSQL, MCP, or Mera we may process:

  • OAuth records (app name, scopes, project, token metadata)
  • Schema metadata and SQL you submit through authorized tools
  • Query results returned to the connected client
  • MCP API logs (time, endpoint, success or error) for up to 90 days

We do not collect your WoWSQL password through MCP. Database passwords are not sent to third-party AI vendors by WoWSQL. In-dashboard Mera uses Amazon Bedrock (Gemma). Details: AI and MCP.

Website analytics

The marketing site may use Google Analytics (IP anonymization) and Microsoft Clarity (form fields are masked). You can block cookies in your browser.

3. How we use information

  • Provide, secure, and improve the Service
  • Bill paid plans and send transactional email
  • Support, abuse prevention, and legal compliance
  • Run OAuth, MCP, and AI features you turn on

We do not sell your personal data or project contents.

4. Sharing

We share data with sub-processors who help us host, bill, and operate the Service (including AWS, Cloudflare, Dodo Payments, and analytics vendors on the website).

When you connect a third-party AI or automation app, that company is a separate controller for prompts and results they receive. We share tool responses only because you authorized the connection.

We may disclose information if required by law or to protect the Service and other users. If we sell or merge the company, data may transfer to the buyer under this policy.

5. Security

We use TLS in transit, access controls, monitoring, and tenant isolation as described in Shared responsibility. No method is perfectly secure. You must protect keys and RLS policies.

6. Retention

Account data lasts while the account is open. After you request account deletion we keep a 30-day recovery window, then delete, except where law requires a longer hold. Project deletion is immediate. MCP logs: up to 90 days. See Retention and deletion.

7. Your rights

Subject to Indian law and, where it applies, GDPR/CCPA, you may access, correct, delete, or export personal data, object to certain processing, and withdraw consent. Contact privacy@wowsql.com. You may also revoke OAuth apps and MCP connections you authorized.

EEA users: our bases include contract, legitimate interests (security, product improvement), and consent (optional analytics and AI connections). You may complain to a supervisory authority.

8. International transfers

We are registered in India. Application data is hosted in Mumbai and/or the United States depending on the region you pick. Access from other countries involves international transfer with contractual and technical safeguards.

9. Children

The Service is not for anyone under 18. If we learn we collected a child’s data, we will delete it.

10. Changes

We will post updates here and change the “Last updated” date. Material changes may also be emailed to the account owner.

11. Contact

Privacy: privacy@wowsql.com
DPO: dpo@wowsql.com
WoWSQL Technologies Private Limited, 7/54 East Street, Kulaiayanakarisal, Thoothukudi, Tamil Nadu 628103, India

Questions? WoWSQL Technologies Private Limited. — legal@wowsql.com · Contact