Privacy Policy

Last Updated: September 11, 2026

dbNexus ("we", "us", or "our") operates the dbNexus website, application, and related services (the "Service"), a collaborative database schema design and documentation platform built around DBML.

This Privacy Policy explains how we collect, use, store, and protect information when you use the Service, and the choices available to you regarding that information. By using dbNexus, you agree to the collection and use of information as described in this policy. Terms not defined here have the meanings given to them in our Terms of Service.

We collect different categories of information to operate, secure, and improve the Service.

Unless a diagram or workspace is explicitly shared privately, note that diagrams, DBML schemas, and documentation are only accessible to you and the collaborators you invite — private by default within your workspace.

When you register for dbNexus, we may collect:

• Email address
• First and last name
• Login credentials (stored securely; passwords are never stored in plain text)
• Workspace membership and role information

As part of using the Service, you create and store content such as:

• DBML schema definitions
• Imported SQL DDL and generated schema structures
• Visual diagram layouts, table groups, and color coding
• Schema documentation and descriptions
• Workspace and collaboration metadata (members, invitations, permissions)

This Customer Data is yours. We process it only as necessary to provide, secure, and improve the Service, as described in our Terms of Service.

We automatically collect information about how the Service is accessed and used, which may include your IP address, browser type and version, device identifiers, pages visited, time spent on the Service, and diagnostic data.

We use cookies and similar technologies to operate and improve the Service:

• Session Cookies — to keep you signed in and operate core functionality.
• Preference Cookies — to remember settings such as your active workspace or editor preferences.
• Security Cookies — to help detect and prevent fraudulent or unauthorized activity.

You can configure your browser to refuse cookies, though some parts of the Service may not function properly without them.

We use collected information to:

• Provide, operate, and maintain the Service, including workspaces, diagram rendering, and SQL import/export.
• Authenticate accounts and manage workspace permissions.
• Notify you of important changes to the Service.
• Provide customer support and respond to inquiries.
• Monitor usage to improve performance, reliability, and features.
• Detect, investigate, and prevent technical issues, abuse, or security incidents.

We do not sell your personal information or your database schemas.

We may share information with:

• Service providers who help us operate the platform (e.g. cloud hosting, authentication, analytics, and payment processing), bound by confidentiality obligations and only permitted to use the data to perform services on our behalf.
• Collaborators you explicitly invite into a workspace, according to the permissions you assign.
• Legal and safety purposes, where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect the rights or property of dbNexus, investigate potential wrongdoing, protect user or public safety, or defend against legal liability.
• Business transfers, in the event of a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

Your information, including Customer Data, may be processed and stored on servers located outside your own country or jurisdiction, where data protection laws may differ. By using the Service, you consent to this transfer. We take reasonable steps to ensure your data continues to receive an appropriate level of protection wherever it is processed.

We rely on trusted third parties to help deliver the Service, which may include:

• Cloud hosting and infrastructure providers
• Authentication providers
• Analytics services, to help us understand usage patterns
• Payment processors, to handle billing for paid subscriptions

These providers only receive the data necessary to perform their function and are contractually restricted from using it for other purposes. Their own privacy policies govern their handling of any data they process.

We apply reasonable technical and organizational safeguards designed to protect your account and Customer Data, including authentication controls, access permissions, encryption where appropriate, and monitoring. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for safeguarding your account credentials and for not storing sensitive secrets (such as database passwords, API keys, or access tokens) inside schema definitions.

We retain your account information and Customer Data for as long as your account is active or as needed to provide the Service. You may request deletion of your account or specific Customer Data at any time.

We may retain limited information after deletion where reasonably necessary for legal compliance, fraud prevention, security investigations, dispute resolution, or backup and disaster-recovery processes, until such backups are securely overwritten or deleted.

Certain editing features may temporarily store schema drafts or application state in your browser (local-first architecture) before syncing to dbNexus cloud services. Local browser storage should not be relied upon as a permanent backup — we recommend exporting and backing up important schemas independently.

The Service may contain links to third-party websites that are not operated by us. We are not responsible for the content or privacy practices of external sites, and we encourage you to review their policies before providing any information.

dbNexus is not directed at, and is not intended for use by, individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service, by email, or by another appropriate method, and the "Last Updated" date above will be revised accordingly. Continued use of dbNexus after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how your information is handled, please contact us through the support channels listed on the dbNexus website.

dbNexus

Database Schema Design & Collaboration Platform

This Privacy Policy is a product-policy draft for dbNexus and should be reviewed and finalized by a qualified legal professional before being published as a binding legal document.