Queryflo Back to Home

Privacy Policy

Effective date: January 1, 2026 · Queryflo by Data-Techcon

1. Information We Collect

We collect the following categories of information:

  • Account Data: Email address, display name, and authentication tokens provided at sign-up.
  • Usage Data: Challenge attempts, query submissions (text of SQL queries), scores, timestamps, and streak data.
  • AI Interaction Data: Text inputs submitted to AI features (schema questions, natural language queries). These are sent to Anthropic's API for processing.
  • Technical Data: IP address, browser type, device type, and session duration collected for security and performance monitoring.

2. How We Use Your Information

  • To operate and improve the Platform and personalize your learning experience.
  • To process and validate SQL query submissions against expected outputs.
  • To compute your progress, XP, streak, and domain performance metrics.
  • To generate AI-powered feedback via Anthropic's Claude API (your queries are processed on Anthropic's servers).
  • To communicate platform updates, new features, and legal notices.
  • To detect and prevent fraud, abuse, or unauthorized access.

3. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

  • Supabase: Our database and authentication provider. Data is stored in Supabase-managed PostgreSQL on AWS infrastructure.
  • Anthropic: Your AI feature inputs (queries, schema questions) are transmitted to Anthropic's API. Anthropic's privacy policy governs their processing of this data.
  • Vercel: Our hosting provider, which may process request metadata for CDN and performance purposes.
  • Legal requirements: We may disclose information if required by law, court order, or governmental authority.

4. Data Retention

We retain your account data for as long as your account is active. SQL query submissions and attempt history are retained for up to 2 years to support progress tracking. You may request deletion of your data at any time by contacting us.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Data portability (receive your data in a structured format)

To exercise any of these rights, contact us at privacy@data-techcon.com.

6. Security

We implement appropriate technical and organizational measures to protect your data. SQL queries submitted through the Platform are executed in a read-only sandbox environment. API keys and service credentials are never exposed to the browser. All data in transit is encrypted via TLS.