How Qwery protects your account and your data, in plain terms.
Your data stays where it is
Qwery does not copy your database. Each question runs on your own database and returns only the rows needed for the answer.
Safe queries
- Only a single SELECT is allowed. Anything that could change data, call risky functions or touch system tables is refused before it runs.
- Every question runs in a read-only session with a time limit, and results are capped in size.
- Each connection is limited to the schemas you chose, and each room to the tables you pick for it.
- Qwery will not connect to private or internal network addresses.
Credentials
Database passwords and tokens are encrypted (AES-256-GCM) before they are stored and are never shown again after you save them. We recommend a read-only database user for every connection.
Sign-in and access
- Two steps: your password, then a code emailed to you.
- Sessions end after 4 hours of inactivity.
- Three roles: super admin, admin and member. Super admins can hide personal data (emails, phone numbers, names and similar) from any person; they see masked values instead.
- Accounts are isolated from each other in the database with row-level security.
Our own access
Qwery staff use an internal panel for plans, seats and usage totals. It has no view of your conversations, results, rooms or connection details.
Reporting a problem
If you think you have found a security issue, please tell us through the contact form on our homepage, with the subject “Security”. Please give us reasonable time to fix it before sharing it publicly.