Privacy Policy

Account Information

When you create a Chartography account, we collect:

• Full name and email address provided during registration.
• Password — securely hashed using industry-standard algorithms. We never store or have access to your plaintext password.
• Profile picture and OAuth identifiers when signing in via third-party providers such as Google.

User-Generated Content

We store content you actively create within the platform, including:

• Natural language prompts and pasted datasets (tables, CSV data, text).
• Chart data, titles, labels, dataset configurations, and styling choices.
• Custom layout templates, rich text notes, canvas annotations, and decorations.
• Uploaded images such as backgrounds, logos, and custom icons.

Technical & Session Data

For security and service reliability, we automatically collect:

• IP address and browser information for authentication audit logging and rate limiting.
• Session timestamps and authentication events (e.g., failed login attempts).

Client-Side Preferences

We store certain preferences locally on your device, including theme preference (light/dark mode), language settings, and cookie consent status.

We use the information we collect to:

• Provide and operate the service — authenticate your identity, display your dashboard, and persist your charts, templates, and projects across sessions.
• Power AI chart generation — process your prompts and pasted data through AI models to generate and modify chart configurations.
• Enable export and sharing — generate downloadable files of your charts and create publicly accessible shared links.
• Ensure security — detect and prevent unauthorized access, rate-limit abuse, and monitor for suspicious authentication activity.
• Improve the platform — understand usage patterns to improve features, fix issues, and enhance the user experience.
• Communicate with you — send transactional emails including verification links and password reset instructions.

Chartography uses artificial intelligence models to generate and modify charts from your inputs. When you use our AI features, the following data may be transmitted to our AI service providers:

• Your prompt text (natural language instructions).
• Pasted raw data such as tables, CSV content, or text paragraphs.
• Conversation history for multi-turn editing context.
• Current chart configuration when requesting modifications.
• Web search results when real-time search mode is enabled by you.

Your data is processed by third-party AI service providers under their respective privacy policies and data processing agreements. We select providers that maintain appropriate data handling and security standards.

To protect service availability, AI requests are subject to rate limiting.

We work with trusted third-party service providers to deliver our platform. These providers fall into the following categories:

• Cloud infrastructure and database hosting — for secure data storage, user authentication, and file management.
• Authentication providers — to enable secure sign-in methods including email/password and third-party OAuth (e.g., Google Sign-In).
• AI model providers — to power chart generation and conversational chart editing features.
• Web search services — to fetch real-time information when you enable web search mode for AI prompts.
• Stock image providers — to supply optional background images for chart designs.

Each service provider processes data in accordance with their own privacy policies and applicable data protection regulations. We share only the minimum data necessary for each provider to perform its function.

We do not integrate any third-party web analytics or advertising tracking services. Your browsing activity on Chartography is not monitored by external analytics providers.

Cookies

Chartography uses only essential, functional cookies required for the service to operate. We do not use advertising or tracking cookies.

Local Storage

We use browser local storage for performance and offline functionality:

• Work-in-progress caches — temporary local copies of your active charts and conversations, scoped to your user ID. These expire automatically after 12 hours of inactivity.
• Undo/redo history — stored locally for editor session continuity.
• User preferences — theme, language, and cookie consent status.
• Automatic cleanup — all user-scoped local data is completely cleared upon sign-out.

Public Chart Sharing

When you generate a shareable link for a chart, it becomes publicly accessible to anyone with the link. Public chart pages display only the chart visualization and do not reveal your account information or raw datasets.

Export Downloads

You can export your charts as PNG images, SVG vector graphics, or standalone HTML files. Exported files are generated client-side in your browser and downloaded directly to your device — they do not pass through our servers.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or user-generated content to any third party for advertising, marketing, or any other commercial purpose.

We take the security of your data seriously and implement the following measures:

• Secure token storage — authentication tokens are stored in HTTP-only cookies to prevent client-side access.
• CSRF protection — OAuth sign-in flows use cryptographic state tokens to prevent cross-site request forgery.
• Rate limiting — applied to authentication endpoints and AI processing routes to prevent brute-force attacks and abuse.
• Security audit logging — failed login attempts, rate-limit violations, and suspicious activity are recorded for security investigations.
• Password hashing — passwords are hashed using industry-standard algorithms before storage.
• Role-based access control — administrative functions are restricted to authorized accounts only.

While we implement robust security practices, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

When you upload images (backgrounds, logos, icons) to Chartography:

• Supported formats include PNG, JPG, WebP, SVG, and GIF.
• Automatic optimization — large images may be resized and compressed on our servers before storage to ensure optimal performance.
• Secure storage — uploaded files are stored in secure cloud storage, organized by your user ID.
• Deletion — you can permanently delete uploaded images at any time from your dashboard. Deletion removes files from both our database records and cloud storage.

You have the following rights regarding your personal data:

• Access — view all your charts, templates, and account information through your dashboard at any time.
• Correction — update your profile information, including your name and avatar.
• Deletion — delete individual charts, templates, uploaded images, and conversation histories. To request full account deletion, contact us at the address below.
• Export — download your charts in PNG, SVG, and HTML formats at any time.
• Cookie management — essential authentication cookies are required for the service to function.

• Account data is retained for as long as your account is active.
• User-generated content (charts, templates, conversations) is retained until you delete it or request account deletion.
• Security logs are retained for investigation purposes and may be periodically purged.
• Local browser data automatically expires after 12 hours of inactivity and is fully cleared upon sign-out.

Chartography is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete the information.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: