Legal
Privacy Policy
Effective November 1, 2026
This policy explains what personal information Bandlei, Inc. (“Bandlei”, “we”) collects through bandlei.com, the ReinDB service at app.bandlei.com and the free health check, why, and what choices you have. It applies to you from the moment you join the waitlist, sign up or contact us, which is when we start collecting information about you. The technical details of what ReinDB reads from your databases are on the security page.
What we collect
| What | Why |
|---|---|
| Account details: name, email, company, role, password (stored only as a salted hash) | To create and secure your account and contact you about it |
| Waitlist and invite requests: email, company, what you’d monitor | To decide on and send beta invitations |
| Database connection settings: host, port, database name, user, and the password encrypted at rest | To take the measurements you asked for |
| Database measurements: statistics, normalized statement text with values removed, plans, settings. No table data. | To show trends and findings. Kept 60 days, then deleted. |
| Security and support records: sign-ins, failed sign-ins, IP address, browser, account changes | To protect accounts, investigate problems and answer support requests |
| Web server logs: IP address, time and page | Operations and security. Deleted after 60 days. |
| Billing: billing contact and subscription status. Card details go straight to Stripe; we never see the full card number. | To charge for paid plans |
| Health check: email, database engine, host name, number of findings, IP address. The database password is used once and not stored, and we keep no copy of the report. | To run the check, email you the report and enforce the daily limit |
| Feedback and emails you send us | To reply and improve the product |
| Questions typed into the in-app Help assistant or the question bar, with the answer given and any rating | To answer them and improve the product and its help. Kept 60 days, then deleted. |
| Analytics: pages viewed and events such as sign-ups, via Google Analytics | To understand how the site is used |
Cookies and browser storage
ReinDB uses a session cookie (secure, HttpOnly) to keep you signed in and a token to protect against cross-site requests. The browser also stores preferences such as language, theme and the selected database. Google Analytics sets its own cookies on bandlei.com and app.bandlei.com; you can block them in your browser or with Google’s opt-out add-on without affecting ReinDB.
Who we share it with
We don’t sell or rent personal information, and we don’t share it for advertising. We use these service providers, who process it only on our behalf:
- Amazon Web Services (USA): hosting (Lightsail, Oregon), outgoing email (SES) and the AI model (Bedrock)
- Groq (USA): backup AI model
- Stripe (USA): payments and invoices
- Google (USA): Google Analytics
- Bluehost (USA): hosting for bandlei.com and our mailboxes
The AI models receive only the question you typed and your database names, never measurements, statement text or table data. We may also disclose information when the law requires it, to protect our users or service, or to a successor if Bandlei is merged or sold, under this policy.
How long we keep it
Measurements: 60 days. Web server logs: 60 days. Help and question-bar questions: 60 days. After you cancel or close your account, your settings and history are kept for 60 days so you can come back, then deleted. Account and security records: while the account is open, and up to 12 months after it closes. Billing records: as long as tax law requires. Waitlist entries: until you ask us to remove them or the beta ends.
Security
Connections are encrypted with TLS, database passwords are encrypted at rest, and ReinDB uses read-only sessions. The security page lists what we do and what isn’t done yet.
Your choices and rights
- You can see and change your account details in the app, and remove databases and their history at any time.
- Write to inquiries@bandlei.com to get a copy of your personal information, correct it, or delete your account. We reply within 30 days.
- Every non-essential email has a way to stop it. Account and billing emails continue while you have an account.
- If you are in the European Economic Area, the UK or a US state with a privacy law, you may have further rights, such as objecting to processing or complaining to your data protection authority. We will honor them as the law requires. Our legal basis is the contract with you, and our legitimate interest in securing and improving the service.
Where it is stored
Our servers are in the United States. If you use ReinDB from elsewhere, your information is transferred to and processed in the United States.
Children
ReinDB is a business tool and isn’t meant for anyone under 18 (or the age of majority where they live). We don’t knowingly collect information from children.
Changes
We will post any change here with a new effective date, and email account owners about material changes before they apply.
Contact
Bandlei, Inc., 509 Hyland Dr, Evergreen, CO 80439, USA · inquiries@bandlei.com