Legal
Privacy Policy
This policy explains what GeeskiAI LLC ("ChartForce", "we", "us") does with personal data when you use chartforce.ai. It covers the website, the chart pipeline, and the exports you download.
We are the data controller for that processing. ChartForce is operated by GeeskiAI LLC, a Delaware limited liability company. You can reach us about anything in this policy at privacy@chartforce.ai. If you need our postal address — for a data-rights request, or to serve a notice — ask at that address and we will give it to you.
1What we collect
| Category | What it is | Where it comes from |
|---|---|---|
| Account data | Email address, and a hash of your password. If you sign in with Google, the account identifier and email Google returns — we never receive your Google password. | You, at signup |
| Prompt and content data | The text prompts you write, CSV files and chart screenshots you upload, chart edits and saved themes, images you add to your entity library, and anything you send us in a bug report — its description, the page you were on, and a screenshot if you attach one. | You, while using the product |
| Chart and job data | The datasets retrieved on your behalf, the chart specifications produced, provenance records, and export history. | Generated by the pipeline |
| Billing data | Your plan, credit balance, and a Stripe customer identifier. Card numbers are handled by Stripe and never reach our servers. | You and Stripe |
| Waitlist data | If you joined through the waitlist: when you joined, whether you have been admitted, and whether the free month of Pro that comes with it has been used. | You, when you join the waitlist |
| Published charts | A copy of a chart you publish, holding only what the chart draws, the websites you allow to embed it, and any confirmation you gave about the data's license | You, when you publish |
| Invitations | The email addresses you invite to view a chart, and whether each has opened it — never when or how often | You, when you invite someone |
| Embed view counts | A daily count of views of each chart on each website you allowed, counting each visitor once a day. No IP address, device or identity is stored with it | Pages showing your embedded chart |
| Technical data | IP address, browser user-agent, timestamps and error traces in server logs. | Automatically, when you make a request |
If someone shares a chart with you, we hold your email address to send the invitation and to let you sign in to view the chart; signing in creates an account like any other, which you can delete from Settings. If you view a chart embedded on another website, your browser contacts our servers, which log your IP address for 90 days as they do for every request; we do not identify you or set a cookie. So that a visitor counts once a day rather than on every load, we keep a one-way keyed digest of your connection for that chart and that day; it cannot be turned back into your address or linked across charts or days, and it is deleted when the day is over. Every invitation email has a link to stop further invitations to your address.
We do not ask for, and ask that you do not upload, special-category data — health records, biometric identifiers, government ID numbers, or financial account numbers. ChartForce is a charting tool for aggregate data and is not built to hold that material.
2Why we use it, and our legal basis
Where the GDPR or UK GDPR applies, we rely on the following bases.
| Purpose | Legal basis |
|---|---|
| Creating and running your account, generating charts you ask for, and delivering exports | Performance of a contract |
| Taking payment, handling tax, and keeping the financial records the law requires us to keep | Contract, and legal obligation |
| Keeping the service secure — rate limiting, abuse prevention, debugging failures | Legitimate interests in operating a service that works and is not abused |
| Keeping a one-way, keyed record that a promotional offer was made to an email address, so the same offer cannot be taken repeatedly by deleting an account and signing up again | Legitimate interests in preventing abuse of a promotion. The record contains no address and no account identifier — see “How long we keep it” |
| Responding to your support, privacy, or copyright requests | Contract, and legal obligation |
| Sending service emails you cannot opt out of, such as email confirmation, billing receipts, and the two messages a waitlist member gets — confirming they joined, and telling them their account is open | Contract |
| Showing a chart you publish to the people and websites you choose, sending the invitations and sign-in links for it, and telling you whether an invitation was opened and how often your embeds are viewed | Performance of a contract with you; for the people you invite, our legitimate interest, and yours, in delivering a chart you chose to share with them |
We do not use your data for automated decision-making that produces legal or similarly significant effects about you.
3AI processing, and what we do not do with your content
ChartForce uses Anthropic's Claude models to interpret your prompt, decide which public dataset answers it, read tables out of screenshots you upload, and measure values off charts you upload. To do that, your prompt and any file you upload for that job are sent to Anthropic's API.
The models route and read; they do not invent figures. Where a value is measured off an uploaded image rather than fetched from a source API, the chart and its export are labeled as an estimate. See Data sources and licensing for what the pipeline fetches and from where.
5How long we keep it
| Data | Retention |
|---|---|
| Uploaded CSV and screenshot files | Deleted as soon as the extraction step has read them — normally within minutes. A scheduled sweep removes any file left behind by a failed job within 40 minutes. |
| Bug reports, and screenshots attached to them | Kept until you delete your account, so we can fix what you reported and tell you we did. This is the one screenshot we keep: unlike a chart you upload for the pipeline to read, a bug report is only useful for as long as the bug is. |
| The data extracted from your upload | Kept for as long as the chart exists, because it is the chart. Deleting the chart deletes it. |
| Charts, jobs, themes and entity images | Until you delete them, or until you delete your account. |
| Images you add to a chart — backgrounds and placed images | Kept while any of your charts uses them. Once none of your charts has used an image for 14 days, a scheduled sweep deletes the file — so an image you take off a chart, or whose chart you delete, is removed after that. The wait is there so that undoing an edit can still bring the image back. |
| Files you export (PNG and SVG) | The download link works for one hour. The file is deleted from our servers 24 hours after you export it; the copy you downloaded is yours to keep. |
| Account data | Until you delete your account, then removed within 30 days across backups. |
| Waitlist entry | Until you delete your account, then removed with it. |
| Record that a promotional offer was made to an email address | Kept indefinitely, and it survives account deletion. It is not your address: it is a one-way keyed digest (HMAC-SHA256) of it, held with no account identifier and no other field but the dates the offer was made and used. The key is held outside the database, so the record cannot be matched back to an address by anyone holding the table. It exists so a free month cannot be claimed again by deleting an account and re-joining. |
| Billing and tax records | Seven years after the transaction, because tax law requires it. This survives account deletion, alongside the offer record above. |
| A record of the invitation emails you sent, with each recipient as a one-way digest | Two days. It exists to hold you to the daily invitation limit and to stop a second email to one inbox inside a day. |
| Published charts, their invitation lists and view counts | Until you unpublish or delete the chart, or delete your account. A chart your plan no longer covers stops being shown 30 days later. When a chart is unpublished, the copies our content delivery network holds are cleared at the same time. |
| Server logs | 90 days. |
The upload-retention behavior above is engineered rather than promised: the worker strips the file from the job record the moment the extraction step consumes it, on success and on failure alike.
6Your rights
Wherever you live, you can do all of the following yourself, without contacting us and without giving a reason:
- Download a copy of your account data, charts and job history as a JSON file — Settings, under “Your data”.
- Delete any individual chart, from your dashboard.
- Delete your account entirely — Settings, under “Danger zone”. This removes your charts, jobs, saved themes, entity images, the images on your charts, bug reports and your waitlist entry with it, including every file behind them.
If the GDPR or UK GDPR applies to you, you also have the right to access, correct, restrict or object to our processing, to data portability, and to withdraw consent where we relied on it. You may lodge a complaint with your supervisory authority — in the UK, the Information Commissioner's Office.
If you are a California resident, you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal data, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights.
To exercise anything not available in Settings, email privacy@chartforce.ai. We respond within 30 days, and will tell you if we need longer. We may ask you to confirm control of your account email before acting on a request.
8Where your data is processed
ChartForce is operated from the United States, and our service providers process data in the United States and the European Union. If you are in the UK, EEA or Switzerland, that means your data is transferred outside your home jurisdiction.
Those transfers rely on the European Commission's Standard Contractual Clauses and the UK Addendum, incorporated into our contract with each provider. You can request a copy of the relevant terms.
9Security
Data is encrypted in transit and at rest. Access to production data is limited to people who need it. Uploaded images are stored privately and served only to the account that uploaded them and, for a published chart, through short-lived links to the people and websites it is published to. Our security practices, and how to report a vulnerability, are described at Security.
If a breach affects your personal data and creates a risk to you, we will notify you and the relevant regulator within the deadlines the law sets — 72 hours from becoming aware, under the GDPR.
10Children
ChartForce is not for children. You must be at least 16 to create an account, and at least 18 to buy a paid plan. We do not knowingly collect data from children under 16; if we learn that we have, we delete the account and its data.
11Changes to this policy
If we make a change that materially affects how we handle your data, we will email you and give at least 30 days' notice before it takes effect. Smaller corrections are published here with an updated date. We do not apply material changes retroactively to data already collected without telling you first.
12Contact
Privacy questions and data-rights requests: privacy@chartforce.ai. Everything else legal: legal@chartforce.ai.