Privacy policy

1. Who is responsible

DesignDB (designdb.online) is operated by Pivix Innovations Pvt Ltd, India ("we", "us"), which decides how your personal data is used. Contact: [email protected].

2. What we collect

Account data: your email address and a hashed password, or the identity details returned by a sign-in provider if you use one.

Your content: the diagrams, tables, comments, version history and sharing settings you create. Diagrams are private unless you share them.

Collaboration data: while you edit a shared diagram, your display name, cursor position and the item you are viewing are sent to the other people in that diagram. This is not stored once the session ends.

Technical data: standard server logs such as IP address, browser type and request times, kept by our hosting providers to run and secure the Service.

3. How we use it

To provide the Service: sign you in, save and sync your diagrams, let the people you invite collaborate, and send account emails such as sign-in confirmation and password reset.

To keep the Service secure and working, including preventing abuse and fixing faults.

We do not sell your data and we do not use your diagrams for advertising.

4. Cookies and local storage

We use only what is needed to keep you signed in and to remember editor preferences in your browser. We do not use advertising or cross-site tracking cookies.

5. Who processes data for us

Supabase stores accounts and diagrams and provides real-time collaboration; Netlify hosts the website; Resend delivers our emails; Cloudflare Turnstile checks that sign-ups and sign-ins come from people (it sees your IP address and browser signals on the sign-in page only).

If you buy a plan, Cashfree (payments in rupees) or Dodo Payments (other currencies) processes the payment and receives your email address, billing country and, for rupee payments, your mobile number; for a business invoice you may give us a GSTIN. We never receive your full card or bank details. If you sign in with GitHub or Google, that provider tells us your email address and basic profile.

These providers process data on our behalf under their own terms and security measures.

These providers may process data outside India. We share data with others only where the law requires it or to protect the Service and its users.

6. How long we keep it

We keep your account and content until you delete them or your account. If a workspace has had no paid plan for 90 days, its cloud diagrams may be deleted after we have emailed warnings. Deleted data may remain in backups for a limited time before it is overwritten. Billing records are kept as long as tax law requires. Server logs are kept for a short period.

7. Your choices and rights

You can export your diagrams at any time, download a copy of your account data, and delete your account from the Account page. You may also ask us to access, correct or delete your personal data by emailing us. Where the law gives you further rights, such as withdrawing consent or lodging a complaint, we will respect them.

8. Security

Access to diagrams is enforced in the database so that only you and the people you invite can read them, and traffic is encrypted in transit. No system is perfectly secure, so avoid putting passwords or production credentials in a diagram.

9. Children

The Service is not intended for children, and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant we will tell you in advance where we can.

11. Contact

Privacy questions or requests: [email protected]. Pivix Innovations Pvt Ltd, India.