Last updated: December 25, 2024

Privacy Policy

DataSpeak is built with privacy at its core. Your data stays on your device, and we believe you should know exactly how your information is handled.

Overview

DataSpeak is a desktop application designed with privacy as a core principle. Unlike cloud-based database tools, DataSpeak runs entirely on your local machine. Your database credentials, queries, and data remain under your complete control.

This Privacy Policy explains our practices regarding the minimal data we may collect and how we protect your information.

Information We Collect

Application Data (Stored Locally)

- Database connection credentials (encrypted using Tauri Stronghold with Argon2id) - Application preferences and settings - Query history (stored locally on your device)

No Cloud Storage

DataSpeak does not transmit your database credentials, query results, or any of your data to our servers or any third-party services.

AI Features

When using natural language query features, your prompts are sent to your configured AI provider (e.g., OpenRouter). We recommend reviewing your AI provider's privacy policy. DataSpeak does not store or process AI conversations on our infrastructure.

Optional Analytics

If enabled, we may collect anonymous usage statistics to improve the application: - Application version - Operating system type - Feature usage patterns (no personal data)

You can opt out of analytics at any time in the application settings.

How We Store Your Data

Local Encryption

All sensitive data, including database credentials, is encrypted using Tauri Stronghold—a secure, encrypted database designed for credential storage. We use Argon2id for password hashing, which is currently the recommended algorithm for secure password storage.

No Server Storage

We do not operate servers that store your personal data. DataSpeak is a standalone desktop application.

Your Control

You can delete all stored data at any time by: - Using the application's built-in data management features - Removing the application and its data directory from your system

Third-Party Services

DataSpeak may interact with the following third-party services:

Database Connections

When you connect to a database, DataSpeak communicates directly with your database server. We do not proxy or intercept these connections.

AI Providers

Natural language query features use third-party AI services (such as OpenRouter). Your prompts are sent directly to these services. We recommend: - Reviewing your AI provider's privacy policy - Avoiding sensitive data in natural language queries - Using read-only database users when possible

Update Checks

DataSpeak may check for updates from our servers. This check only transmits: - Current application version - Operating system type

No personal or identifying information is sent during update checks.

Security Measures

We implement several security measures to protect your data:

Credential Protection

- Encrypted storage using Tauri Stronghold - Argon2id password hashing - Credentials never transmitted to external servers

Query Safety

- AI-generated queries are read-only (SELECT statements only) - SQL injection prevention with parameterized queries - Clear visual indication of AI-generated vs. manual queries

Open Source Transparency

Our entire codebase is open source and available on GitHub. Security researchers and users can audit our code to verify our security practices.

Your Rights

As a user of DataSpeak, you have the following rights:

Data Access

All your data is stored locally on your device. You have complete access to and control over this data.

Data Deletion

You can delete all stored data at any time through the application settings or by removing the application's data directory.

Data Portability

You can export your connection configurations (excluding passwords) for backup or migration purposes.

Opt-Out

If analytics are enabled, you can opt out at any time in the application settings.

Children's Privacy

DataSpeak is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by: - Posting the new Privacy Policy on this page - Updating the "Last Updated" date - Displaying a notice in the application for significant changes

We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

GitHub Issues

For public inquiries: [github.com/TrevorIkky/DataSpeak/issues](https://github.com/TrevorIkky/DataSpeak/issues)

Community

Join our discussions: [github.com/TrevorIkky/DataSpeak/discussions](https://github.com/TrevorIkky/DataSpeak/discussions)

Frequently Asked Questions

Questions about privacy?

If you have any questions about this Privacy Policy or how DataSpeak handles your data, we are here to help.