< Back
Beekeeper Studio is a desktop SQL client and optional Workspace cloud service that allows users to connect to, manage, and query databases. The application is designed to operate primarily on customer-controlled infrastructure and does not store database contents.
This document provides a summary of Beekeeper Studio’s evaluation of privacy risks associated with its services and the safeguards implemented to protect personal data.
1. Description of Processing
Beekeeper Studio processes limited personal data in order to provide:
- Software license validation
- Workspace synchronization and storage
- Customer account and billing management
- Customer support services
The desktop application connects directly to customer databases. No database data is transmitted through or stored on Beekeeper Studio servers.
Server-side services are limited to licensing, account management, and optional Workspace storage.
2. Categories of Personal Data Processed
Beekeeper Studio processes limited categories of personal data, including:
- Name
- Email address
- Billing and payment-related contact information
Workspace Data
- Database connection configurations
- Stored SQL queries
- Query history
- Workspace configuration data
- Snippets, queries, or data shared explicitly from one customer user to another
Support Communications
- Customer-submitted support requests
- Troubleshooting and diagnostic information voluntarily provided by users
- License validation data
- Workspace authentication data
- Optional, anonymized, and opt-in usage or crash reporting data
3. Data Explicitly Not Processed
Beekeeper Studio does not:
- Store or process customer database contents
- Proxy or relay database traffic through Beekeeper Studio servers
- Perform automated analysis of customer database records
- Perform behavioral tracking tied to identifiable individuals
All database queries are executed directly between the desktop application and customer-controlled database infrastructure.
4. Purpose of Processing
Personal data is processed solely to:
- Authenticate and validate software licensing
- Provide optional Workspace synchronization features
- Provide customer support
- Maintain and secure the services
- Prevent abuse and ensure service reliability
5. Risk Assessment
Potential privacy risks identified include:
- Unauthorized access to workspace metadata
- Exposure of stored SQL queries or connection metadata
- Unauthorized access to customer account data
- Data exposure in the event of a security breach
6. Safeguards and Security Controls
Beekeeper Studio implements multiple technical and organizational safeguards, including:
Encryption
- TLS encryption for all data in transit
- Encryption at rest for server-stored data
- Application-level encryption for stored connection credentials and query text
Access Controls
- Role-based access controls
- Least-privilege access policies
- Multi-factor authentication for administrative access
Infrastructure Security
- Secure cloud hosting infrastructure
- Network segmentation
- Continuous vulnerability monitoring and patching
Operational Security
- Security incident response procedures
- Security logging and monitoring
- Regular security reviews and updates
Data Protection Controls
- Encrypted backups
- Controlled backup retention and rotation procedures
- Restricted internal access to production systems
7. Data Minimization and Privacy by Design
Beekeeper Studio is designed to minimize data processing by:
- Operating primarily as a local desktop application
- Avoiding storage of customer database contents
- Limiting server-side data storage to metadata required for Workspace functionality
- Making diagnostic telemetry optional, anonymized, and opt-in
8. Residual Risk Assessment
Based on Beekeeper Studio’s architecture, limited scope of personal data processing, and implemented safeguards, the residual privacy risk associated with the services is assessed as low.
9. Conclusion
Beekeeper Studio prioritizes privacy, encryption, and local data processing. The company believes the implemented safeguards adequately protect personal data and comply with applicable data protection laws, including GDPR.
Beekeeper Studio continually reviews and improves its security and privacy practices to maintain strong data protection standards.
