Privacy Notice
Version 1.1 · Effective: 2026-11-01
In short. Silver Bullet runs on your computer. Your data, files, database connections, questions and answers stay on your computer. We never receive them. There is no analytics, no tracking and no telemetry in the product. We receive personal data only when you buy or manage a licence: your e-mail, your name or business name, your billing country, the order details from Dodo Payments, and your computer’s code. If you choose a cloud AI model, your questions and the descriptions of your data that it needs go to that provider, under your own account with them. You can ask us for a copy of your data, or to correct or delete it, by e-mail.
1. Who we are
1.1. This notice is given by Govirang Microspaces Private Limited (CIN U58200MH2024PTC424124), registered office Office No 1004, 10th floor, Chesterton, Hiranandani Estate, Patlipada, Off Ghodbunder Road, Thane 400607, Maharashtra, India ("Govirang", “we”, “us”).
1.2. For the personal data described in section 3, we are the controller (under the EU and UK General Data Protection Regulations, “GDPR”) and the data fiduciary (under India’s Digital Personal Data Protection Act, 2023, “DPDP Act”).
1.3. Contact for privacy matters: [email protected]. Grievance Officer: Sheetal Ravikumar, [email protected].
2. What stays on your computer
2.1. Silver Bullet is a desktop program. It runs on your own computer and answers only on that computer (127.0.0.1). It reads your databases read-only.
2.2. We never receive your data, your files, your database names, addresses, user names or passwords, your API keys, your questions, your answers, your dashboards, your audit trail, or any record of how you use the program. These are kept in the program’s data folder on your computer, under your control.
2.3. No analytics, no tracking, no telemetry. The program does not report usage, crashes or errors to us. If you send us a support file, you choose to send it, and you can read it first.
2.4. When you accept the End User Licence Agreement, the Terms of Service and this notice in the program, the record of that acceptance (the document versions, the time, the user and the program version) is kept on your computer only.
2.5. For the data on your computer, you are the controller (or data fiduciary). Govirang does not process it for you.
3. What we receive, and why
3.1. When you buy, renew or manage a licence. Payments are taken by Dodo Payments, the merchant of record. When a payment succeeds, Dodo Payments sends our licensing service: (a) the order or subscription id, the product, the amount, the currency and the payment status; (b) your e-mail address; (c) your name or business name; and (d) your billing country. We do not receive your card or bank details.
3.2. From the program. The program contacts our licensing service only: (a) after you choose Buy, until your key arrives (you can switch this off on the Licence page); (b) while a key bought online (monthly or yearly) is installed: soon after each start and then once a day, at once when such a key is entered, and every hour during the week after the licence is moved to another computer. This check tells the program whether a newer key is ready, whether the last payment failed, and whether the licence has moved to another computer (the key then stops working on the old computer 7 days after the move). It is part of the licence of a key bought online and cannot be switched off. What you can switch off on the Licence page is only the installing of a newer key. A key you did not buy online never causes this check; and (c) when you use Get my key or Move to this computer. It then sends: your computer’s code (a code that identifies the computer the licence is for), a random claim id made for that purchase, the program version, for the check in (b) the licence key in use, and, when you type them for Get my key or Move to this computer, the order number and e-mail address. Nothing else is sent, and no data from your databases or files.
3.3. To deliver your key. We sign a licence key for your computer and e-mail it to you through our e-mail provider.
3.4. When you write to us. If you e-mail us about a licence or payment, we receive your e-mail address, your message and anything you attach.
3.5. When you visit our website. Our hosting provider processes technical data such as your IP address and browser details, as needed to deliver the pages and protect them from abuse. We do not use analytics or advertising cookies, and we do not track you across sites.
3.6. Purposes and lawful bases.
| Purpose | Data | Lawful basis (GDPR / UK GDPR) | DPDP Act |
|---|---|---|---|
| Issue, deliver, renew, re-send and move licence keys | order details, e-mail, name or business name, billing country, computer code, claim id, program version, current key | performing our contract with you (art. 6(1)(b)) | data you give voluntarily for this purpose (s. 7(a)), or your consent |
| Answer licence and payment e-mails | e-mail address, message | performing our contract; our legitimate interest in answering you (art. 6(1)(f)) | as above |
| Keep accounting and tax records | order ids, amounts, currencies, dates | legal obligation (art. 6(1)(c)) | compliance with law (s. 7) |
| Prevent fraud and misuse of licences; protect the website and the service; establish or defend legal claims | order ids, computer codes, key ids, IP addresses | our legitimate interests (art. 6(1)(f)) | legitimate uses and compliance with law (s. 7) |
3.7. We do not sell personal data. We do not use it for advertising, profiling or automated decisions with legal or similarly significant effects. We send no marketing e-mail.
4. AI model providers you choose
4.1. The program uses an AI model to understand questions. By default, the model runs on your own computer, and nothing leaves it.
4.2. If you choose a cloud model (for example Google Gemini, OpenAI, Anthropic, Azure OpenAI or Mistral) and enter your own API key, the program sends that provider, for each question: the question text, the data source’s name, and the descriptions of the tables and columns the question needs (their names, meanings and your business rules). It sends a value from your data only when you typed that value in the question. It never sends rows, query results or answers, and never values of columns marked as personal data. The Security and Privacy guide lists exactly what is sent.
4.3. That provider receives this information under your own account and agreement with it. Govirang does not receive it, and is not the controller or processor of it. Read the provider’s terms and privacy notice before choosing it.
4.4. Voice input is off by default. If you switch it on, your browser’s speech recognition may send the audio to the browser’s maker (for example Google or Microsoft) to turn it into text. The program receives only the text.
5. Who we share data with
5.1. We use these service providers (processors), only for the purposes in section 3:
| Provider | What it does for us | Data |
|---|---|---|
| Cloudflare, Inc. | hosts our website, licensing service and its database | the data in section 3 |
| Resend | sends the e-mails that carry licence keys and links | e-mail address, the e-mail’s content |
5.2. Dodo Payments is the merchant of record. It collects your payment details and decides how to use them as a separate, independent controller, under its own privacy notice.
5.3. We may also disclose personal data to our professional advisers, to a buyer or successor of our business, or where the law, a court or a government authority requires it, or where needed to protect our rights or prevent fraud.
6. International transfers
6.1. Our providers may process data in India, the United States, the European Union and other countries. Where personal data from the EU, the EEA or the UK is transferred to a country without an adequacy decision, we rely on the European Commission’s standard contractual clauses (and, for the UK, the UK addendum or international data transfer agreement) in our agreements with those providers, or another lawful transfer mechanism. Transfers from India follow the DPDP Act and any restrictions the Government of India notifies. You can ask us for more information about these safeguards.
7. How long we keep data
| Data | How long |
|---|---|
| Your e-mail address, name or business name, and billing country | while the licence lasts, plus 2 years, then erased |
| Order and subscription ids, computer codes, licence key ids, and the record of keys issued and moved | 8 years (accounting, tax and fraud prevention) |
| Licence keys themselves | not stored by us after they are sent |
| E-mails you send us | with your contact details: while the licence lasts, plus 2 years |
| Website technical data held by our hosting provider | for the short periods the provider needs to deliver and protect the website |
We may keep data longer only where the law requires it, or to establish or defend a legal claim, and only for that purpose.
8. Security
8.1. We protect personal data with appropriate technical and organisational measures. For example: data is sent over HTTPS; licence keys are signed by a separate signing service and are not stored as text; access to our systems is limited to the people who need it. No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.
9. Your rights
9.1. Depending on where you live, you have the right to: (a) access your personal data and get a copy of it; (b) correct, complete or update it; (c) erase it; (d) restrict or object to its use, including use based on our legitimate interests; (e) receive it in a portable format (data portability); (f) withdraw consent, where we rely on consent, at any time, without affecting earlier processing; (g) under the DPDP Act, nominate another person to exercise your rights if you die or become unable to; and (h) complain to a data protection authority (see 9.4).
9.2. How. E-mail [email protected] with your request and your order number. We may ask you to confirm that the order is yours (for example by replying from the order’s e-mail address). We answer within one month. If the law gives a shorter time, we answer within that time.
9.3. Effect of erasure. If you ask us to erase your e-mail address and contact details, we erase them at once. The order and licence key ids are kept (section 7), so your licence keeps working. Self-service features that use your e-mail address (such as Get my key) may then need you to contact us.
9.4. Complaints. Please contact our Grievance Officer first. You may also complain to: (a) in India, the Data Protection Board of India, after using our grievance process; (b) in the EU or EEA, the data protection authority of your country; (c) in the UK, the Information Commissioner’s Office.
10. Children
10.1. Silver Bullet is for adults and businesses. It is not meant for anyone under 18. We do not knowingly process the personal data of children. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this notice
11.1. We may update this notice. A new version has a new version number and effective date. It is shown in the program, which asks you to read it before you continue, and on our website.
12. Contact
Govirang Microspaces Private Limited CIN: U58200MH2024PTC424124 Registered office: Office No 1004, 10th floor, Chesterton, Hiranandani Estate, Patlipada, Off Ghodbunder Road, Thane 400607, Maharashtra Privacy: [email protected] Grievance Officer: Sheetal Ravikumar, [email protected]