Privacy Policy

Last updated: 15 July 2026 · Effective: 15 July 2026

We take your privacy seriously. This policy explains exactly what data we collect, why we collect it, and how we protect it. We do not sell your personal data to anyone.

1. Who We Are

Mafadi Studio ("we", "us", "our") is a SQL Server monitoring and database management SaaS platform operated from South Africa and accessible globally at app.mafadistudio.com.

For any privacy-related enquiries, contact us at privacy@mafadistudio.com.

2. What Data We Collect

We collect only what is necessary to provide the Service.

Data Type	Examples	Why We Collect It
Account information	Name, email address	To create and manage your account
Authentication data	Login events, session tokens	To securely authenticate you
Billing information	Subscription plan, payment status	To manage your subscription. Card details are handled entirely by Paddle — we never see them.
Usage data	Features used, scripts run, comparisons performed	To provide the audit log and improve the Service
Server connection metadata	Server names, database names, agent version	To display your servers in the dashboard
Technical data	IP address, browser type, operating system	For security and troubleshooting

What we do NOT collect or store:

Your actual database data or records
SQL Server passwords or credentials (these are stored locally by the agent)
Query results beyond what is displayed in your session

3. How We Use Your Data

To provide, operate, and maintain the Service
To authenticate you and keep your account secure
To process payments through Paddle
To send transactional emails (account setup, subscription confirmation, important notices)
To provide customer support
To improve and develop new features
To comply with legal obligations

We do not use your data for advertising. We do not sell your data to third parties.

4. Third-Party Services

We use the following trusted third-party services to operate the platform:

Service	Purpose	Privacy Policy
WorkOS	Authentication and user management	workos.com/privacy
Paddle	Payment processing and subscription management	paddle.com/legal/privacy
Resend	Transactional email delivery	resend.com/privacy
Anthropic	AI Insights feature (AI diagnostics)	anthropic.com/privacy
Cloudflare	DNS, DDoS protection, and CDN	cloudflare.com/privacypolicy
Hetzner	Cloud server hosting (Germany)	hetzner.com/legal/privacy-policy

5. Data Storage and Security

Your data is stored on servers located in Germany (Hetzner Cloud, Nuremberg). We implement industry-standard security measures including:

Encryption in transit (TLS/HTTPS enforced on all connections)
Encrypted database storage
Access controls limiting who can access production systems
Regular security reviews

6. Data Retention

Active accounts: We retain your data for as long as your account is active.
Cancelled accounts: We retain your data for 30 days after cancellation to allow reactivation, then delete it.
Audit logs: Retained for 12 months then deleted.
Billing records: Retained for 7 years as required by financial regulations.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your data (subject to legal retention requirements).
Portability: Request your data in a portable format.
Objection: Object to certain uses of your data.

To exercise any of these rights, contact us at privacy@mafadistudio.com. We will respond within 30 days.

8. GDPR (European Users)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases: contract performance (to provide the Service), legitimate interests (security and product improvement), and legal obligation (financial records). You have the rights described in Section 7 above under the GDPR.

9. POPIA (South African Users)

We comply with the Protection of Personal Information Act, 2013 (POPIA). As the responsible party, we process your personal information lawfully, for a specific purpose, and with appropriate security measures in place.

10. Cookies

Mafadi Studio uses only essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies. No cookie consent banner is required beyond acknowledging this policy.

11. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email. The updated policy will be posted on this page with a revised effective date.

13. Contact Us

For any privacy-related questions or to exercise your rights:
privacy@mafadistudio.com
www.mafadistudio.com