Privacy Policy & Security Architecture

1. Zero Telemetry & Tracking Guarantee

MySQL Studio is built on a strict Privacy-First, Local-First principle. We do not track your SQL queries, do not log your database table schemas, and do not record analytics on your database usage.

• Your database queries never touch any MySQL Studio cloud servers.
• Database rows and table records are streamed directly between your computer and your MySQL server over encrypted SSH/TLS.

2. Credential Security & OS Vault

Database passwords and SSH private keys are never written in plain text. On Windows, credentials are encrypted using the Windows Credential Manager (DPAPI). On macOS, credentials use Apple Keychain Services.

3. AI Assistant Privacy & Sanitization

When you enable the AI Query Assistant, only the active SQL snippet or error code you explicitly request explanation for is transmitted. No table rows, passwords, or personal data are ever sent to external LLMs. All prompts pass through an internal Rust sanitizer before dispatch.

4. Vulnerability Disclosure

We take application security seriously. If you believe you have discovered a vulnerability in MySQL Studio, please report it privately to security@mysqlstudio.com.