Privacy Policy

1. Data Collected

Account information: your e-mail address, your irreversibly hashed password, your account language and your account creation date.

Organization and subscription: your organization name, your role/memberships and your plan/subscription status.

Device information: the identifier and name of the device you activate the app on (for the device limit and account security).

Usage metering: for each AI generation call, the date, the provider/model used, the approximate token count and the cost. These records do not contain your question text or your result data.

Cache: to avoid re-running the model when the same question is asked over the same schema, the generated SQL is stored alongside a cryptographic hash of your question and schema — the plain text of your question is not stored.

Contact and waitlist: the e-mail address and message you enter into the waitlist or the contact form.

Technical data: the secure (httpOnly) cookie that keeps you signed in, plus basic security/operational logs.

2. What Is Sent to the Cloud

To turn your natural-language question into SQL, only two things are sent to the cloud: (1) your question and (2) the relevant database schema — that is, table and column names and their types.

The row/cell data in your database (your actual records) is never sent.

This content is passed to our subprocessor, Google's Gemini model, for SQL generation. With the in-app transparency feature you can see exactly what will go to the cloud before it is sent.

3. What Stays Local

Your database row data, your query results and the execution of queries stay on your computer; they are not transferred to our servers.

Your database connection details (server, username, password) are stored encrypted on your device using Windows DPAPI; they are not sent to the cloud and cannot be seen by us.

Your query history is kept only on your own device.

4. Retention Periods

Your account and organization data are kept while your account is active. When you close your account, they are deleted or anonymized within a reasonable period, subject to any legal retention obligations.

Usage metering records are kept for as long as needed for billing and legal obligations.

Cache entries may be invalidated by expiry or a schema change.

Waitlist and contact records are deleted when the processing purpose no longer applies or upon your request.

5. Your Rights (KVKK & GDPR)

If you are in Turkey, under the KVKK (Article 11) you have the right to learn whether your personal data is processed, to request information if it is, to learn the purpose of processing and whether it is used accordingly, and to know the third parties to whom it is transferred at home or abroad.

You also have the right to request correction of incomplete or inaccurate data, deletion or destruction of your data and notification of these actions to third parties; to object to a result against you produced solely by automated analysis; and to claim compensation if you suffer damage due to unlawful processing.

If you are in the European Union/EEA or the United Kingdom, under the GDPR you additionally have the rights of: access; rectification; erasure ("the right to be forgotten"); restriction of processing; data portability; and objection to processing. Where processing is based on your consent, you may withdraw it at any time, and you may lodge a complaint with a competent supervisory authority (the data protection authority in your country).

To exercise these rights, contact hello@persight.ai.

6. Contact

Data controller: PerSight. (The legal entity name and notification address will be published here once the company is established.)

Contact and data-protection requests: hello@persight.ai.