Privacy Policy

Overview

Nexo SQL Studio is a SQL client and database development extension for VS Code. This Privacy Policy explains what information may be processed when you use the extension, website, account services, licensing, support channels, and optional Google or Microsoft sign-in.

Data we process

• Extension settings, allowlisted feature usage, Pro feature attempts, upgrade-dialog interactions, activation/downgrade events, and diagnostics when allowed by your VS Code telemetry settings. Usage reporting never includes database content.
• Account and licensing details needed to operate subscriptions, authentication, support, and billing records.
• Account identity data received when you choose Google or Microsoft sign-in, such as your email address, provider user ID, display name, and profile image when supplied by the provider.
• Support messages you send to support@nexosqlstudio.com.

Data we do not collect

Nexo SQL Studio does not collect SQL statement text, database credentials, schema or object names, local file paths, schema object contents, query result data, or arbitrary user text through telemetry. License validation may process account and license status, but it does not need database content.

How we use data

• Operate accounts, authentication, licensing, support, and essential service communication.
• Authenticate users who choose social sign-in, create or link accounts, and maintain account sessions.
• Improve product quality through diagnostics and aggregate usage insights.
• Protect the service, investigate abuse, and comply with legal obligations.

How we share data

• With service providers that help us operate authentication, hosting, billing, customer support, or email delivery, but only when needed to provide the service.
• When disclosure is required by law, legal process, or to protect the rights, security, or integrity of Nexo SQL Studio and its users.
• As part of a merger, acquisition, or similar business transfer if the service is reorganized.

Google sign-in data

If you choose Sign in with Google, Nexo SQL Studio receives limited Google account information so we can authenticate you and create or link your Nexo SQL Studio account.

• Data accessed: your Google email address, Google account identifier, and basic profile fields returned during sign-in, such as name and profile image when Google provides them.
• Data usage: to authenticate your login, create or link your Nexo SQL Studio account, maintain your session, and help prevent duplicate or unauthorized account access.
• Data storage: this sign-in data is stored in our authentication and account records, and your authenticated session is stored in secure session tokens and cookies for sign-in continuity.
• Advertising: we do not use Google sign-in data for advertising.

Google sign-in: use, sharing, and retention

The sign-in exchange receives your Google email, account ID, basic profile fields, and the ID/access-token data needed to complete authentication. We request only the OpenID Connect, email, and basic-profile scopes; this sign-in does not request access to Gmail, Drive, Calendar, Contacts, or other Google services.

• Purpose and limited use: We use Google data only to authenticate you, create or link your Nexo SQL Studio account, maintain your session, and protect those account features. We do not sell it, use it for advertising, or use it to train or improve generalized AI or machine-learning models.
• Sharing: We do not sell Google sign-in data or disclose it for a third party’s independent use. We share it only with contracted service providers that process account data for authentication, hosting, and security on our behalf, or when necessary to comply with law or protect users. Providers must protect the data and use it only to provide those services.
• Security: Google sign-in data is transmitted over HTTPS. Access to authentication and account records is restricted to authorized service operations, and web sessions use secure, HttpOnly cookies.
• Retention and deletion: We keep Google sign-in data only while it is needed to operate and secure your Nexo account. You can request deletion of your account and associated Google sign-in data by emailing support@nexosqlstudio.com. We delete the requested data after processing unless we must retain limited records for legal or security reasons. Revoking access in your Google Account stops future sign-in authorization but does not remove data already stored by Nexo.

Manage connected apps in your Google Account

Supported databases

Local database connection settings are stored separately from credentials. SQLite workflows also access files you authorize on your machine. Review the connection and AI/MCP permissions before exposing a database to an assistant.

Microsoft sign-in data

If you choose Sign in with Microsoft, Nexo SQL Studio receives limited Microsoft account information so we can authenticate you and create or link your Nexo SQL Studio account.

• Data accessed: your Microsoft account email address, Microsoft account identifier, display name, profile image when available, and basic profile information returned for sign-in.
• Data usage: to authenticate your login, create or link your Nexo SQL Studio account, maintain your session, and help prevent duplicate or unauthorized account access.
• Data storage: this sign-in data is stored in our authentication and account records, and your authenticated session is stored in secure session tokens and cookies for sign-in continuity.
• Advertising: we do not use Microsoft sign-in data for advertising.

Security

We follow industry-standard security practices and rely on VS Code security measures and native operating-system encryption facilities where appropriate. No security program can guarantee absolute protection, so keep your environment and dependencies updated.

Contact

Privacy questions and data requests should be sent to support@nexosqlstudio.com.