Can WeQuery modify or delete my data, even by accident?

No. Not because we promise it, because it's architecturally impossible. WeQuery runs SELECT queries only. The Validator Agent physically blocks DROP, DELETE, UPDATE, ALTER, TRUNCATE at the server level, independent of the AI model. Your credentials are AES-256 encrypted. Every tenant is isolated by Row Level Security. Even if we wanted to, we couldn't touch your data.

Is the SQL actually reliable, or the kind of 'almost right' that creates bad decisions?

That's the right question, and we're glad you're asking it. WeQuery isn't a GPT prompt bolted to your database. Every question runs through 18 specialized agents: schema analysis, SQL generation, security validation, BigQuery cost estimation, execution, coherence verification, and insight synthesis. You always see the SQL that was generated, copy it, verify it, run it yourself. If the result looks inconsistent, WeQuery flags it before it reaches you. We deliberately made it take 10 more seconds to get right. That trade-off was intentional.

Which databases do you support?

PostgreSQL, MySQL, BigQuery, SQLite, Google Analytics (GA4), and Google Search Console. Snowflake, Redshift, and MongoDB are coming this quarter. If your database isn't there yet, write to us, we prioritize by demand.

Do I need to provide my own AI key?

No. WeQuery includes AI built-in, no key to provide, no configuration needed. You can also connect your own OpenRouter or OpenAI key if you'd rather keep control over your models.

How long does it actually take to be up and running?

We've timed it: under 5 minutes from account creation to first answer. Create account, paste credentials, sync schema, ask your first question. No config files, no data pipelines, no onboarding call.

Can my non-technical team really use this without any training?

That's the whole point. If they can write a sentence, they can query your database. The business glossary means WeQuery understands their vocabulary from day one. Role-based permissions ensure they only see what they should, and can't break anything.

Why not Metabase, ThoughtSpot, or Looker?

Metabase: SQL required for any custom query, no natural language, server to manage. ThoughtSpot: $50K/year minimum, 6-week implementation, requires a data team. Looker: needs a data engineer to configure LookML models. WeQuery: natural language, proactive alerts, native Google Analytics, business glossary, 5-minute setup. The question isn't why choose WeQuery. It's why you waited this long.

Back

Privacy

Privacy Policy

Last updated: March 2026. Your data belongs to you, we take that seriously.

Data controller

WeQuery is operated by GOSETECH LLC, a company registered in the State of Wyoming, USA (EIN: 98-1902863). Registered address: 30 N Gould St Ste 100, Sheridan, WY 82801, USA. Manager: Gaetan Wonkoue Yossa. Contact: contact@we-query.com. As data controller, we determine the purposes and means of processing your personal data in accordance with the General Data Protection Regulation (GDPR).

Data collected

We only collect information necessary for the service: - Account data: email address, name (optional), organization name. - Database connection credentials: host, port, database name, username, password, all encrypted with AES-256 Fernet. We never store your credentials in plain text. - Usage data: query count, credits consumed, connection timestamps. This data is anonymized and used solely for service operation. - Google data (if you connect GA4/Search Console/BigQuery): see the dedicated section below. We do not collect any personal data from your end users. We do not collect IP addresses for profiling purposes.

Data usage

Your data is used exclusively to: - Execute your natural language queries (convert to SQL, execute, display results). - Manage your account, subscription, and credits. - Send notifications you have configured (alerts, scheduled reports). - Improve service quality (anonymized usage statistics). No data from your databases is stored, cached, or used to train AI models. Queries are executed in real time, SELECT only, and results are displayed without retention.

Google data, Limited Use disclosure

If you connect Google Analytics (GA4), Google Search Console, or Google BigQuery to WeQuery, we access your Google data only to: - Execute the analytical queries you request in natural language. - Generate alerts and scheduled reports you have configured. WeQuery's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: - We only use your Google data to provide and improve the features you requested. - We do not transfer your Google data to third parties unless necessary to provide the service, with your consent, or for legal reasons. - We never sell your Google data. - We do not use your Google data for advertising purposes. - No human reads your Google data unless with your explicit consent, for security reasons, or to comply with legal obligations. You can revoke WeQuery's access to your Google data at any time from your account settings (Settings > Integrations > Disconnect) or from your Google account: https://myaccount.google.com/permissions.

Security

We apply strict security measures: - AES-256 Fernet encryption (PBKDF2, 600,000 iterations) for all credentials. - SSL/TLS encrypted connections between all components. - Row Level Security (RLS) on all tables, strict multi-tenant isolation. - No write access to your databases, SELECT only, validated by a security agent. - JWT authentication via Supabase Auth. - HTTP security headers: HSTS, X-Frame-Options DENY, CSP, X-Content-Type-Options. - Encryption key rotation supported without service interruption. - Non-root user execution in all containers.

Sub-processors

We use the following sub-processors: - Supabase (Singapore, EU West servers): database hosting, authentication. DPA available. - OpenRouter / OpenAI / Anthropic: AI processing of natural language queries. Data sent is limited to table schemas and questions, never the data contained in your databases. - Stripe (USA, PCI DSS certified): payment processing. Stripe does not receive any business data. - Hetzner (Germany): infrastructure hosting. ISO 27001 certified datacenter. - Google APIs: only if you connect GA4/GSC/BigQuery, read-only access to your properties. No sub-processor has access to your business data (the contents of your databases).

Data retention

- Conversation history: kept as long as your account is active. You can delete individual conversations. - Encrypted credentials: deleted immediately when a data source is disconnected. - Google OAuth tokens: deleted when the Google integration is disconnected. - Billing data: retained according to applicable legal obligations. - Account deletion: all your personal and organizational data is erased within 30 days. Billing data is retained as required by law.

Your rights (GDPR)

Under the GDPR, you have the following rights: - Right of access: obtain a copy of your personal data. - Right to rectification: correct inaccurate data. - Right to erasure: request deletion of your data. - Right to data portability: receive your data in a structured format. - Right to object: object to the processing of your data. - Right to restriction: request restriction of processing. To exercise these rights: contact@we-query.com. We respond within 30 days. In case of dispute, you can file a complaint with the data protection authority in your country of residence.

Cookies

We use the following categories of cookies: Strictly necessary cookies (no consent required): - Authentication session cookie (Supabase Auth): required to maintain your login. - Language preference: to display the site in your language. Analytics cookies (consent required): - Google Analytics (GA4, ID G-3EFD1EKXX0): anonymized audience measurement (page views, visit duration, referral source). IP addresses are anonymized. No personally identifiable data is collected. You can reject these cookies via the consent banner displayed on your first visit. We do not use any advertising, profiling, or social media cookies. You can change your cookie preferences at any time by clicking the "Cookies" link in the footer.

International transfers

Your data is primarily processed within the European Union (Hetzner, Germany; Supabase, EU West). Some sub-processors are based in the United States (Stripe, OpenAI, Anthropic). These transfers are governed by the European Commission's Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework.

Changes

We may update this policy. In case of significant changes, we will notify you by email at least 30 days before the changes take effect.

Contact

For any privacy-related questions: - Email: contact@we-query.com - Address: 30 N Gould St Ste 100, Sheridan, WY 82801, USA - Response time: 30 days maximum