Privacy Policy

When you create an account, we collect your email address and a password (stored securely via Supabase Auth).

When you use Schematic AI, we collect the datasets you upload (CSV or Excel files), the questions you ask, and the responses generated. This information is stored per your account and is not shared with other users.

We collect the datasets you upload (such as CSV or Excel files), the questions you ask, and the responses generated. Your uploaded data is processed to prepare metadata, table schemas, and other contextual information required to answer your questions. Your datasets remain private to your account and are not shared with other users.

Your email and account information are used to authenticate you, send essential service communications (e.g., password resets), and manage your subscription if applicable.

Your uploaded datasets and questions are processed solely to generate the SQL queries and answers you request. We use your uploaded data solely to provide and improve the functionality of Schematic AI and as otherwise described in this Privacy Policy.

Your account information is stored in Supabase, our authentication and database provider. Uploaded files are stored in Supabase Storage. Chat history and generated SQL are stored in Supabase PostgreSQL tables, scoped to your account.

You can delete your datasets and chat history at any time through the application interface. Account deletion will remove all associated data from our systems.

When you ask a question, Schematic AI sends your question and the schema of your uploaded tables to Groq (our LLM provider) to generate a SQL query. The SQL is then executed locally in your browser via DuckDB (WebAssembly). The returned rows for your current query (up to 50) may be sent to Groq solely to produce a plain-English explanation of that answer.

Your uploaded data is never used to train or fine-tune AI models.Only the table schema (column names and types) is sent alongside your question to generate the SQL query. Full dataset contents are not sent for SQL generation; however, the returned rows of your current query (up to 50) may be sent to a third-party LLM to help explain your results.

We use industry-standard encryption in transit (TLS) and at rest. Authentication is handled by Supabase Auth, which follows security best practices including password hashing and rate limiting.

Access to your data is restricted to your account. Infrastructure access is limited to the minimum necessary for operation and incident response.

Schematic AI uses cookies and local storage tokens necessary for authentication and session management. These are required for the service to function and are not used for tracking or advertising.

We do not use third-party analytics cookies, marketing cookies, or any form of cross-site tracking.

Schematic AI relies on the following third-party services:

• Supabase — authentication, database, and file storage
• Groq — LLM inference (sent: your question, table schemas, generated SQL, and up to 50 returned rows from your current query)
• Vercel — application hosting and deployment

Each service processes data in accordance with its own privacy and security policies. We have selected providers that offer adequate data protection guarantees.

You own the data you upload to Schematic AI. You may export, modify, or delete your datasets and chat history at any time.

You may request a copy of all data associated with your account by emailing getschematicai@gmail.com. We will make reasonable efforts to respond to such requests in accordance with applicable law

You may delete your account at any time. Upon deletion, We will make reasonable efforts to remove associated data from our active systems.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the application. Continued use of Schematic AI after changes take effect constitutes acceptance of the updated policy.

Have questions about this policy or your data? Reach out to us at getschematicai@gmail.com.