Privacy Policy

1. Information We Collect

Information You Provide

• Account Information: If you create an account, we collect your email address and, if you use OAuth authentication (Google or Microsoft), your name and profile information provided by those services.
• User Content: The text prompts you enter and the diagrams, charts, and visualizations you create using the Service.
• Communications: Any messages, feedback, or inquiries you send to us.

Information Collected Automatically

• Usage Data: Information about how you interact with the Service, including session data, features used, and timestamps.
• Technical Data: IP address, browser type and version, device type, operating system, and referring URLs.
• Cookies: We use essential cookies to maintain your session and preferences. See Section 9 for more details.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Process your prompts, generate diagrams, and deliver the core functionality of Graphite.
• Maintain and Improve: Monitor performance, fix bugs, analyze usage patterns, and enhance the user experience.
• Communicate: Respond to your inquiries, send service-related announcements, and notify you of material changes to our policies.
• Ensure Security: Detect and prevent fraud, abuse, and unauthorized access to the Service.
• Comply with Legal Obligations: Fulfill legal requirements and respond to lawful requests from authorities.

3. No AI Training on Your Data

Your content is not used to train AI models. The prompts you enter and diagrams you create are processed solely to deliver the Service to you. We do not use your content to train, improve, or develop any machine learning or artificial intelligence models. Your data is transmitted to third-party AI providers (OpenAI and Google) only for the purpose of generating your requested diagrams, subject to their respective data processing terms.

4. Third-Party Data Sharing

We share your information with the following categories of third parties to operate the Service:

We do not sell your personal information to third parties. We may also share information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets.

5. Data Retention

We retain your personal information and content for as long as your account remains active or as needed to provide the Service to you. Specifically:

• Account Data: Retained for the lifetime of your account.
• Diagram Sessions: Stored indefinitely to allow you to access and continue your work.
• Inactive Accounts: We reserve the right to delete accounts and associated data that have been inactive for more than one (1) year. We will attempt to notify you via email before deletion.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your account and associated personal data.
• Data Portability: Request an export of your data in a machine-readable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

Canadian Users (PIPEDA): Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to access and challenge the accuracy of your personal information held by us. To exercise any of these rights, please contact us at the email address provided below.

7. Children's Privacy

The Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (HTTPS), secure authentication, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for the Service to function, such as maintaining your login session.
• Analytics: We use Langfuse to monitor service performance and usage patterns. This helps us understand how the Service is used and identify areas for improvement.

10. International Data Transfers

Your information may be transferred to—and processed in—countries other than Canada, including the United States, where our third-party service providers (such as OpenAI, Google, and Vercel) operate. These countries may have data protection laws that differ from Canadian law. By using the Service, you consent to such transfers. We take steps to ensure that your information receives adequate protection in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on the Service and updating the "Effective Date" above. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: alex@codeperfect.studio

We will respond to your request within a reasonable timeframe and in accordance with applicable law.