Security and privacy overview
How DataGenStudio keeps your data private, from schema to download.
DataGenStudio is built so that no real personal data is needed at any step. You describe the shape of your data, the app invents values that fit it, and everything you generate stays in your browser until you download it.
Our principles
| Principle | What it means in practice |
|---|---|
| Fictional by design | Every value is invented by built-in generators or AI. No value is copied from a real record, and emails use reserved example domains (example.com, .net, .org). |
| Your rows stay in your browser | Rows are generated, explored and zipped on your device. Generated datasets are never uploaded to our servers. |
| Send the AI as little as possible | AI sees only short prompts: table and column names, hints, sample values and your domain context. Never your generated rows. |
| No access to your systems | DataGenStudio never connects to your databases. It produces scripts that you review and run yourself. |
| Every request is signed in | All pages and APIs require an account. AI actions are tied to your account and rate-limited. |
In this section
- How your data flows: what is stored where, who can see it, and for how long.
- Synthetic data and privacy: why fully synthetic data protects privacy, and the few ways real data can slip in.
- Compliance and best practices: how synthetic data fits GDPR, HIPAA and India’s DPDP Act, a checklist for your team, and how to report a security issue.