- The contract comes first.
- Before the first listing goes live, our terms add a plain prohibition: nlqdb may not read, use, mine, train on, or resell your knowledge for any purpose other than running the queries you and the buyers you authorise make. The marketplace does not open before those terms do.
- What the engine necessarily does.
- To answer a question, the engine reads the relevant rows on the server — that is the service you turned on. What the contract rules out is every other use.
- Planning is schema-only.
- When a question becomes a query, what reaches the language model is your data’s structure — table and column names, types, the descriptions you author — not your rows.
- Narration is disclosed, and skippable.
- When an answer is narrated back in plain language, the rows that answer returned do pass through the model. That is disclosed in our privacy policy today, and API callers skip narration by requesting JSON-only responses.
- Isolation by default.
- Your rows sit behind Postgres row-level security, isolated per account.
- Our models don’t train on your data.
- Already our written privacy commitment for every database on the platform: we don’t use your data to train our own models.
- Delete means delete.
- You can delete a database at any time; retention timelines are in the privacy policy.
- Run it yourself.
- The engine is source-available under FSL-1.1 — you can run it on your own infrastructure for any non-competing use.