Privacy Policy
Last updated: June 2026
1. Overview
We respect your privacy. This policy explains what FMSchemaIQ accesses, how DDR files are handled, how long analysis data is kept, and how your information is protected.
2. Data Processing
DDR files are processed securely within the FMSchemaIQ platform to generate analysis reports. Certain parsing and visualization operations may also occur locally in your browser for performance and privacy.
We do not use your data for advertising, resale, or to train any artificial intelligence or machine learning models.
3. File and Report Handling
DDR files and the analysis data generated from them are handled securely and retained only as needed to provide report functionality and user-requested features such as saved reports, change comparison, and historical analysis.
Stored reports are encrypted at rest and isolated to your account. If you opt in to retain the original DDR XML, it is encrypted, scoped to your account, and deleted automatically when you delete the report.
4. Retention and Deletion
Reports may automatically expire and be deleted based on your account plan limits and applicable retention policies. You may manually delete any report at any time from your dashboard.
5. Sensitive Data in DDRs
A FileMaker DDR may contain:
- Database structure (tables, fields, relationships)
- Account names and privilege sets
- Layouts, scripts, and configuration details
- Connection strings (e.g. ODBC) that may include credentials
We recommend reviewing your DDR before upload and avoiding unnecessary secrets, API keys, tokens, credentials, or confidential production information where possible. Passwords detected in ODBC connection strings are stripped before storage.
6. Security
We implement reasonable technical and organizational safeguards designed to protect uploaded data, including encrypted transport, encryption at rest for stored reports, per-user access isolation, and minimization of the data we touch.
7. Third Parties
FMSchemaIQ uses standard hosting, infrastructure, and analytics providers to operate the service. We do not sell your data, and we do not share DDR contents or report data with third parties for their own purposes.
8. User Responsibility
Where possible, share DDRs from non-production environments and remove unnecessary sensitive content before upload. You are responsible for having the right to upload and analyze the files you provide.
9. Updates
This Privacy Policy may change from time to time. We will update the “Last updated” date when changes are made.
