Privacy Policy

1. Introduction

MTS Digital Ventures SRL ("VexiData", "we", "us", or "our") operates the VexiData platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you sign up via a third-party provider (e.g., Google), we receive your basic profile information from that provider.

OAuth Tokens

If you authenticate via a third-party provider, we store the OAuth access token and refresh token required to maintain your session. These tokens are encrypted at rest and are used solely for authentication purposes. We do not use them to access any other data from the provider.

Database Connection Details

To provide our service, you supply database connection credentials (host, port, database name, username, password). These credentials are encrypted at rest using AES-256 encryption and are used solely to establish read-only connections to your database.

Database Metadata

We analyze and store your database schema structure (table names, column names, data types, and relationships) to enable AI-powered query generation. For low-cardinality columns, we may also store sample values to improve query accuracy. We do not store your actual row-level database content.

Query Text

We store the natural language queries you submit to our AI assistant. These are retained to provide your query history, improve response quality, and debug issues. Query results are not stored — they are fetched live from your database and transmitted directly to your browser.

Usage Data

We automatically collect information about how you interact with the platform, including pages visited, features used, and dashboards created. This data helps us improve the service.

Technical Data

We collect your IP address, browser type, operating system, and device information for security and analytics purposes.

3. How We Use Your Information

• To provide, maintain, and improve the VexiData platform
• To process your AI queries and generate dashboards
• To authenticate your identity and secure your account
• To communicate with you about service updates, security alerts, and support
• To monitor and analyze usage patterns to improve our service
• To detect, prevent, and address technical issues and abuse
• To comply with legal obligations

4. Data Storage and Security

Your data is stored on secure servers within the European Union. We implement industry-standard security measures including:

• AES-256 encryption for database credentials at rest
• TLS 1.3 encryption for all data in transit
• Regular security audits and penetration testing
• Access controls and authentication for all internal systems
• Automated threat detection and monitoring

We do not store your actual database data. Queries are executed in real-time and results are transmitted directly to your browser. Dashboard configurations are stored, but the underlying data is always fetched live from your database. CSV exports are streamed directly from your database to your browser and are never stored on our servers.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service providers — trusted third parties that help us operate our platform (hosting, payment processing, email delivery)
• AI providers — to process your natural language queries. We send database schema structure, column metadata, and sample values for low-cardinality fields to enable accurate query generation. We do not send your actual row-level data
• Legal requirements — when required by law, regulation, or legal process

6. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict processing of your personal data
• Data portability
• Object to processing of your personal data
• Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

7. Cookies

We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how our service is used. You can control cookie preferences through your browser settings.

8. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Usage logs are retained for up to 12 months for analytics and security purposes.

9. Children's Privacy

VexiData is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we discover that we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

MTS Digital Ventures SRL
Fizicienilor Alley, No. 1, Building A, Floor 9, Apt. A904
Bucharest, Romania
[email protected]