Privacy Policy

1. Who We Are

This privacy policy is issued by InfinityRiser ("we", "us", "our"), publisher of the MongoDB Analytics Studio desktop application (the "App") and the website at infinityriser.com. You can reach us at admin@infinityriser.com.

2. What the App Stores Locally

The following information is stored on your computer only — typically in the OS keychain or the App's local application support directory — and is never transmitted to us:

• MongoDB connection strings and credentials
• LLM provider API keys (OpenAI, Anthropic, or local endpoint URLs)
• Saved widgets, dashboards, and your generated pipelines
• Cached schema metadata of collections you've explored

3. What Leaves Your Computer

(a) Direct connection to your MongoDB cluster

The App connects directly from your machine to the MongoDB cluster you configure. Queries and results travel only over that connection. We do not proxy, intercept, or log this traffic.

(b) Requests to your chosen LLM provider

When you ask a natural-language question, the App sends the following to your selected LLM provider (OpenAI, Anthropic, or a local model):

• Your question text
• The schema (field names and inferred types) of the collection you're querying
• A small number of sampled documents (optional, toggleable in Settings) to help the model write a better pipeline
• The system prompt and conversation context

Your provider's privacy policy governs what they do with that data. If you want zero data to leave your machine, point the App at a local LLM (Ollama, LM Studio, vLLM, etc.).

(c) Crash and error reports

The App optionally sends crash reports through Sentry to help us fix bugs. Crash reports contain stack traces, App version, and OS version — but never your data, credentials, or query content. You can disable crash reporting in Settings.

(d) Update checks

The App periodically checks for new releases by fetching the latest version metadata from our update endpoint. This request includes only your App version and OS — no personal data.

4. Information We Collect on the Website

When you visit infinityriser.com:

• Server logs. Standard request logs (IP address, user agent, timestamp, requested URL) are kept for up to 30 days for security and abuse-prevention purposes.
• Cookies. The site uses a small number of strictly-necessary cookies (e.g., for session state on paid-plan pages). We do not use third-party advertising cookies.
• Analytics. We use privacy-respecting, aggregated analytics (no personally identifying cookies, no cross-site tracking).
• Contact & purchase. When you email us or buy a paid plan, we collect your name, email, billing information, and any details you choose to share. Payment processing is handled by a third-party processor; we do not store your full card details.

5. How We Use Information

We use the limited information we do collect to:

• Provide, maintain, and improve the App and Service
• Communicate with you about your account, purchases, or support requests
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We do not sell, rent, or trade your personal information. We do not use your data to train AI models.

6. Sharing With Third Parties

We share information only with service providers strictly necessary to operate the Service — for example, our payment processor, email service, and crash-reporting platform — and only as required for them to perform that function. We require each provider to safeguard your data and limit its use to providing services to us.

We may disclose information when required by law, court order, or to protect our rights, users, or the public.

7. Data Retention

• Server logs: up to 30 days.
• Crash reports: up to 90 days, then aggregated.
• Account and billing records: as long as you have an account and for a reasonable period afterward to satisfy legal and accounting obligations.
• Support emails: up to 24 months unless you ask us to delete them sooner.

8. Your Rights

Depending on your jurisdiction (e.g., GDPR in the EU/UK, DPDPA in India, CCPA in California), you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Request a portable copy of your data
• Withdraw consent for optional processing (e.g., crash reporting) at any time

To exercise any of these rights, email admin@infinityriser.com. We will respond within a reasonable timeframe and in accordance with applicable law.

9. Security

We take reasonable technical and organizational measures to protect personal data, including encryption in transit (TLS), encryption at rest for sensitive stored data, access controls, and routine security reviews. However, no system is perfectly secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us and we will delete it.

11. International Transfers

InfinityRiser is based in India. If you access the Service from outside India, please understand that information we collect will be processed in India and other countries where our service providers operate. Where required by law, we use appropriate safeguards for cross-border transfers.

12. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be announced on this page with an updated "Last updated" date and, where appropriate, by email.

13. Contact

Questions, requests, or concerns about this privacy policy? Email admin@infinityriser.com.