Privacy Policy

When you create an account we collect your name, email address, and sign-in information. Email/password accounts use hashed passwords and verified email addresses; Google sign-in supplies basic profile information. We manage account sessions with Better Auth.

When you connect a hosted database, we store connection metadata (including host, port, database name, and username), encrypted database passwords, cached schema information, and the permissions you configure. Query audit records include SQL, execution status, row counts, and timing. Dashboard chat history can include your prompts and returned query data.

When you authorize an AI assistant through our MCP plugin, we return accessible connection names, identifiers, database types, host and database names, project names, schema metadata, and the results of queries you request. Your assistant provider, including OpenAI when you use ChatGPT or Codex, receives those tool responses under its own privacy policy. Connection passwords and authentication tokens are not included in tool responses. Values from blocked columns are excluded from query results.

We automatically collect usage data such as pages visited, features used, browser type, and IP address to improve the service.

We use the information we collect to:

• Provide, maintain, and improve QueryBear
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities

We use TLS for hosted web traffic, encrypted database passwords, and workspace access controls. Queries pass through configured read-only checks, table permissions, column privacy controls, row limits, and timeouts. Local CLI database passwords stay in your operating system keychain rather than being uploaded to the hosted service.

We retain your account information for as long as your account is active, along with saved configuration, chat history, and query audit records needed to operate the service. You may request deletion of your account and stored data at any time by contacting spencer@querybear.com.

We use Google for optional Google sign-in, Resend for account email, Stripe for payment processing, and PostHog for product analytics. Hosting and monitoring providers process service operations and error information. Dashboard AI features send the prompts, schemas, and query results needed for your request to our AI provider, OpenAI. These providers have their own privacy policies governing how they handle data.

We use essential cookies for authentication and session management. We also use analytics cookies to understand how the service is used. You can disable non-essential cookies in your browser settings.

You have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing of your data
• Export your data in a portable format
• Withdraw consent at any time

We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date.

If you have questions about this privacy policy, contact us at spencer@querybear.com.