Privacy Policy

1. Who we are

Basira ("Basira," "we," "us") operates the database monitoring service at usebasira.com and app.usebasira.com. This policy describes how we collect, use, and protect information when you use our service.

2. What data we collect

Account information

When you sign up, we collect your name, email address, and organization name. We use this to authenticate you and manage your account.

Database telemetry

The Basira agent collects performance statistics from your database, not your application data. Specifically:

• Normalized query text : PostgreSQL's pg_stat_statements replaces literal values with placeholders ($1, $2, ...). ClickHouse query_log stores query templates. We never see your actual data values, user IDs, emails, or sensitive content.
• Execution statistics : execution counts, timing, rows returned, buffer usage, memory consumption.
• System metrics : connection counts, lock information, table sizes, dead tuple counts, replication status, and engine-specific metrics.
• Active query snapshots : currently running queries, their state, duration, and wait events.

Usage data

We collect basic usage data when you interact with our dashboard, including pages visited, features used, and session duration. This helps us improve the product.

3. What we do NOT collect

• Row-level data from your application tables
• Raw query parameters or literal values
• Credentials, passwords, or connection strings (the agent stores these locally, never transmits them)
• Data from tables outside of system views

4. How we use your data

• To provide database monitoring, alerting, and analytics
• To display query performance, table health, and active query information in your dashboard
• To send alert notifications you configure (Slack, PagerDuty, email, webhook)
• To improve our service and fix bugs
• To communicate with you about your account

5. Data retention

• 30 days : full-resolution telemetry data
• 1 year : aggregated hourly summaries for trend analysis
• Account deletion : when you delete your account or remove a database instance, all associated telemetry data is permanently deleted within 48 hours

6. Data security

All data transmitted between the Basira agent and our API is encrypted using TLS. The agent authenticates with an API key on every request. Telemetry data is stored in ClickHouse with access restricted to our application. We do not sell, share, or provide your data to third parties except as required to operate the service (e.g., cloud infrastructure providers).

7. Third-party services

We use the following third-party services to operate Basira:

• Google Cloud Platform : infrastructure hosting
• Vercel : website and dashboard hosting
• Cloudflare : DNS and CDN
• PostHog : product analytics and website usage measurement

8. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies to measure product usage, understand navigation patterns, and improve the service. We do not use advertising cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by posting a notice on our website or sending you an email. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions about this policy? Email us at contact@usebasira.com.