Privacy Policy

Last updated: October 5, 2026

AISOQL ("we", "us") is based in Utah, United States. This policy explains what information AISOQL collects when you use aisoql.com and the AISOQL app, how we use it, and the choices you have. If you have questions, email admin@aisoql.com.

Information we collect

  • Account information. Your email address and a password. Your password is never stored in readable form; we store only a salted hash (PBKDF2-HMAC-SHA256).
  • Your content and history. What you submit to the tools (for example a description of the component you want, or an error message to diagnose) and what AISOQL generates in return, including generated code, documents, diagnoses, and file contents. We keep a shortened copy of your prompt, the result, the tool used, the date, and the number of tokens spent so you can review them on the History page.
  • Attached images. If you attach screenshots (for example of a Flow, a mockup, or an error), they are sent with your request and are not saved to our database or disk afterward.
  • Project Reference. If you use the Project Reference feature, we store an index derived from the project files you choose to upload, such as object, field, Apex class, and component names and counts, so it can be used as context in your requests.
  • Billing records. A ledger of your token purchases, spending, and balance. Payments are handled by Stripe and PayPal; we do not receive or store your full card number. We receive confirmation details such as the amount, the transaction or session ID, and the status.
  • Jira connection (optional). If you connect Jira, we store your Jira site URL, your Jira account email, your project key, and your Jira API token. The token is stored encrypted and is used only to send content to Jira when you ask us to.
  • Team accounts (optional). Organization name, members' emails, roles, pending invitations, seat count, and subscription status. If your organization supplies its own Anthropic API key, that key is stored encrypted.
  • Messages and demo requests. If you contact us or request a demo, we store the details you submit, such as your name, email, company, team size, phone number (optional), message or notes, and preferred date and time.
  • Referral program. Referral relationships and a ledger of reward amounts and payout status.
  • Administrative records. A log of actions taken by administrators, which includes the administrator's email address.
  • Technical information. Like most websites, our web server and hosting infrastructure automatically record standard request logs, such as IP address, browser type, and the pages requested.

AISOQL does not ask for your Salesforce password and does not touch your Salesforce org unless you opt in to the optional Salesforce connection described next.

Salesforce connection (optional, Team accounts)

If your organization's admin turns on Salesforce deploy and you choose to connect a Salesforce org, AISOQL signs in to that org on your behalf through Salesforce's standard OAuth login. We never see your Salesforce password. We store the Salesforce org ID, your Salesforce username, the org's instance address, the org type (sandbox, Developer Edition, or trial), and an encrypted refresh token that lets us act for you until you disconnect. Short-lived access tokens are used on demand and are not stored. When you validate or deploy a generation, we send the files you chose to your Salesforce org and read back the result (component and test errors), and we keep a log of each attempt: who, which org, which generation, the mode, the outcome, and a short error summary. Only sandbox, Developer Edition, and trial orgs can be connected, and production orgs are refused. You can disconnect at any time from the Salesforce connection page, which revokes the token, and you can also revoke access from Salesforce Setup. Deleting your account removes the stored connection and your deploy log.

How we use information

  • To provide the service: generate and return results, keep your history and token balance, process purchases, and run team accounts.
  • To secure the service, prevent abuse and fraud, and troubleshoot problems.
  • To respond to messages and demo requests.
  • To meet legal, tax, and accounting obligations.

We do not sell your personal information. We do not currently send marketing email.

AI processing

To generate results, AISOQL sends your prompt, any context you provide (including a Project Reference index), and any attached images to Anthropic's API and returns the result to you. Anthropic processes that data under its own terms and privacy policy. If your organization has supplied its own Anthropic API key, requests are made with that key and are also subject to your organization's agreement with Anthropic. Generated output can be inaccurate; see our Terms of Service.

Who else receives information

  • Anthropic, to generate results (described above).
  • Stripe and PayPal, to process payments. The token purchase page loads PayPal's checkout script, which may set its own cookies under PayPal's policies. Stripe Checkout is hosted by Stripe.
  • Atlassian (Jira), only if you connect Jira and ask us to send content there.
  • Salesforce, only if you connect an org and ask us to validate or deploy generated files to it.
  • Our hosting provider, which stores and serves the service's data.
  • Others when required, such as to comply with law or legal process, to protect our rights and the security of the service, or as part of a sale or transfer of the business.

Cookies and local storage

We use a session cookie to keep you signed in, and small preferences stored in your browser, such as your light or dark theme. We do not use advertising or third-party analytics cookies. Our own usage reporting for administrators is based on our own records.

Retention and deletion

We keep your history until you clear it or delete your account. You can clear your history and delete your account from the Settings page; deleting your account removes your account and its associated data from our systems. Some records may be kept where needed for legal, tax, fraud-prevention, or accounting reasons (for example, payment records held by Stripe and PayPal), and deleted data may remain in routine backups for a limited time. We keep contact messages and demo requests for as long as needed to respond and for our records.

Security

We protect data with measures such as HTTPS, salted password hashing, and encryption of stored third-party tokens and API keys. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Your choices and rights

You can access, update, or delete much of your information from your account Settings and History. You can also email us at admin@aisoql.com to ask for access to, correction of, or deletion of your information. Depending on where you live, you may have additional rights under local privacy law, and we will respond to valid requests as the law requires.

Children

AISOQL is a tool for developers and administrators and is not intended for anyone under 18. We do not knowingly collect information from children.

Where data is processed

AISOQL is operated from the United States, and your information may be processed and stored in the United States and in other countries where our service providers operate.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. If a change is significant, we will give additional notice in the app or by email.

Contact

AISOQL, Utah, United States
Email: admin@aisoql.com