Privacy Policy

The Python package and the MCP server: nothing. There is no analytics, no telemetry and no phone-home of any kind in the library. Installing it and running it produces no network traffic to us, and we have no way of knowing you are using it.

Three things reach the network, and each is something you ask for:

• Seeding a database. The seed_database tool connects to the database you point it at, using the connection string you supply. That connection is between your machine and your database. We never see the connection string or the data.
• Vocabulary enrichment. If you enable it, Misata fetches public reference lists from Wikidata to make generated values more realistic. It sends a category name and nothing about your schema or data.
• AI schema design. If you supply your own API key for an LLM provider, the text of your prompt is sent to that provider under your own account and their terms. This is off by default. No key, no request.

The site uses privacy-preserving analytics to count page views and a small number of product events (a dataset downloaded, a generation started, finished or failed). These record what happened, not who did it. We do not build advertising profiles and we do not sell anything to anyone.

If you create an account, authentication is handled by Clerk, which stores your email address and login credentials on our behalf. If you send us a message through the contact or ideas form, we keep what you wrote and, if you gave one, your email address, so we can reply.

If you use the public /try page without signing in, the schema you submit is generated and streamed straight back to you. It is not stored.

The website runs on Vercel and the API on Railway. Account authentication uses Clerk. Payments, when they are switched on, are handled by Polar as merchant of record; we never see or store card details. These providers process data on our instructions in order to run the service.

We do not sell personal data, and we do not share it with anyone except the providers above and where the law requires it.

Analytics events are aggregated and retained for up to 24 months. Messages you send us are kept until you ask us to delete them. Account records are kept while the account exists and removed within 30 days of deletion. Generated data from the public try page is never written to disk.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by writing to the address below. If you are in the UK or EU, you also have the right to complain to your data protection authority.

The most complete choice is available to everyone: use the open source package. It runs entirely on your machine and reports nothing.

Misata is a developer tool and is not directed at children under 16. We do not knowingly collect information from them.

If what the software does changes, this page changes first, and the date at the top moves. Material changes to how personal data is handled will be announced on the site.

Misata is built and operated by Muhammed Rasin. Questions, requests, or corrections: rasinbinabdulla@gmail.com.