Privacy Policy

Last updated: 2026-10-23. Draft policy for the beta.

What we collect

Email address — used for passwordless login (one-time codes). No passwords are stored.
Files you upload, plus the prompts you send and the generated code versions.
Token ledger — purchases, grants and prompt usage tied to your account.
Usage analytics — product events (signup, upload, prompt, purchase) collected via PostHog.
Usage and error tracking — page views, app actions (e.g. uploads, prompts, downloads, theme changes) and error reports (including error messages, which can mention column names from your file), sent with your IP address, browser user agent and numeric account id (never your email) to our self-hosted Rybbit analytics server.

How we use it

To authenticate you and operate the service (storing your projects and version history).
To generate plotting code: a small sample of each uploaded file (column names, data types, first rows) and your prompts are sent to the LLM provider. The full file is never sent to the LLM. Optional: if you tick "Include the current plot" before sending a prompt, the rendered plot image — which can show all plotted data points — is sent to the LLM provider with that prompt so the model can see what you see. It is off by default and applies only to prompts you send while it is ticked.
To understand and improve the product (aggregated usage analytics) and to find and fix errors.
We do not sell your data and do not use your files or prompts to train models.

Third-party processors

OpenRouter — LLM inference; receives file samples, prompts and generated code, and — only when you tick "Include the current plot" — the rendered plot image.
Stripe — payment processing; we never see card numbers.
PostHog — product analytics (signup, upload, prompt, purchase events).

Cookies

We use a session cookie (login) and a CSRF cookie — both strictly necessary. PostHog may set an analytics cookie. Rybbit sets no cookies but may keep an anonymous visitor id and your account id in your browser's local storage. We set no advertising or tracking cookies beyond that.

Retention and deletion

Your files, prompts and code versions are stored until you delete them. You can permanently delete your account yourself: click Delete account in the footer of the app and type DELETE to confirm. This removes your email address, projects, uploaded files and generated versions. An anonymized token ledger (no longer linked to you) is retained for accounting and audit purposes.

Your rights (GDPR)

If you are in the EEA/UK you have the right to:

Access — request a copy of the data we hold about you.
Deletion — self-service in the app (see above), effective immediately.
Export — contact us via the Feedback button to request a machine-readable export of your data.
Rectification & objection — contact us to correct inaccurate data or object to processing.

Contact

For any privacy request (access, export, rectification), use the Feedback button in the app — it goes straight to the developers.