Privacy Policy

1. Overview

ChartCraft ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding it when you use the ChartCraft Service at chartcraft.dev.

2. Information We Collect

Information you provide

• Prompts and diagram content. When you type prompts or create diagrams, this content is processed to generate diagram output. Prompts are sent to our AI provider (OpenAI) to produce structured data.
• Account information. If you sign in, we collect the email address and profile information provided by your authentication provider.
• Public examples. If you choose to share a diagram publicly, its content and a descriptive title are stored and displayed on the Service.

Information collected automatically

• Usage data. We collect anonymised usage analytics (pages visited, features used, general interaction patterns) via Vercel Analytics. This does not identify you personally.
• Log data. Our hosting infrastructure (Vercel) automatically records standard server logs including IP addresses, browser type, and request timestamps, retained for a limited period for security and debugging purposes.
• Local storage. The studio uses your browser's localStorage and sessionStorage to remember your diagram history, preferences, and in-progress work. This data stays on your device and is not sent to our servers unless you explicitly share or save a diagram.

3. How We Use Your Information

• To generate and render diagrams in response to your prompts.
• To operate, maintain, and improve the Service.
• To display publicly shared diagrams on the examples gallery.
• To understand aggregate usage patterns and improve the user experience.
• To comply with legal obligations and protect the security of the Service.

We do not sell your personal information to third parties.

4. Third-Party Services

We share data with the following third-party providers only as necessary to operate the Service:

• OpenAI. Your diagram prompts and current diagram context are sent to OpenAI's API to generate structured output. OpenAI processes this data under its own Privacy Policy. We use the API in a way that opts out of data training where available.
• Vercel. The Service is hosted on Vercel, which processes request logs and provides anonymised analytics. See Vercel's Privacy Policy.

5. Data Retention

Prompts sent to the AI are not stored by us beyond the immediate request-response cycle. Publicly shared diagram examples are retained until you delete them or request removal. Server logs are retained for up to 90 days. Analytics data is retained in aggregated, anonymised form.

6. Cookies

ChartCraft does not use advertising or tracking cookies. The Service may use strictly necessary session storage (browser-side only) and authentication tokens if you sign in. Vercel Analytics uses a privacy-preserving approach that does not rely on identifying cookies.

7. Your Rights

Depending on your location, you may have rights to access, correct, or delete personal data we hold about you. To make a request, reach us through the in-app support widget in the ChartCraft Studio. We will respond within a reasonable timeframe and in accordance with applicable law.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact

Questions or concerns about this policy? Reach us through the in-app support widget in the ChartCraft Studio.