Privacy Policy
Last updated October 22, 2026·Applies to Cloud
How we collect, use, share, and retain personal data, including OAuth, MCP, and analytics.
In short
- We collect account, billing, and usage data to run the Service.
- Your tables and files stay yours. We do not sell them.
- Payments go through Dodo Payments. Infrastructure is AWS. Website analytics may use Google Analytics and Clarity.
- AI tools only see data after you authorize a connection.
1. Who we are
WoWSQL Technologies Private Limited (“WoWSQL”, “we”) provides hosted Postgres, Auth, Storage, Realtime, APIs, and related tools. This policy explains how we handle personal data. Project databases and files you store are your content; see Data ownership.
Controller for account and billing data: WoWSQL Technologies Private Limited, 7/54 East Street, Kulaiayanakarisal, Thoothukudi, Tamil Nadu 628103, India. Privacy: privacy@wowsql.com. DPO: dpo@wowsql.com.
2. Information we collect
Account
- Email, name (optional), encrypted password, company name if you provide it
- Team memberships and roles
Usage
- IP address, browser, pages, API usage, error and security logs
Payment
Checkout is handled by Dodo Payments. We do not store full card numbers. We receive payment status, customer identifiers, and plan information needed to provision the Service.
Project content
Tables, files, and auth users in your project stay yours. We access them only to run the platform, to debug with your request, or as required by law.
OAuth, MCP, and AI
When you connect Sign in with WoWSQL, MCP, or Mera we may process:
- OAuth records (app name, scopes, project, token metadata)
- Schema metadata and SQL you submit through authorized tools
- Query results returned to the connected client
- MCP API logs (time, endpoint, success or error) for up to 90 days
We do not collect your WoWSQL password through MCP. Database passwords are not sent to third-party AI vendors by WoWSQL. In-dashboard Mera uses Amazon Bedrock (Gemma). Details: AI and MCP.
Website analytics
The marketing site may use Google Analytics (IP anonymization) and Microsoft Clarity (form fields are masked). You can block cookies in your browser.
3. How we use information
- Provide, secure, and improve the Service
- Bill paid plans and send transactional email
- Support, abuse prevention, and legal compliance
- Run OAuth, MCP, and AI features you turn on
We do not sell your personal data or project contents.
4. Sharing
We share data with sub-processors who help us host, bill, and operate the Service (including AWS, Cloudflare, Dodo Payments, and analytics vendors on the website).
When you connect a third-party AI or automation app, that company is a separate controller for prompts and results they receive. We share tool responses only because you authorized the connection.
We may disclose information if required by law or to protect the Service and other users. If we sell or merge the company, data may transfer to the buyer under this policy.
5. Security
We use TLS in transit, access controls, monitoring, and tenant isolation as described in Shared responsibility. No method is perfectly secure. You must protect keys and RLS policies.
6. Retention
Account data lasts while the account is open. After you request account deletion we keep a 30-day recovery window, then delete, except where law requires a longer hold. Project deletion is immediate. MCP logs: up to 90 days. See Retention and deletion.
7. Your rights
Subject to Indian law and, where it applies, GDPR/CCPA, you may access, correct, delete, or export personal data, object to certain processing, and withdraw consent. Contact privacy@wowsql.com. You may also revoke OAuth apps and MCP connections you authorized.
EEA users: our bases include contract, legitimate interests (security, product improvement), and consent (optional analytics and AI connections). You may complain to a supervisory authority.
8. International transfers
We are registered in India. Application data is hosted in Mumbai and/or the United States depending on the region you pick. Access from other countries involves international transfer with contractual and technical safeguards.
9. Children
The Service is not for anyone under 18. If we learn we collected a child’s data, we will delete it.
10. Changes
We will post updates here and change the “Last updated” date. Material changes may also be emailed to the account owner.
11. Contact
Privacy: privacy@wowsql.com
DPO: dpo@wowsql.com
WoWSQL Technologies Private Limited, 7/54 East Street, Kulaiayanakarisal, Thoothukudi, Tamil Nadu 628103, India
Questions? WoWSQL Technologies Private Limited. — legal@wowsql.com · Contact