Privacy Policy

Last updated: 09/06/2026

This Privacy Policy explains how AI-First Analytics, Inc. ("we," "us," or "our") collects, uses, and handles information in connection with SundaeDB (the "Service").

This Privacy Policy applies globally, including users located in the European Union and the United Kingdom.

1. Information We Collect

Depending on how you use the Service, we may collect the following categories of information.

a. Information You Provide

• Database connection details that your agent submits with each request; these are processed transiently to execute the requested operation and are not stored server-side
• The billing country that your agent declares when making a paid request
• Data, queries, files, or other content you upload or submit to the Service ("Customer Data")
• Communications with us (such as support requests or emails)

b. Payment Information

• Blockchain payment records for paid requests: transaction hash, paying wallet address, amount, network, and the tool invoked
• A country inferred from the request's IP address, retained for tax purposes; the IP address itself is not stored in payment records

c. Automatically Collected Information

• IP address (in operational logs)
• Request metadata (such as timestamps and invoked tools)

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Verify and settle per-request payments
• Determine and remit applicable taxes
• Improve functionality, performance, and reliability
• Monitor usage, prevent abuse, and ensure security
• Enforce our Terms of Use
• Comply with applicable legal obligations

3. Customer Data and Roles

You retain ownership of all Customer Data you submit to the Service.

Under SundaeDB's customer-managed database infrastructure model, your primary data remains in infrastructure that you provision and control. We process Customer Data solely as necessary to provide, maintain, and improve the Service in accordance with our Terms of Use. We do not sell Customer Data.

For data protection purposes:

• We act as a data controller for payment records and operational logs.
• We act as a data processor for Customer Data processed on your behalf.

4. No Accounts; Anonymous Use

SundaeDB does not offer or require user accounts. We do not collect names, email addresses, or other sign-in credentials to provide the Service. Access to paid features is controlled solely by per-request payment.

5. Legal Bases for Processing (EU/UK Users)

Where required by applicable law, including GDPR and UK GDPR, we process personal information based on:

• Contractual necessity - to provide the Service and process per-request payments
• Legitimate interests - to improve, secure, and monitor the Service
• Legal obligations - to comply with applicable laws and regulations, including tax law
• Consent - where required, such as optional communications

6. Payments and Blockchain Data

Paid requests are settled with USDC stablecoin payments over the open x402 protocol. Payment verification and settlement are performed by a facilitator service operated by Coinbase Developer Platform.

Blockchain transactions are recorded on public, immutable ledgers. Your wallet address and transaction details are publicly visible on-chain by design; we cannot modify or delete on-chain records. We do not receive or store payment card or bank information.

7. Data Storage and Security

We use commercially reasonable technical and organizational measures to protect information against unauthorized access, loss, misuse, and alteration.

Connection details and operational metadata are processed to execute authorized operations against your configured database engine. We recommend that you provide credentials with the minimum privileges required for your intended use.

No system is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal information only as long as needed for the purposes described in this policy, for service operation, or to comply with legal requirements.

Payment records (including billing country and IP-derived country) are retained for as long as tax law requires, which may be up to ten years depending on jurisdiction. Operational logs and request metadata may be retained for security, abuse prevention, reliability, and audit purposes.

9. Third-Party Services

We use third-party service providers to support the operation of the Service. Depending on how you use SundaeDB, information may be processed by:

• Coinbase Developer Platform - verification and settlement of x402 payments
• Neon - hosting of temporary sandbox databases provisioned through the Service
• Hosting, monitoring, and model inference providers that support Service delivery

These providers process information on our behalf under their own terms and privacy practices. We are not responsible for the privacy practices of third parties.

10. International Data Transfers

Your information may be processed in the United States and other jurisdictions where we or our service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses.

11. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object, port, or withdraw consent for personal information processing.

You may exercise these rights by emailing aifirstanalytics@gmail.com. Because the Service has no accounts, please identify the relevant data (for example, by wallet address or transaction hash). We may need to verify that you control the wallet in question before responding. Note that records on public blockchains cannot be altered or deleted, and payment records we hold may be retained where required by tax law.

12. Age Requirements

The Service is not intended for users under the age of 18, consistent with our Terms of Use. We do not knowingly collect personal information from anyone under 18.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes become effective constitutes acceptance of the updated version.

14. Contact Information

AI-First Analytics, Inc.
aifirstanalytics@gmail.com
Headquartered in New York, USA
Incorporated in Delaware