Privacy Policy

This Privacy Policy describes how Strum Technology Corp, a Delaware corporation doing business as TablePad ("we", "us", or "our"), handles information when you use the TablePad desktop application, the hosted web app at app.tablepad.dev, the website at tablepad.dev, and update downloads from bundles.tablepad.dev (together, the "Software").

The short version: The Mac app runs on your computer and does not send us your workspaces, connection credentials, SQL, query results, or canvas documents — there is no TablePad sign-in. The hosted web app at app.tablepad.dev is separate: we run that UI and store workspace metadata you create there (see §5); it does not receive PostgreSQL, MySQL, or SQLite credentials from the connect flow. We do not sell personal information. The desktop app's only routine contact with infrastructure we publish is an update check and, when needed, a signed app-bundle download.

1. We do not collect your product data

We do not collect, receive, or store:

• User accounts, email addresses, or login credentials for TablePad (the app has none)
• Database connection strings, passwords, tokens, or certificates
• Schemas, table contents, query text, query results, or exports
• Canvas documents, notes, pins, or SQL drafts
• LLM API keys or prompts
• Analytics or telemetry about how you use the desktop app

Those materials stay on your device (or travel only to databases and AI providers you choose). We are not in that path.

What	Where it lives	Do we receive it?
Workspaces, tabs, drafts, canvases	Your device	No
Database credentials and row data	Your device and the database you connect	No
LLM API keys	Your device	No
Optional AI requests (prompt, schema context, small masked result samples — see §4)	Your device → the provider you configure	No
Update check / bundle download	Public CDN (static files)	No workspace or database contents

2. The only network we run for the app: updates

We do not run a TablePad backend that your workspaces talk to.

When the desktop app launches, it may request a public manifest from https://bundles.tablepad.dev and, if a newer signed bundle is available, download that zip. That is a static file download (update checker + bundle). It does not include your workspace data, credentials, queries, or documents.

The files are served via Cloudflare R2 / CDN. Like any HTTPS file download, the CDN may see ordinary connection metadata (such as IP address, user agent, and that a particular file was requested) in order to deliver the file. We do not use update checks to identify you, build a profile, or attach activity to an account — there is no account.

Without a network connection, the app can keep using a bundle already on your machine.

3. Databases you connect

TablePad talks from your device to the database you configure (PostgreSQL, MySQL, MariaDB, SQLite, Supabase, Cloudflare D1, and similar). We are not a party to that connection and do not proxy it. Their operators' policies apply to data in those systems.

You are responsible for how you use credentials stored on your device and for complying with rules that apply to the data you access.

4. Optional AI (your keys, your provider)

AI features are off unless you add your own API key for a provider you choose. Canvas AI currently runs on Anthropic Claude. Requests go directly from your device to that provider. We do not host a TablePad AI service, and we do not receive a copy of your keys, prompts, or model output.

When you ask Canvas AI for data, the requests it sends to the provider can include:

• The text of your request
• Your database dialect and schema: table names, column names, and column types
• Your schema notes and relevant pinned queries (their titles, requests, and SQL)
• The SQL the AI writes, and the column names and row counts of its results
• Small samples of query results: up to 20 rows from each exploration query and up to 5 rows from each later step, so the model can check its own work

Before those samples leave your device, values in columns marked as sensitive are replaced with a placeholder that keeps only the value's type and length (for example, "masked text, 12 chars"). Until you choose otherwise, TablePad marks columns as sensitive by name — for example columns named like email, phone, name, address, password, token, or card number. You can review and change the masked columns under Schema notes → Masked columns in a workspace's canvas. Masking is based on column names, so personal or confidential data stored in a column with an unrelated name is sent unmasked unless you mark that column yourself.

The provider you configure processes what the app sends under their terms and privacy policy. Review that policy before enabling AI, and leave AI disabled for databases whose contents must not reach a third party.

5. Hosted web app (app.tablepad.dev)

app.tablepad.dev is a hosted TablePad UI on Cloudflare Workers. It is not the Mac app and does not replace local storage for desktop databases.

• No sign-in. On your first visit we set an anonymous HttpOnly cookie (tp_account) so your workspaces stay separate from other visitors'. There is no email, password, or profile.
• Sample store. Every visitor can open our shared read-only sample workspace backed by a demo database we operate. Do not treat it as a production workspace.
• Your own workspaces (Cloudflare D1 only). You can create workspaces that connect to your Cloudflare D1 databases using credentials you enter in the browser. We store workspace metadata (names, layout, saved SQL drafts, canvas documents, LLM settings you configure, and similar app state) in our D1 meta database so the web app can load them on return visits. Query traffic goes from our Worker to Cloudflare's D1 API (or your bound database) — we do not use that path to build advertising profiles.
• Desktop-only engines. SQLite, PostgreSQL, Supabase, and MySQL workspace creation is disabled in the browser; those connections run only in the Mac app on your machine.

Do not enter personal, confidential, or production data you are not willing to store in this hosted environment. We may reset demo data or change the service at any time.

6. Marketing website

The website at tablepad.dev is a marketing site. We do not run Google Analytics or advertising cookies.

The site is hosted on Cloudflare. Cloudflare may process standard request logs (IP address, user agent, URL, approximate location derived from the request) as part of delivering pages.

If you use the /download or /playground links, we may record that the link was used — time, which desktop installer was requested (Mac or Windows), browser/OS parsed from the user agent, approximate location from the CDN, referrer, and for downloads the app version. For downloads we also store a one-way hash of the IP address together with the user agent, so repeat downloads from the same browser can be counted as one person. The raw IP address is not stored in that record. This is not tied to a TablePad account. We do not sell it.

If you email us, we process the contents of that message in order to reply.

7. How we use information

Because the desktop app does not send us product data, there is ordinarily nothing from the app for us to use.

Where we do see limited technical or contact information (CDN delivery of updates or website pages, optional download/playground-link records, or email you send us), we use it only to:

• Deliver the website, playground UI, and update files
• Understand which Mac and Windows builds are downloaded, including when the same browser downloads more than once, and how often people open the playground
• Respond to support or privacy requests
• Protect the site and update CDN from abuse
• Comply with law

8. Information sharing

We do not sell personal information.

We may share limited technical or contact information with:

• Cloudflare, which hosts the website, playground UI, and update files
• Professional advisors or authorities when required by law or to protect rights and safety
• A successor entity in a merger, acquisition, or sale of assets, subject to this policy or a materially similar one

LLM providers and databases you connect are parties you choose; we do not send them your data on our own behalf.

9. Data retention

Data	Retention
App workspaces, credentials, queries, canvases	On your device, until you delete them or uninstall the app
Update / CDN request logs	Per Cloudflare's infrastructure logs; we do not keep a product database of update checks
Website download/playground-link records (if recorded)	Until we no longer need them to understand release adoption and playground interest, or you ask us to delete a record we can identify
Support email	As needed to resolve the request and for our records
Playground sample data	Reset or replaced by us as the demo changes

10. Your choices and rights

You can:

• Use TablePad without creating an account (there isn't one)
• Decline updates by using the app offline after a bundle is cached
• Leave AI disabled, or remove API keys you added
• Avoid the playground if you do not want to use the hosted demo
• Email privacy@tablepad.dev to ask what, if anything, we hold about you (for example a support thread or a download/playground-link record) and to request access, correction, or deletion

Depending on your location (including California and the EEA/UK), you may have additional rights such as access, deletion, portability, restriction, objection, and withdrawal of consent. We will not discriminate against you for exercising privacy rights. In practice, the desktop app does not send us personal data to fulfill those requests against.

11. International transfers

The website, playground UI, and update files may be served from Cloudflare locations in the United States and other countries. Where required, we use appropriate safeguards for that hosting. Your own databases and AI providers may process data wherever those services operate.

12. Children's privacy

The Software is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information (for example by emailing us), contact us and we will take appropriate steps to delete it.

13. Security

The desktop app stores local state on your device. Update bundles are integrity-checked (including SHA-256 and Ed25519 signatures) before they run. The website and update files are served over HTTPS.

We cannot guarantee absolute security of your device, your databases, or third-party providers you use. Protect the machine TablePad runs on and the credentials you store there.

14. Changes to this policy

We may update this Privacy Policy by posting a new version on this page and updating the "Last updated" date. Material changes may be noted on the website when appropriate. Continued use of the Software after an update constitutes acceptance of the revised policy where permitted by law.

15. Contact us

• Email: privacy@tablepad.dev
• Website: https://tablepad.dev
• Company: Strum Technology Corp
• Address: 1875 Mission St Ste 103 #783, San Francisco, CA 94103

16. California privacy rights (CCPA/CPRA)

If you are a California resident, you may have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of "sale" or "sharing" of personal information as those terms are defined by California law. We do not sell personal information. The desktop app does not transmit your workspace or database contents to us. To exercise rights, contact privacy@tablepad.dev. You may designate an authorized agent as permitted by law.

17. GDPR / UK GDPR (EEA and UK)

If we process your personal data subject to GDPR/UK GDPR, our legal bases may include legitimate interests (delivering static website and update files, securing those endpoints, understanding which builds are downloaded), contract (if you purchase a license), consent (where required), and legal obligation. We do not operate a product backend that processes your database contents.

You may have rights of access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority. Contact privacy@tablepad.dev.