Privacy Notice

Your prompts stay in trusted hands.

Last updated: 17 November 2025. SchemaWhisper processes natural-language prompts, optional SQL execution requests, and lightweight telemetry so we can keep the experience secure and reliable. We avoid cookies and third-party trackers unless absolutely required.

Information we collect

We only capture what is required to deliver SchemaWhisper, secure the service, and improve reliability.

Information
  • Prompt content, provider selection, and timing metadata submitted through /api/agent.
  • UI telemetry events (button clicks, SQL execution attempts) tied to an in-memory session ID—not a browser cookie.
  • Connection metadata automatically attached by your browser (IP address, user-agent, and referrer) so we can detect abuse.

How we use the data

All captured data stays within our infrastructure and is used to operate or secure the agent.

How
  • Render responses inside the Agent Panel and, when requested, send validated SQL to Postgres.
  • Review anonymized diagnostics to debug latency, failed prompts, or SQL execution errors.
  • Detect misuse, rate-limit abusive traffic, and produce aggregated availability metrics for stakeholders.

Retention and control

We keep data only as long as needed for the purposes above. Nothing is sold or shared with advertisers.

Retention
  • Prompt payloads and execution logs are retained for up to 30 days, then automatically pruned from ui_user_event_log.
  • Infrastructure logs in /logs rotate daily and are deleted on a rolling basis.
  • You can request deletion or export by emailing admin@schemawhisper.com; include the approximate timestamp and prompt details so we can locate the event safely.

What we do not do

Transparency matters. Here is what is intentionally out of scope today.

What
  • We do not set browser cookies, localStorage keys, or third-party analytics beacons.
  • We do not share raw prompts or SQL with model providers beyond the selected inference call.
  • We do not run advertising, retargeting, or cross-site tracking scripts.

Need more details?

Contact the SchemaWhisper team

Email admin@schemawhisper.com for privacy questions, data export/deletion requests, or to report unexpected behavior. We typically reply within two business days.