Protecting the information you trust us with.

We collect only the information required to deliver and improve our services. This includes account details you provide, usage data generated by your interactions with our products, and limited diagnostic data that keeps our systems healthy.

Sensitive authentication secrets (like database passwords or API keys) are encrypted at rest and are never logged in plain text.

For the public SQL Steward course/resource, we count basic interactions and successful file delivery by channel (for example, page view, terminal download, download button, or raw view) to understand resource use. This first-party reporting does not store raw IP addresses, browser identifiers, full user-agent strings, phone names, or device fingerprints in product analytics.

We use your information to provide core functionality, personalize product experiences, and communicate roadmaps or policy updates. Aggregated and anonymized trends guide product decisions but never reveal identifiable customer data.

Resource analytics are used to understand whether visitors find and obtain public learning materials and downloadable protocols. Current SQL Steward reporting stores anonymous first-party event records rather than identifiers for individual visitors.

If we introduce new processing purposes, we update this policy and obtain additional consent when required.

We never sell personal data. Limited sharing occurs only with vetted infrastructure partners (hosting, analytics, and support tooling) that contractually commit to confidentiality.

We may disclose information when legally compelled. When permitted, we notify affected customers before responding to such requests.

You can request access, corrections, exports, or deletion of your information at any time. When deletion is requested, we purge production data within 30 days and backups within 90 days unless we are legally obligated to retain it longer.

The SQL Steward activity reporting described above is limited to anonymous event records and is not used to build an identifiable visitor profile. You may contact us with questions or requests concerning information associated with your interactions.

We employ encryption in transit and at rest, enforce least-privilege access controls, and monitor our infrastructure 24/7. Regular reviews ensure every vendor meets the same standard.

Retention windows balance regulatory requirements with customer expectations. The table below summarizes our default timelines.

Questions about privacy, data processing agreements, or security reviews can be sent to devflow.technologies@gmail.com. We aim to respond within two business days.