Privacy Policy
Cygenix Ltd ("Cygenix", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use cygenix.co.uk.
We are committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Overview
Cygenix is a SQL database migration platform. We are the data controller for personal data you provide when creating an account and using the platform. We are a data processor for any personal data contained within the databases you connect to and migrate using our service.
Our lawful basis for processing your personal data is:
- Contract — to provide you with the service you have signed up for
- Legitimate interests — to improve and secure the platform
- Consent — for non-essential cookies and marketing communications
- Legal obligation — where required by law
2. Data We Collect
| Data | Why we collect it | How long we keep it |
|---|---|---|
| Name and email address | Account creation and communication | Until account deletion |
| Authentication tokens | To keep you logged in securely | Session duration |
| Migration jobs and mappings | To save your work and sync across devices | Until you delete them |
| Project settings and configurations | To persist your preferences | Until account deletion |
| Usage activity (audit log) | Security, debugging, and support | 90 days |
| IP address and browser type | Security and fraud prevention | 30 days |
| Payment information | Billing (processed by Stripe, not stored by us) | Per Stripe's policy |
Database contents. Migrating a database means reading it, so rows are read from your source, transformed, and written to your target. The database connections are opened by Cygenix-operated services rather than by your browser, which means those rows pass through our infrastructure during a run. We do not store them there. What we do keep is derived: schema metadata, column mappings, row counts, validation findings, conversion reports and job history.
Two exceptions are worth naming rather than leaving you to find them:
- Preflight forecasts. A preflight keeps up to three example values from each column it expects to reject, so you can see what would break. That forecast is held in your own browser and is not sent to us.
- Error messages. A database driver error can quote the value that caused it — a failed type conversion is the usual case. Those messages are shown to you and may appear in our operational logs. We do not redact them today.
Connection strings, including any password they contain, are held in your browser's session storage for interactive work and are not sent to us. There is one exception, and it is a consequence of the feature: scheduling a job stores its source and target connection strings on our servers, in Azure Cosmos DB, because a job that runs when no browser is open has nowhere else to read them from. Use Microsoft Entra ID authentication where your databases support it and no SQL password is stored at all.
3. How We Use Your Data
We use the data we collect to:
- Provide, operate, and improve the Cygenix platform
- Authenticate you and maintain account security
- Sync your migration work across devices via Azure Cosmos DB
- Send you important service communications (account confirmations, security notices)
- Respond to your support requests
- Detect and prevent fraud and abuse
- Comply with legal obligations
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Data Sharing
We do not sell your personal data. We share data only with:
- Microsoft Azure — cloud infrastructure and Cosmos DB storage (UK South data centre)
- Netlify — website hosting, and the functions that open database connections for interactive work. Rows read during a run pass through these functions, whose processing is in the US under appropriate safeguards. They are not stored there.
- Anthropic — AI column mapping via the Claude API. The request is sent from your browser using your own API key and carries column names and types only, never row values. It does not pass through Cygenix.
- Stripe — payment processing (when paid plans are introduced)
- Law enforcement — where required by applicable law
All third-party processors are contractually required to protect your data and process it only for the purposes we specify.
5. Data Storage and Security
Your migration metadata is stored in Microsoft Azure Cosmos DB in the UK South region, and scheduled or long-running jobs execute in our Azure Function App in the same region. The functions that serve interactive work are hosted on Netlify and process in the US, as described above. We implement the following security measures:
- Traffic between you and Cygenix, and between Cygenix and Azure, is encrypted in transit using TLS 1.2 or higher
- Data at rest in Cosmos DB and Azure Blob Storage is encrypted using Azure-managed keys
- Connections out to your databases follow the settings in the connection string you supply. Certificate validation can be turned off there, and for PostgreSQL hosts we do not recognise as managed providers the default is no TLS at all — check the connection string if this matters to you
- Sign-in is handled by Microsoft Entra External ID. Tokens are verified server-side against Microsoft's published keys on every request
- Projects are held in a separate store per organisation; jobs, schedules and saved scripts are held in Cosmos DB partitioned per user
No system is completely secure. If you believe your account has been compromised, contact us immediately at security@cygenix.co.uk.
6. Cookies and Tracking
Cygenix uses the following types of cookies and browser storage:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| cygenix_token | Essential | Authentication — keeps you logged in | Session |
| cygenix_user | Essential | Stores your account details locally | Session |
| cygenix_jobs etc. | Functional | Saves your migration work in browser storage | Persistent |
| cygenix_cookie_consent | Essential | Records your cookie preferences | 1 year |
| Google Fonts | Third-party | Loads platform fonts from Google's CDN | Session |
We do not use advertising cookies, tracking pixels, or analytics services that identify individual users. You can manage cookie preferences using the cookie settings panel at the bottom of any page.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restrict processing — request that we limit how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent
To exercise any of these rights, contact us at privacy@cygenix.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Children's Privacy
Cygenix is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice on the platform. The "Effective" date at the top of this page indicates when the policy was last updated.
10. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Cygenix Ltd
Privacy enquiries: privacy@cygenix.co.uk
Security concerns: security@cygenix.co.uk
Website: cygenix.co.uk
Also see our Terms of Service. To manage your cookies, click the cookie icon at the bottom left of any page.