Privacy Policy

Subveil is built so that your database contents never reach us. The Subveil CLI runs inside your own infrastructure. The Subveil web service (the “Service”) stores metadata only: account details, schema structure, masking policies and audit receipts.

• Account data: name, email address, authentication provider and workspace membership.
• Schema metadata: table and column names, data types, key relationships and PII hints uploaded by the CLI.
• Policies: the masking and subsetting rules you configure.
• Audit receipts: run identifiers, timestamps, hashes of the policy and hosts, row counts and the names of masked columns.
• Billing data: plan and usage. Card details are handled by our payment processor, Stripe, and never stored by us.
• Operational data: IP address, browser type and request logs used to secure and operate the Service.

We do not receive, and our API rejects, any of the following:

• Row values or any content from your databases.
• Database connection strings or credentials. These stay with the CLI in your environment.
• Your SUBVEIL_SEED.

• To provide and secure the Service, including syncing policies and showing schema drift.
• To bill you and enforce plan limits.
• To communicate about your account, security and product changes.
• To improve reliability and performance, using aggregated operational data.

We do not sell personal information. We share data only with service providers that help us run the Service, such as cloud hosting, payment processing (Stripe) and email delivery, under agreements that restrict their use of it. If you connect GitHub, we exchange the repository and pull-request metadata needed for preview branches.

We may disclose information if required by law or to protect the rights and safety of Subveil and its users.

We keep account and workspace data while your account is active. Audit receipts are retained for the period your plan specifies so you can meet your own compliance obligations. When you delete a workspace we delete its metadata, subject to legal and backup retention limits.

Data is encrypted in transit and at rest, access is limited to personnel who need it, and our architecture avoids holding your row data at all. See our security page for details. No system is perfectly secure, and we will notify affected customers of incidents as required by law.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We will respond within the time required by applicable law.

We use only essential cookies and local storage needed to keep you signed in and remember interface preferences. We do not use third-party advertising cookies.

We will post updates to this policy on this page and, for material changes, notify account owners by email. Questions: [email protected]. See also our Terms of Service.