Privacy Policy
Draft for legal review. 8-sys Company's public contact address, registered entity details, applicable jurisdiction and legal review are pending. This page is not a finalized contract or compliance certification.
Scope and responsibilities
8-sys Company operates SQL Space. This draft covers account and service data. For personal data you access in Fusion, your organization decides the purpose of processing; 8-sys Company processes that data to deliver the service under your instructions and an applicable DPA.
Information and purposes
SQL Space stores email addresses, password hashes, account roles and verification status, encrypted authenticator secrets, recovery-code hashes, organization details, invitations, encrypted connection credentials, saved SQL, history, audit records and preferences. These support authentication, collaboration, query execution, security, recovery and service operation. Submitted SQL and results may themselves contain personal data.
The service uses a necessary session cookie to keep you signed in. It does not add advertising trackers. The public sign-in, sign-up and emailed-link pages (never the signed-in app) use Umami, cookieless analytics that 8-sys Company runs at stats.8-sys.com, to count visits: it records the page path, referrer, browser, operating system, device type and approximate country, never URL query strings or fragments, and sets no cookies. Pages use your device's system fonts. Google Fonts is contacted only if you choose a web font in Settings; your browser then requests it from Google's font servers. Error monitoring excludes request contents and customer payloads.
Storage and retention
Ordinary results are not saved as result sets. Multi-sheet XLSX export rows are stored temporarily, expire after one hour, and are pruned on the five-minute maintenance schedule. Saved queries and preferences remain until removed or the organization is purged. History keeps up to 500 entries per user. SQL audit records are pruned after 365 days. Account events remain until organization deletion; operational logs are configured for 30 days.
On confirmed organization deletion, access stops immediately and live tenant product data is purged after 30 days. Backups have a seven-day retention limit, so removal from backups can take up to 37 days from the request plus the maintenance interval. A minimal manifest containing organization identifiers and deletion dates is kept outside the backed-up database for restore protection. No billing or card data is stored by this implementation; future accounting retention must be disclosed before payments are enabled.
Operator actions on accounts (such as recovery, role or plan changes, and deletion requests) are logged with operator identity, time, the organization and user identifiers concerned, and the stated reason, which may refer to the account holder. These records are kept for 365 days, including after organization deletion, to answer questions about who changed an account and why. They do not contain SQL, passwords or tokens. This draft is subject to legal review.
Recipients and locations
Production hosting and email run on Contabo servers in Germany (EU). Optional Sentry error monitoring must use an EU project. Oracle receives queries through your own Fusion connection. The Subprocessors page lists current and planned services. A hosting region alone does not settle international-transfer obligations; safeguards must be reviewed before launch.
Your choices and requests
Owners manage membership and request organization deletion. You can remove saved SQL and history in the app. Account correction, access requests, complaints, and any applicable rights must be handled through 8-sys Company's public contact address, which is not yet finalized. Before launch, this notice must state that address, legal bases, applicable rights and supervisory-authority information for the markets 8-sys Company serves.