Privacy policy

Who we are

PoutyQL ("we", "us") is a product built by PoutyBoi. We provide an extended-SQL query and reporting layer for Salesforce, with optional AI-assisted query generation and exports to Google Workspace, Microsoft Office, and Jupyter. Reach us at hello@poutyql.com.

What we collect

• Account information. Your email address and the metadata Google or our passwordless email link provider return at sign-in (display name, profile photo URL).
• Salesforce data you query. When you run a query, the query text and result rows transit our Lambda backend in order to compile and execute against the Salesforce org(s) you've connected. We log the query text and the caller's identity for one week to debug failures. Result rows are returned to your browser and not retained. For some query types — large local extracts, and cross-org joins that span more than one connected org — rows from the source org(s) are loaded into the backend's memory transientlyto compute the result, then discarded when the request completes.
• AI prompts. When you use the "Ask in English" feature, your prompt is sent to Anthropic via AWS Bedrock together with a compact description of your connected Salesforce schema. We log the prompt and a token count for one week to debug failures.
• Salesforce OAuth tokens. Stored in AWS Secrets Manager, encrypted at rest with AWS-owned KMS keys, refreshed automatically on expiry, and deleted when you disconnect the org.

What we do not collect

• We do not sell, share, or use your Salesforce data for advertising or to train models.
• We do not retain your query result rows on our servers beyond the duration of the single request.
• We do not store Google Workspace content — exports run directly from your browser to Google's APIs using your OAuth grant; we never see the resulting Sheets / Docs / Slides.

Who else processes your data (sub-processors)

• Google (Firebase Auth, Sheets / Docs / Slides / Drive APIs). Identity provider and export destinations. Exports request only the drive.file scope — access limited to the files PoutyQL itself creates, never your wider Drive. Subject to Google's Privacy Policy.
• AWS (Lambda, Secrets Manager, CloudFront, Bedrock). Hosts the backend and the AI model. Subject to AWS's Privacy Notice.
• Anthropic (via AWS Bedrock). Runs the Claude model that powers "Ask in English". Anthropic does not retain or train on data sent through AWS Bedrock per their Bedrock data-protection terms.
• Salesforce. The system of record we query. Subject to your Salesforce org's own terms.
• Resend. Delivers transactional email (workspace invitations) on our behalf. Receives the recipient address, inviting workspace name, and invite link. Subject to Resend's Privacy Policy.

Retention

• Query and prompt logs: 7 days.
• Salesforce OAuth tokens: until you disconnect the org or 90 days of inactivity, whichever comes first.
• Account metadata: until you delete the account.

Cookies & local storage

We don't use advertising or third-party tracking cookies. Firebase Authentication stores a session token in your browser to keep you signed in. PoutyQL also uses your browser's local storage to remember your in-progress notebook (query text, prompt, and last result) so a refresh doesn't lose your work — this never leaves your device except when you run a query.

Where your data is processed

Our backend and the AI model run in Amazon Web Services in the United States (region us-west-2); the Claude model is invoked via AWS Bedrock in a US region. If you connect a Salesforce org or export to Google hosted elsewhere, that data is processed in those providers' regions under their terms. By using PoutyQL you consent to this processing.

Your rights

Email hello@poutyql.com to request: a copy of the data we hold on you, deletion of your account, or revocation of a Salesforce org connection. We respond within 30 days.

Children

PoutyQL is not directed at children under 16 and we do not knowingly collect data from them.

Changes

We'll update this policy as the product evolves and post the new version here with a fresh "last updated" date. Material changes will be emailed to active account holders.