LEGAL

# Privacy Policy

Effective: May 12, 2026 · Last updated: August 25, 2026

## What We Collect

TuneVault collects the minimum data required to operate the service.

Category | Data | Why
--- | --- | ---
Account | Email address, name (from Google OAuth or magic-link sign-in) | Authentication and communication
Connection metadata | Oracle host/port, connection type, proxy URL | Establishing database connections
Health check results | Check scores, findings, AI analysis text | Delivering diagnostic reports and trend tracking
Payment data | Order ID, payment status, plan tier (via Razorpay) | Subscription management
Usage analytics | Page views, feature interactions, hashed IP | Product improvement (no cross-site tracking)
Alert configuration | Alert email addresses, severity thresholds, schedules | Autonomous monitoring and notifications

## What We Do NOT Collect

No plaintext credentials stored. Oracle usernames and passwords are encrypted at rest with AES-256-GCM — only ciphertext is stored in our database. Direct-mode connections can also be used session-only with no persistence. We never log, cache, or export raw database credentials in plaintext.

- NEVER Raw Oracle data from your database (tables, rows, business data)
- NEVER Oracle passwords or private keys in plaintext (proxy API keys are AES-256-GCM encrypted at rest)
- NEVER Credit card numbers (Razorpay handles payment data — we see only order/status metadata)
- NEVER SSH private keys in plaintext (encrypted with AES-256-GCM before storage)
- NEVER Cross-site tracking or third-party advertising pixels

## How We Use Your Data

- Service delivery: Running health checks, generating reports, sending alert emails, and displaying your diagnostic history.
- AI analysis: Health check results are sent directly to Anthropic (Claude) to generate natural-language summaries, with no intermediary proxy. Separately, OpenAI is used only to generate embeddings of Oracle documentation for search — no customer data is sent to OpenAI. Results are not used to train AI models.
- Billing: Order and subscription status from Razorpay is stored to manage your plan and quota.
- Product improvement: Aggregated, anonymized usage data helps us understand which features are most valuable.
- Security: Connection attempt logs and audit trails protect your account and detect unauthorized access.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

## Third-Party Services

Service | Purpose | Data Shared
--- | --- | ---
Oracle Cloud (OCI) | Application + database hosting | All stored application data; region ap-hyderabad-1
Razorpay | Payment processing | Payment amount, order ID (Razorpay handles card data directly)
Google OAuth | Sign-in authentication | Google profile email and name, with your consent
Resend | Transactional email | Your email address and alert content
Anthropic (Claude) | AI analysis of health results | Anonymized check result data — no PII, no raw database content
OpenAI | Embeddings for documentation search | Oracle documentation text only — no customer data

Each third party processes data under their own privacy policy. We select vendors that meet industry-standard security requirements.

## Data Retention

- Active accounts: Data is retained while your account is active.
- Health check history: Check results, findings and AI analysis are retained for as long as the connection exists — history is what lets trends and baselines improve over time. Deleting a connection deletes its results immediately and permanently, from the dashboard or via `DELETE /api/connections/:id`. You can also request deletion at any time.
- Diagnostic bundles and topology snapshots: Per-check failure context and TNS topology snapshots are automatically purged after 30 days.
- Deleted accounts: All personal data is deleted within 30 days of account deletion. Aggregated, anonymized analytics data may be retained indefinitely.
- Payment records: Payment metadata is retained for 7 years for financial compliance requirements.
- Audit logs: Execution and control audit logs (SQL, SSH, OS commands, config changes) are append-only and retained while the account is active, then removed with the account. They are deliberately not auto-expired: an audit trail that deletes itself is of limited use in an investigation.

## Cookies & Session Storage

TuneVault uses minimal, functional cookies only:

- Session cookie: Maintains your authenticated session. Expires when you close the browser or after 7 days of inactivity. No tracking data.
- Visitor ID (localStorage): A random UUID stored in your browser's localStorage for anonymous analytics deduplication. Not linked to your identity unless you sign in.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies (e.g., Google Analytics). No cookie consent banner is required for functional-only cookies under most regulatory frameworks.

## Security

Security is core to TuneVault's purpose — we're trusted with access to production Oracle databases. We take that seriously:

- All data in transit is encrypted via TLS 1.2+
- Oracle proxy API keys and SSH private keys are encrypted at rest with AES-256-GCM
- Database credentials encrypted at rest with AES-256-GCM; direct-mode connections can also be session-only with no persistence
- Internal app queries use parameterized statements; user-submitted SQL via the SQL Console is allowlist-validated, audited, and executed against the customer's own database under their credentials
- Session tokens are cryptographically signed and expire automatically
- All EBS control actions are validated server-side against a whitelist and logged to an append-only audit trail

For a full security overview, see our Security & Trust page.

## Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the following rights:

Right | GDPR (EU/UK) | CCPA (California)
--- | --- | ---
Access your data | YES | YES
Request deletion | YES | YES
Export your data | YES | YES
Correct inaccurate data | YES | YES
Opt out of sale | N/A (we don't sell data) | YES (we don't sell)
Lodge a complaint | YES (with your supervisory authority) | N/A

To exercise any of these rights, email privacy@tunevault.app. We will respond within 30 days. For account deletion, you may also delete your account directly from your account settings — data deletion follows within 30 days.

## Contact

Privacy inquiries: privacy@tunevault.app

General contact: hello@tunevault.app

We may update this policy as the product evolves. Material changes will be communicated via email to registered users. The effective date at the top of this page reflects the latest revision.