Privacy Policy

1. Introduction

Welcome to mdatool ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website mdatool.com and our services.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us:

• Account information: name, email address, password
• Payment information: processed securely through Stripe (we do not store credit card details)
• User-generated content: abbreviations, definitions, SQL code you submit
• Communications: support requests, feedback

2.2 Automatically Collected Information

• Usage data: features used, conversion counts, search queries
• Device information: IP address, browser type, operating system
• Cookies and similar technologies for authentication and preferences

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process your transactions and manage your subscription
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• Stripe: Payment processing
• Vercel: Hosting and infrastructure
• Neon: Database services
• Google: Authentication (if you use Google sign-in)

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Secure authentication (NextAuth.js)
• Regular security audits
• Access controls and authentication

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails

To exercise these rights, contact us at admin@mdatool.com

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

8. Cookies and Tracking

We use cookies for:

• Authentication and session management
• Remembering your preferences
• Analytics to understand how our service is used

You can control cookies through your browser settings. Note that disabling cookies may affect functionality.

9. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell information)
• Right to deletion
• Right to non-discrimination

12. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: