Privacy Policy
Last updated: May 2026
The short version
- We do not train any AI model on your Metabase data, ever.
- We never store the contents of your queries, dashboards, or underlying database rows.
- Your API key is AES-256 encrypted at rest and used only when you trigger a scan.
- You can delete your account and all data in one click from settings.
1. Who we are
MetaLens is operated by Valiotti Data (nick@valiotti.com). We build AI-powered observability tools for Metabase instances.
2. What data we collect
- Account data: your name and email address when you register.
- Metabase connection data: your Metabase URL and API key, stored AES-256 encrypted. We only use them to run scans you initiate.
- Scan results: metadata about your Metabase (question counts, health scores, duplicate groups). We do not store the content of your queries or dashboards.
- Usage data: pages visited, features used — to improve the product.
3. How we use your data
- To provide and improve the MetaLens service.
- To send transactional emails (scan results, billing receipts).
- We do not sell your data to third parties.
- We do not use your Metabase data to train AI models.
4. Data retention
Scan results are retained for 90 days. You can delete your account and all associated data at any time by emailing nick@valiotti.com.
5. AI processing and training
MetaLens runs AI features through Anthropic’s API (Claude models). Per Anthropic’s API terms, prompts and completions submitted via API are not used to train Claude models.
We do not run our own AI training pipelines on customer data. We do not sell, share, or expose your Metabase metadata to other MetaLens customers, partners, or any third party beyond what is strictly required to deliver the service (Anthropic for inference, Stripe for billing, our hosting provider).
What we send to Anthropic during a scan: question titles, SQL query text, schema names, and aggregated counts. What we never send: row data from your underlying database, customer records, or any payload your queries return.
6. Payment processing
Stripe handles all payment processing. We never see or store your card details. Stripe’s privacy practices are at stripe.com/privacy.
7. Your rights
You can: export all your data as JSON, delete your account and every record we hold about you, request a list of which data points we’ve sent to Anthropic on your behalf, or revoke your Metabase API key access from Settings → Connections at any time.
8. Contact
Questions about your data, requests to delete or export, or anything else: email nick@valiotti.com. For security-specific questions, use the same address with subject [SECURITY]. We respond within one business day.