Privacy Policy
Last updated: April 13, 2026
Introduction
DB9 ("we", "us", "our") operates the db9.ai website and the DB9 database platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Authentication credentials (hashed, never stored in plaintext)
- Account preferences and settings
Usage Data
We automatically collect information about how you use the platform:
- Database creation and management actions
- API request metadata (timestamps, endpoints, response codes)
- Connection metadata (IP addresses, client identifiers)
- Performance metrics (query latency, connection counts)
Database Content
Your database content (tables, rows, files stored via fs9) is your data. We do not access, read, or analyze your database content except as necessary to provide the service (replication, backups, and infrastructure operations).
How We Use Your Information
- Provide, maintain, and improve the DB9 platform
- Process transactions and manage your account
- Send service-related communications (downtime notices, security alerts)
- Monitor and analyze usage patterns to improve performance and reliability
- Detect, prevent, and address technical issues and abuse
- Comply with legal obligations
Data Storage and Security
Your data is stored on infrastructure powered by TiKV, a distributed transactional key-value store. All data is encrypted in transit (TLS) and at rest. We use SCRAM-SHA-256 for connection authentication.
We implement industry-standard security measures including:
- Encryption in transit and at rest
- Network isolation between tenants
- Role-based access control
- Regular security audits
Data Sharing
We do not sell your personal information. We may share information with:
- Infrastructure providers — to host and deliver the service
- Analytics providers — to understand usage patterns (aggregated, non-personal data only)
- Legal authorities — when required by law or to protect our rights
Data Retention
We retain your account data for as long as your account is active. Database content is retained according to your plan's storage policies. When you delete a database, the data is removed from active storage within 30 days and from backups within 90 days.
Anonymous trial accounts that remain unclaimed are subject to automatic cleanup as described in Anonymous & Claimed Databases.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your database content at any time via SQL dump or the SDK
- Opt out of non-essential communications
Cookies
We use essential cookies for authentication and session management. We use analytics cookies to understand how visitors use our website. You can control cookie preferences in your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
Contact
If you have questions about this Privacy Policy, contact us at privacy@db9.ai.