Legal

Privacy Policy

Last updated: March 2026

1. Introduction

Kwery ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address — For account identification and communication
  • Name (optional) — For personalization
  • Password — Stored securely using industry-standard hashing

2.2 API Usage Data

We automatically collect when you use our API:

  • API endpoints accessed
  • Request timestamps and frequency
  • Response times and status codes
  • IP addresses
  • User agent strings

2.3 Authentication Data

We store the following for security purposes:

  • API key hashes (never the actual keys after initial display)
  • Last login timestamps
  • Account verification status

3. How We Use Your Information

We use collected information to:

  • Provide the Service — Authenticate requests and deliver API responses
  • Account Management — Create and maintain your account
  • Security — Detect and prevent fraud and unauthorized access
  • Rate Limiting — Enforce fair usage policies
  • Analytics — Improve service performance and reliability
  • Communication — Send important service updates and notifications

4. Data Storage and Security

4.1 Storage

Your data is stored on secure PostgreSQL databases with:

  • Encrypted connections (TLS/SSL)
  • Regular automated backups
  • Access controls and authentication

4.2 Security Measures

We implement industry-standard security practices:

  • Password hashing using secure algorithms
  • API keys stored as hashes
  • JWT tokens for session management
  • Redis-based rate limiting and session storage
  • HTTPS encryption for all communications

5. Data Sharing

We do not sell your personal information. We may share data only:

  • Service Providers — With trusted third parties who assist in operating our Service
  • Legal Requirements — When required by law or to protect our rights
  • Business Transfers — In connection with a merger or acquisition

6. Data Retention

  • Account Data — Retained while your account is active
  • API Usage Logs — Retained for analytics and debugging purposes
  • Pending Signups — Automatically deleted after expiration

Upon account deletion, your personal data will be removed from our active databases.

7. Your Rights

You have the right to:

  • Access — Request a copy of your personal data
  • Correction — Update or correct your information
  • Deletion — Request deletion of your account and data
  • Portability — Receive your data in a portable format
  • Withdrawal — Withdraw consent for data processing

To exercise these rights, contact us at privacy@kwery.xyz.

8. Cookies and Tracking

We use minimal cookies for:

  • Authentication — Session management and login state
  • Preferences — Theme settings (light/dark mode)

We do not use third-party tracking cookies or advertising trackers.

9. Third-Party Services

We may use the following third-party services:

  • Google OAuth — For optional social login (subject to Google's Privacy Policy)
  • Email Services — For sending verification and notification emails

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

11. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. Continued use of the Service constitutes acceptance of the revised policy.

13. Contact Us

For privacy-related inquiries, please contact: support@kwery.xyz.