SQL Database Bridge

Privacy Notice

Last updated: 17 August 2026

This Privacy Notice explains how The PopUpFactory LLC ("we", "us"), trading as SQL Database Bridge, handles personal data when you use our website, web application and desktop bridge application (together, the "Service").

1. Who we are

The PopUpFactory LLC is the data controller for personal data processed through the Service. We decide what personal data is collected and why. For privacy questions or to exercise your rights, contact us at privacy@sql-bridge.lovable.app.

2. Personal data we collect

  • Account data — email address, name (if provided), authentication identifiers from Google sign-in, and account status.
  • Connection metadata — names, database engine type, host label, execution location and similar descriptive fields for the database connections you register. Credentials for local connections stay on your own machine; credentials for hosted connections are stored encrypted and never displayed back to you.
  • Usage and telemetry — query counts, tool invocations, timestamps, plan entitlement checks and error events.
  • Device and technical data — IP address, browser or client user agent, and device identifiers used for security and abuse prevention.
  • Support and product feedback — messages you send us and content you post to the feature request board.

We do not receive or store your card details. Payment data is collected and processed by Paddle as Merchant of Record.

3. Why we use it and our legal basis

  • Creating and administering your account, and providing the Service — performance of a contract.
  • Enforcing plan limits and entitlements, and preventing fraud, abuse and security incidents — legitimate interests.
  • Improving reliability and product direction using aggregated usage data — legitimate interests.
  • Responding to support requests — performance of a contract or legitimate interests.
  • Optional product or marketing email — consent, withdrawable at any time.
  • Meeting accounting, tax and other legal obligations — legal obligation.

4. Who we share data with

  • Merchant of Record — Paddle.com Market Limited handles the sale of our subscriptions, payments, subscription management, invoicing and sales-tax compliance, and processes the personal data needed for those purposes.
  • Service providers / subprocessors — hosting, database, authentication, email delivery and error monitoring providers acting on our instructions.
  • Professional advisers — legal, accounting and audit advisers where needed.
  • Authorities — where disclosure is required by law or to protect our legal rights.

We do not sell personal data.

5. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Retention

We keep account and connection metadata for as long as your account is active. After you delete your account we remove or anonymise it within 90 days, except where we must retain records longer for tax, accounting, fraud-prevention or legal-claim purposes. Usage logs are retained for up to 12 months.

7. Your rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, and you may object to processing based on legitimate interests. Where processing is based on consent you can withdraw it at any time. Contact us at privacy@sql-bridge.lovable.app and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local supervisory authority.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored database secrets, row-level access controls, scoped authentication tokens and least-privilege access for staff. No system can be guaranteed completely secure.

9. Cookies

We use essential cookies and local storage to keep you signed in and to secure the session; the Service cannot function without them. Any analytics or marketing cookies, if introduced, are optional and you will be able to manage them through your browser settings or an in-app preference control. Paddle may set cookies on the checkout it operates.

10. Changes

We may update this notice. Material changes will be announced in the app or by email, and the "last updated" date above will change.