Privacy Policy

Last updated: February 25, 2026

QueryVeil ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our service.

1. Information We Collect

Account Information

When you create an account, we collect your email address and name. Authentication is handled by Supabase.

Payment Information

Payment processing is handled entirely by Stripe. We store your Stripe customer ID to manage your subscription but never have access to your full credit card number.

AI Usage Data

We track token usage (input/output counts) per AI provider and model for billing purposes. This includes the number of tokens consumed but not the content of your prompts or responses.

2. Your Data Stays Local

QueryVeil runs DuckDB entirely in your browser via WebAssembly. Your data files (CSV, Excel, JSON, Parquet) are loaded, processed, and queried locally in your browser. Your data is never uploaded to our servers.

3. AI Data Processing

When you use AI features (chat, natural language queries), the following is sent to third-party AI providers (Anthropic and/or OpenAI):

  • Your question or prompt
  • Table schema information (column names and types)
  • Semantic metadata about your tables

Your actual data rows are never sent to AI providers. AI requests are proxied through our server for authentication and usage tracking. We do not store the content of your AI conversations.

4. Cookies and Local Storage

We use:

  • Authentication cookies — Supabase session tokens to keep you logged in
  • Local storage — Application preferences and settings (theme, AI configuration)

We do not use tracking cookies or third-party analytics.

5. Error Tracking

We use Sentry to collect anonymous error reports to improve the service. This includes error messages and stack traces but does not include your personal data or file contents.

6. Data Security

All connections use HTTPS encryption. Authentication tokens are securely managed by Supabase. Server-side API keys are stored as encrypted environment variables and never exposed to the client.

7. Data Retention

Account and subscription data is retained while your account is active. AI usage records are aggregated monthly. You may request deletion of your account and associated data at any time.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Export your data
  • Cancel your subscription at any time

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice.

10. Contact

If you have questions about this privacy policy, please contact us at privacy@queryveil.com.