Privacy Policy

Last updated: 17 September 2026.

Who we are

WoodFireERD is operated by WoodFireTech. Contact us at admin@woodfireerd.com.

What we collect

• Your email address, for sign-in. Sign-in is handled by Microsoft Entra External ID; we never see or store a password.
• Your subscription — which plan you are on, when it started and when it ends, and the identifiers Stripe gives us for your subscription and its invoices. Card details are entered on Stripe's own payment page and never reach us.
• Your database's structure, while you are working on it — never the data in it. WoodFireERD reads the shape of a schema: tables, columns, keys, indexes, and the text of views, procedures, functions and triggers. It does not read the rows in your tables.
  The server address and credentials you type are used for that one read and then discarded — never written to a saved project, never stored here. An uploaded DACPAC is written to a temporary file, read, and deleted. The schema is held only while your session lasts, so closing the page is the end of it, and projects are saved to your own machine rather than to us. The Windows application does all of this on your machine and sends us none of it.
• Technical logs, through Microsoft Application Insights: the pages requested, how long they took, your IP address, your browser's user-agent, the page that linked you here, and the details of any error. These tell us the site is working, let us fix it when it is not, and tell us which sites people find us through. They are not tied to you: nothing in them identifies a person, no profile is built, and no cookie is used for any of it. One thing worth naming plainly: when the website reads a database for you, the address of that server can appear in these logs as part of the recorded request. Its contents never do, and nor do your credentials.
• Your desktop licence record, if you download the Windows application: your account, the plan, the dates it runs between, and an identifier for the machine it is bound to. This is what stops one subscription being installed everywhere.
• Anything you send through the contact form — your name, email address, topic and message. It is emailed to us and not stored on this website; it then lives in our mailbox like any other email. Your address is used to reply and nothing else.

Cookies and browser storage

What the site needs to work: a cookie that keeps you signed in, one that protects forms against cross-site submission, a short-lived one carrying a status message between pages, and your light or dark theme, which is remembered in your browser and never sent to us.

We advertise, so Google's measurement tag runs here too, and it sets a cookie. Its one job is to tell us whether an advertisement led to an account being opened or a subscription being bought — that something happened, not who you are. No advertising is shown to you on this site, and we do not build audiences from it.

How we use it

To sign you in, provide the Service, take payment for and manage your subscription, answer you when you write to us, and keep the Service secure and working. We do not sell your personal information, and we do not use it to advertise to you. We do measure which of our own advertisements lead to an account or a subscription, which is how we know whether advertising is worth continuing.

Who we share it with

Only the providers that make the Service work: Microsoft — Azure for hosting and Application Insights for the technical logs, Entra External ID for sign-in, and Microsoft 365 for the mailbox the contact form writes to — Stripe for payments, and Google, which is told that an advertisement led to an account or a subscription when it did. Each handles data under its own terms. We otherwise disclose personal information only where the law requires it.

Where it is held

The website, its database and its logs are hosted in the western United States, in Microsoft's Azure cloud. Stripe and Microsoft's sign-in service also process data outside Australia, under their own terms. What is held there is your account and subscription record — not the contents of any database you connect to, which are never stored at all.

How long we keep it

Your account and subscription records last as long as your account does, and for as long afterwards as tax and business records law requires — in Australia, generally five years for anything relating to a payment. Technical logs are kept for a limited period and then deleted automatically. Schemas and credentials are not kept at all.

Your rights

You may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and what goes with it. Write to admin@woodfireerd.com and we will answer within a reasonable time. If you are in the EU or the UK, the GDPR gives you these rights and others, including the right to object and to lodge a complaint with your supervisory authority. In Australia, you may complain to the Office of the Australian Information Commissioner if you are not satisfied with our response.

Changes

We may update this policy; the "last updated" date above shows when.