Privacy Statement
Last updated: July 10, 2026
Summary (plain English)
FlexTable is a desktop database client. Your database connections, credentials, and the data inside your databases stay on your own computer - we never receive them. We collect a small amount of information to run licensing, keep the app updated, understand download numbers, and handle support. Where we can identify a device or an IP address, we keep it only as a one-way hash on our servers. The AI Assistant uses your own API key and talks directly to the provider you choose - your prompts do not pass through us.
1. Who we are
The controller of your personal data is FlexTable ("we"), based in Vietnam. Privacy contact: [email protected].
2. What we collect, why, and our legal basis
| Data | What | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| License activation / phone-home | your license key, your device hardware id, app version, OS (the raw hardware id is sent to activate; on our servers it is stored only as a one-way HMAC, never kept in raw form) | Issue and validate your license; seat management | Performance of a contract | Life of the license |
| Download analytics | hashed IP (ip_hash, one-way HMAC - never the raw IP), country, app version, platform | Measure how the app is distributed | Legitimate interest | ~12 months, then aggregated |
| In-app feedback | your message, category, diagnostic details, optional email, and the request IP address (logged server-side) | Respond to and act on your feedback | Consent (you choose to send it) | Until your request is resolved, then deleted within 12 months |
| Update checks | app version, platform, target/arch | Offer the correct update | Legitimate interest / contract | Short-lived logs |
| Purchases | email, transaction data | Process payment and deliver a license | Performance of a contract | Per our payment processor + accounting law |
| Newsletter signup | your email and a record of your consent | Send product news you opted in to | Consent (single opt-in; unsubscribe in any email) | Until you unsubscribe |
3. What we do NOT collect
- Your database connections and credentials - stored locally on your device (encrypted), never transmitted to FlexTable.
- The contents of your databases and your query results - they never leave your machine.
- Your AI Assistant prompts - when you use the assistant, requests go directly from the app to the provider you configured, using your own API key. FlexTable does not receive, route, or store them.
4. Third parties and processors
We share the minimum necessary with:
- Cloud infrastructure (AWS) - hosts our backend and release files (installers are served from AWS S3).
- CDN / edge (Cloudflare) - fronts our API and passes your IP address (
CF-Connecting-IP) to the backend. - Merchant of record (Polar) - handles checkout, card processing, and sales tax/VAT under its own privacy policy.
- AI providers you configure - if you enable the AI Assistant, your prompts go to the provider you selected (e.g. OpenAI, Anthropic, Google, or a custom endpoint). That provider's own privacy terms apply; FlexTable does not control this data.
We do not sell your personal data.
5. International data transfers
Because our infrastructure and payment processing are provided by companies outside Vietnam (e.g. AWS, Cloudflare, Polar) and any AI provider you choose may be abroad, some data is transferred internationally. Where required, we put appropriate safeguards in place for these transfers.
6. Your rights
Depending on where you live (including under Vietnam's Personal Data Protection Law and the EU GDPR), you may request to access, correct, delete, or export your data, object to or restrict processing, and withdraw consent at any time (as easily as you gave it). Contact [email protected]. You may also complain to your local data-protection authority.
7. Consent and telemetry
Where we rely on consent (e.g. feedback you submit), you choose to provide the data. Any non-essential telemetry is off by default and can be turned off in the app's settings.
8. Cookies
Our marketing site does not use advertising or analytics cookies. Your theme preference is stored in your browser's local storage (not a cookie) and never leaves your device. The account portal uses a single strictly necessary cookie to keep you signed in.
9. Security
We protect data with encryption in transit, restricted access, and one-way hashing of device identifiers and IP addresses. Database credentials are encrypted and kept on your own device.
10. Data breach
If a breach affecting your personal data occurs, we will notify affected users and any required authority without undue delay and, where required, within 72 hours of becoming aware.
11. Children
FlexTable is not directed to children under 16 and we do not knowingly collect their data.
12. Changes
We may update this statement; material changes will be announced and reflected in the "Last updated" date above.
13. Contact
Questions or requests: [email protected].
Related: License Agreement · Terms and Conditions