Privacy Policy

This Privacy Policy explains what information Sketchema collects, why it is collected, who it is shared with, and the choices you have. Sketchema is operated by OctoChimp LLC (“OctoChimp”, “we”, “us”). By using Sketchema you agree to the handling of information described here.

1. Who we are

2. What Sketchema does

Sketchema lets you write DBML and turn it into relational database diagrams that can be shared and exported. The information we handle is the minimum needed to sign you in, keep your diagrams attached to your account, keep private diagrams private, and keep the service running.

3. Information we collect

Account information

Authentication is handled by Clerk. When you register, Clerk collects and stores your email address, a hashed password, your first and last name if you choose to provide them, and any multi-factor authentication settings you configure, such as rotating keys or passkeys. Clerk is the custodian of those credentials. We do not collect personal information about you independently of what you give Clerk.

Within Sketchema we store only a reference to your Clerk identity record. That reference is what links your diagrams to you and what allows us to keep your private diagrams from being read by anyone else.

Content you create

We store the diagrams you create: their names, the DBML you write, and the layout positions of the tables you drag around. This content is stored in a Postgres database hosted by Neon. Anything you type into a diagram is stored as you wrote it, so please do not put secrets, credentials or personal information about other people into your DBML.

Analytics and error reporting

We collect anonymized usage analytics through Vercel Analytics, and anonymized error and issue reports through Sentry, which we use to diagnose and troubleshoot problems with the web app. This telemetry is not sold, and it is not shared with anyone other than Vercel and Sentry acting as our service providers.

Payment information

Sketchema is not monetized today, and we collect no payment information at all. If we introduce paid plans, payments will be collected and managed by Stripe. Card numbers and other payment details will go to Stripe and will not be stored by us.

4. How we use information

• To authenticate you and maintain your session.
• To associate diagrams with your account and enforce access to private ones.
• To operate, maintain and improve the service.
• To diagnose errors, outages and abuse.
• To contact you about the service, including changes to these policies, at the email address you used to register.

We do not sell personal information, and we do not use it for advertising or cross-context behavioral profiling.

5. Who we share information with

We share information only with the service providers that make Sketchema work, and only to the extent they need it to provide their service to us:

• Clerk — authentication and account credentials.
• Neon — database hosting for your diagrams and account reference.
• Vercel — application hosting and anonymized analytics.
• Sentry — anonymized error and issue tracking.
• Stripe — payment processing, if and when Sketchema is monetized.

We may also disclose information where we are legally required to do so, or where it is necessary to protect the rights, safety or property of OctoChimp, our users or the public. If OctoChimp is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction; we will give notice by email before your information becomes subject to a different policy.

6. Where information is stored

All data and servers are located in the United States. Vercel, Clerk, Sentry and Stripe run on Amazon Web Services in the US-East-1 and US-East-2 regions. If you use Sketchema from outside the United States, you are sending your information to the United States for processing and storage there.

7. Retention

We keep your account reference and diagrams for as long as your account exists. Storage is not guaranteed to be permanent. Sketchema may be shut down, and data can be lost to a disaster or a fault. Export and keep your own copies of any work you need to survive the service. Deleting a diagram removes it from the application; residual copies may persist in backups for a limited period before they age out.

8. Your choices and rights

You can view, edit, export and delete your diagrams from within the app at any time. Your name, email, password and MFA settings are managed in your account settings, which are provided by Clerk.

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of personal information about you, and to appeal a decision we make about such a request. To exercise any of these, email privacy@octochimp.com from the address on your account. We will not discriminate against you for making a request.

9. Cookies

Sketchema uses cookies that are strictly necessary to run the service — chiefly the session cookie set by Clerk that keeps you signed in. We do not use advertising or cross-site tracking cookies.

10. Security

Passwords are never stored by us in any form; Clerk stores them hashed and supports multi-factor authentication, which we encourage you to enable. Traffic is served over HTTPS, and access to diagrams is checked against your identity on every request. No system is perfectly secure, and we cannot guarantee absolute security.

11. Children

Sketchema is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, email privacy@octochimp.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy. When we do, we will update the effective date above and notify you at the email address you used to sign in and register your account. Continuing to use Sketchema after a change takes effect means you accept the updated policy.

13. Contact us

Questions about this policy or about information we hold can be sent to privacy@octochimp.com or to the postal address in section 1.