Privacy policy

We keep this deliberately small. To run Lightchart we collect:

• Account details. Your name, email address, and password (stored only as a secure hash). If you sign in with a social provider, we receive the basic profile details that provider shares.
• Your content. The charts, storyboards, text, palettes, themes, reusable components, and any images or files you upload. This is your business data and we treat it as confidential.
• Basic usage data. Standard technical logs such as IP address, browser type, and in-product events (for example, a chart being created) so we can keep the service reliable, secure, and improving.

We do not collect sensitive personal data and we have no interest in anything beyond what the product needs to work.

We know many of you will put commercially sensitive numbers into Lightchart: revenue figures, customer metrics, internal performance data. Four commitments cover all of it.

• You own it. You retain all rights to your content. Using Lightchart gives us no ownership of it.
• We do not sell it or use it for advertising. Ever. Your data is not a product, and there is no ad-supported anything in Lightchart.
• We do not train on it. Your content is never used to train machine-learning or AI models, ours or anyone else's.
• It stays inside your workspace. Your storyboards are visible only to you and the people in your workspace. They are not published anywhere, shown to other customers, or used in our marketing unless you explicitly share or send them to us.

Your data is stored on managed, professional cloud infrastructure and protected with industry-standard measures:

• Encrypted in transit over HTTPS/TLS for every request.
• Encrypted at rest in the database and file storage.
• Access controls on our side are limited to the minimum needed to operate the service, and every account's data is isolated by row-level security so one customer can never read another's content.
• Files you upload are stored in private storage and served only to signed-in members of your workspace.

No system is perfectly secure, and we do not promise perfect security. We do promise to use reputable providers, keep access tight, and tell you promptly and honestly if anything ever goes wrong.

We do not sell personal data or share your business data with anyone for their own purposes. We share data only with the small set of providers we need to run Lightchart:

• Our hosting and database provider, which stores your account and content.
• Our file storage provider, which holds your uploaded images.
• Our email provider, if we need to send you account emails such as password resets.

These providers process data only on our instructions to deliver the service. We may also disclose information if the law genuinely requires it, and if we are ever legally compelled to hand over your business data we will notify you unless we are prohibited from doing so.

Lightchart uses only the essential cookies and local storage needed to keep you signed in. We do not run advertising trackers, cross-site tracking pixels, or social media pixels anywhere in the product or on this site.

You are in control of your data, and you can exercise the rights you have under data protection law (including UK GDPR if you are in the UK, or GDPR if you are in the EU):

• Export. Every chart exports as a high-resolution PNG at any time, and you can ask us for an export of your account data.
• Correct. You can update your name, email, and workspace details in settings at any time.
• Delete. You can remove individual storyboards and components yourself, or delete your account entirely.
• Ask us. For anything else (a copy of your data, a correction, a complaint) email us and we will help.

We will never make you jump through hoops to exercise these rights. To contact us, see the final section below.

We keep your data for as long as your account is active so the product works. When you delete your account, we delete your workspaces and their contents (storyboards, charts, uploads, palettes, themes, and components) from our systems.

Backups may retain copies for a short window after deletion as part of standard disaster recovery, after which they are gone. Basic technical logs are kept for a limited period for security and reliability purposes.

If we make meaningful changes to this policy, we will update the date at the top of this page and, for significant changes, tell you in the product or by email before they take effect. We will never quietly change the promises above about selling, sharing, or training on your data.

Questions, requests, or concerns about privacy: email support@lightchart.io. If you are unhappy with how we handle your data, you also have the right to complain to your local data protection authority, but we would appreciate the chance to fix it first.