Privacy Policy

NoSQLSync, Inc. (“NoSQLSync,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our database migration platform at nosqlsync.com and related services (collectively, the “Service”).

If you have questions, please contact us at [email protected].

Account information. When you register, we collect your name, email address, password (hashed), company name, and billing information.

Usage data. We automatically collect information about how you use the Service, including pages visited, features used, migration job metadata (size, duration, target type), and error logs. We do not store the actual content of your databases.

Connection credentials. Database connection strings you provide are encrypted at rest and in transit. We use them only to perform migrations. Credentials are not stored beyond the duration of an active session unless you explicitly enable saved connections.

Device and log data. We collect IP addresses, browser type, operating system, referring URLs, and timestamps. This helps us detect security issues and improve performance.

Communications. If you contact us, we retain the content of your messages and our responses.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process and complete your migration jobs
• Send transactional emails (account confirmation, password reset, billing receipts)
• Send product updates and announcements (you can opt out at any time)
• Monitor and analyze usage to improve the Service
• Detect, investigate, and prevent security incidents and fraud
• Comply with legal obligations

We will never sell your personal data to third parties.

If you are in the European Economic Area (EEA) or UK, our legal bases for processing are:

• Contract performance — to provide the Service you signed up for
• Legitimate interests — to improve security, prevent fraud, and improve the product
• Legal obligation — to comply with applicable law
• Consent — for marketing communications (where required by law)

We share your information only in these limited circumstances:

• Service providers: We use trusted sub-processors (e.g., cloud hosting, email delivery, payment processing) who process data only on our behalf and under strict data protection agreements.
• Business transfers: If we are acquired or merge, your information may be transferred to the successor entity.
• Legal requirements: We may disclose your information if required by law or to protect the rights and safety of NoSQLSync, our users, or the public.
• With your consent: We may share your information for any other purpose with your explicit consent.

We do not share your data with advertisers or data brokers.

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion:

• Account data is deleted within 30 days
• Migration logs are anonymized within 90 days
• Billing records are retained for 7 years as required by tax law
• Backups are purged on a rolling 90-day cycle

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular penetration testing and vulnerability assessments
• Role-based access controls and audit logging

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will promptly notify you of any breach that affects your personal data as required by law.

We use cookies and similar tracking technologies to:

• Keep you signed in (session cookies — essential, cannot be disabled)
• Remember your preferences
• Analyze usage patterns via first-party analytics

We do not use third-party advertising cookies. You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data
• Portability — request your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — request that we restrict processing of your data
• Withdrawal of consent — withdraw consent where processing is based on consent

To exercise these rights, email [email protected]. We will respond within 30 days. For EEA/UK residents, you have the right to lodge a complaint with your local supervisory authority.

NoSQLSync is based in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. Where required by law (e.g., GDPR), we rely on Standard Contractual Clauses (SCCs) or adequacy decisions for international transfers.

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If we discover we have inadvertently collected such data, we will delete it promptly.

We may update this Privacy Policy periodically. We will notify you of material changes by email or by prominent notice within the Service at least 30 days before the changes take effect. Continued use after the effective date constitutes acceptance of the revised Policy.

For privacy questions, requests, or complaints: