Privacy Policy

Strata Business Intelligence, LLC. (the “Company”) is committed to maintaining robust privacy protections for its users. Our Privacy Policy (“Privacy Policy”) is designed to help you understand how we collect, use and safeguard the information you provide to us and to assist you in making informed decisions when using our Service.

For purposes of this Agreement:

• “Site” refers to the Company’s website, which can be accessed at 0sql.io.
• “Service” refers to the Company’s hosted semantic layer API, which is reached at app.0sql.io over HTTPS and through the zsql command line tool, and through which you deploy a semantic model described in YAML and transmit a query specification in order to receive a SQL statement in return. The Service plans and returns SQL only: it does not execute SQL, does not connect to your database or data warehouse, and does not receive or store query results.
• The terms “we,” “us,” and “our” refer to the Company.
• “You” refers to you, as a user of our Site or our Service.

By accessing our Site or our Service, you accept our Privacy Policy and Terms of Use, and you consent to our collection, storage, use and disclosure of your Personal Information as described in this Privacy Policy.

1 Information We Collect

We collect “Non-Personal Information” and “Personal Information.” Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit and number of clicks. Personal Information includes your name, email address, company name, billing contact information, and other contact information, which you submit to us through the registration and subscription process at the Site.

1.1 Information collected via Technology

To activate the Service you do not need to submit any Personal Information other than your name, email address, and company name. To use the Service thereafter, you do not need to submit further Personal Information. However, in an effort to improve the quality of the Service, we track information provided to us by your browser when you view or use the Site, and information provided by your client when you call the Service, such as the website you came from (known as the “referring URL”), the type of browser you use, the device from which you connected to the Site, the time and date of access, and other information that does not personally identify you. We track browser information using cookies, or small text files which include an anonymous unique identifier. Cookies are sent to a user’s browser from our servers and are stored on the user’s computer hard drive. Sending a cookie to a user’s browser enables us to collect Non-Personal information about that user and keep a record of the user’s preferences when utilizing our services, both on an individual and aggregate basis. For example, the Company may use cookies to collect the following information:

• Browser type, version, and operating system
• Device type
• IP address (and approximate location derived from it)
• Pages and features visited
• Date, time, and duration of visits
• Referring URLs
• Clickstream and navigation data
• Language and preference settings
• Session and authentication-related information

The Company may use both persistent and session cookies; persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser. For example, we store a persistent cookie to remember your login status and preferences, and to understand how users engage with our Site over time.

We use Google Analytics 4 on our Site and documentation to understand which pages and examples people find useful. Google Analytics sets cookies and receives your IP address, the pages you view, and the interactions described above; it does not receive your name, your email address, your API keys, your semantic model, or anything you send to the Service. You can prevent this collection with Google’s opt-out browser add-on, with any ad or tracker blocker, or by declining cookies in your browser. Google’s handling of this information is governed by its own privacy policy.

Calls to the Service are not made from a browser session and do not set cookies. For those calls we record standard API telemetry, which may include the API key used (identified by its prefix, never its secret value), the endpoint and HTTP method called, the response status and timing, the size of the request and response, the originating IP address, the client or zsql version string, and the identifier of the project the call was addressed to. We use this telemetry to operate, secure, debug, rate limit, and bill for the Service.

1.2 Information you provide us by registering for an account

In addition to the information provided automatically by your browser when you visit the Site, to become a subscriber to the Service you will need to create an account. You can create an account by registering with the Service and entering your name, your email address, your company name, and a password. If you subscribe to a paid plan, you will also provide billing contact information. Payment card details are collected and processed by our payment processor, not by us, and we receive only the billing contact details and transaction records necessary to administer your subscription. By registering, you are authorizing us to collect, store and use this information in accordance with this Privacy Policy.

1.3 API key metadata

The Service is authenticated with API keys that you create in your account. For each key we store metadata about the key, including the name you give it, its type, its non-secret prefix, the account and project it belongs to, the scopes or permissions assigned to it, and its creation, last-used, rotation, and revocation timestamps. We store the secret portion of a key only in hashed form, and we cannot recover it for you; if a key is lost you must create a new one. We use key metadata to authenticate calls, to enforce limits, to show you when a key was last used, and to investigate suspected misuse.

1.4 Information we do not collect

We do not collect, receive, or store the data held in your database or data warehouse. The Service never connects to your database or warehouse and never executes the SQL it returns; you execute that SQL yourself, in your own environment, with your own credentials, and the results never reach us.

We also do not store or log the contents of query specifications. The query specifications and security contexts you transmit to the Service are processed in memory for the sole purpose of planning and returning a SQL statement, and are discarded once the response is returned. The semantic model you deploy, which describes your tables, dimensions, measures, joins, and security policies, is stored by the Service so that it can plan queries against it; it is your content, and you may delete it at any time.

1.5 Children’s Privacy

The Site and the Service are not directed to anyone under the age of 13. The Site does not knowingly collect or solicit information from anyone under the age of 13, or allow anyone under the age of 13 to sign up for the Service. In the event that we learn that we have gathered personal information from anyone under the age of 13 without the consent of a parent or guardian, we will delete that information as soon as possible. If you believe we have collected such information, please contact us at info@strata.do.

2 How We Use and Share Information

2.1 Personal Information

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company, such as the servers for our email communications who are provided access to user’s email address for purposes of sending emails from us. Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy.

In general, the Personal Information you provide to us is used to help us communicate with you and to operate your account. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, provide technical support, administer and bill for subscriptions, send service notices such as notice of a breaking API change, and inform users about promotional offers.

We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

2.2 Third-Party Services

We rely on third parties to provide parts of the Service, including cloud hosting and infrastructure, email delivery, payment processing, error monitoring, and website and product analytics (including Google Analytics, described above). These providers process information only as needed to perform their function for us, at our direction, and under contractual confidentiality and security obligations. Because the Service never connects to your database or data warehouse, none of these providers receives the data held in it.

2.3 Non-Personal Information

In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns on the Site and in the Service. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion.

In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If our information practices change at any time in the future, we will post the policy changes to the Site so that you may opt out of the new information practices. We suggest that you check the Site periodically if you are concerned about how your information is used.

3 How We Protect Information

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password and by the API keys you issue, and we urge you to take steps to keep your information safe by not disclosing your password, by treating every API key as a secret, by rotating or revoking a key you believe to be compromised, and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption of traffic in transit over HTTPS, encryption of stored data, storage of API key secrets in hashed form, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

4 Data Retention

We retain account registration information and billing records for as long as your account is active, and after your account closes for as long as reasonably necessary to comply with our legal, tax, and accounting obligations and to resolve disputes. We retain the semantic model you deploy until you delete it or until your account is terminated, after which it is deleted from our live systems; routine backups are overwritten on a rolling schedule. API key metadata is retained for the life of the key and for a limited period after its revocation so that we can investigate misuse. API and web telemetry is retained for a limited period for operational, security, and billing purposes, and is then deleted or aggregated into a form that does not identify you. We do not retain query specifications, security contexts, or query results at all, because we do not store them in the first place.

5 Your Rights Regarding the Use of Your Personal Information

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional e-mail. You can also indicate that you do not wish to receive marketing communications from us by clicking unsubscribe in newsletters and emails, and by telling us during a conversation. Please note that notwithstanding the promotional preferences you indicate by either unsubscribing or opting out on the subscription page of the Site, we may continue to send you administrative emails including, for example, periodic updates to our Privacy Policy and notices about changes to the Service. You may also request access to, correction of, or deletion of the Personal Information we hold about you, and you may delete your account, by contacting us at info@strata.do.

6 Links to Other Websites

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

7 Changes to Our Privacy Policy

The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

8 Contact Us

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us by sending an email to info@strata.do.

Strata Business Intelligence, LLC
9607 Podium Dr
Vienna, Virginia 22182
Email: info@strata.do