Privacy policy

Last updated September 24, 2026

This policy explains how TechnicolorLife LLC, doing business as Chartapir (“Chartapir,” “we,” or “us”), handles personal information when you use chartapir.app, join our waitlist, create an account, or use the Chartapir app. Chartapir turns spreadsheets and table images into narrated chart videos.

The website and the app collect different information. We describe both below so you can see what happens at each stage.

Privacy at a glance. We use your account details and uploaded content to make and deliver your videos. We do not sell personal information, use it for advertising, or train a model of our own on it. Source uploads are removed on a 30-day schedule and the working copy used to make your video on a 90-day one; finished-video retention depends on your plan. You can request access, correction, or deletion at [email protected].

Information we collect

Information you provide.

Information created or collected when you use Chartapir.

Please do not upload information you are not permitted to use. Chartapir is a general business tool and is not designed for medical records, biometric data, government identifiers, or other highly sensitive personal information.

How we use information

We do not sell personal information or share it for cross-context behavioral advertising. We do not use your files, generated content, or videos to train a model of our own. The model and infrastructure providers that process a request are governed by their own terms, as described below.

How AI processing works

For spreadsheet inputs, Chartapir sends a bounded, derived projection to the language model — currently Google Gemini — rather than the original file. The projection may include column labels, statistics, and a limited sample of values. Values from columns detected as personal or sensitive are withheld from that sample. If you upload an image of a table, the whole image is sent to Google Gemini so the table can be extracted. Narration text, including figures selected from your data, is sent to Microsoft Azure to create speech.

Automated classification reduces exposure but cannot guarantee that every personal value will be recognized. You remain responsible for deciding whether the content is suitable to upload and whether you have authority to process it.

Legal bases

Where data-protection law requires a legal basis, we process account and project data to perform our contract with you; waitlist information and optional notifications with your consent; optional Firebase Analytics on the website with your affirmative consent; security, diagnostics, and limited app analytics for our legitimate interests in operating a safe and reliable service; and transaction records to meet legal obligations. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

Service providers and disclosures

We disclose information only as needed to operate Chartapir, complete a transaction, comply with law, or protect the service. Our main provider categories are below; the subprocessor page lists every recipient in full, says what reaches each one, and carries a dated record of every change.

We may also disclose information in response to a valid legal request, to investigate fraud or security incidents, or as part of a merger, financing, acquisition, or sale of assets. We do not give a buyer more rights over your information than this policy provides.

International transfers

Chartapir is operated in the United States, and the providers above may process information in the United States and other countries where they operate. Where a transfer safeguard is required, the one we rely on is the EU–U.S. Data Privacy Framework for a provider certified under it, and standard contractual clauses for a provider that is not. Which of the two applies to a given provider follows that provider’s own certification. Write to the address below to be told which safeguard is relied on for any provider on our subprocessor page, or to obtain a copy of the clauses.

How long we keep information

Copies held by our providers

Deletion reaches the systems we run. It does not reach a copy a provider already holds: that copy expires on the provider’s own schedule, which we do not set and cannot shorten. Below is every provider that receives your content or an identifier for your account, what reaches it, and whether deletion reaches it. Where we have not verified a provider’s own retention period, we say so instead of estimating one.

Deleting your account

You can request deletion from inside the app. As soon as the request is recorded, you can no longer create a project, upload a source file, or generate a new video. A 72-hour grace period lets you reverse the request and restore access to those features. Existing videos remain downloadable during that grace period; after it ends, deletion cannot be undone and downloads stop working, so save anything you want to keep before it closes. We complete deletion within 30 days of your request. For instructions and the lost-device route, see Delete your account.

When deletion begins, we stop unfinished video work. The deletion process removes source uploads, derived dataset readings, generated videos, posters, narration, and rendering artifacts from the Supabase and AWS storage systems we control, including the Remotion render location. It scrubs projects and job records of submitted content and invalidates Chartapir delivery copies before marking the request complete. It also soft-deletes and obfuscates the sign-in identity and removes plaintext contact and profile fields. A video you downloaded or shared cannot be recalled from the place where you put it.

Limited transaction, credit, subscription, provider-reconciliation, security, and deletion audit records may remain where needed for accounting, fraud prevention, charge disputes, legal obligations, and proof that we carried out the request. We remove your name, email, submitted content, and other user-authored fields from those records; they may remain linked to an internal account identifier that no longer identifies a live Chartapir account.

For up to 30 days after your deletion completes, a recovery copy of the deleted content survives as protection against faults or abuse of deletion itself. No automated part of our service can read it. Restoring it requires a named operator credential and a logged administrative act, and any restore re-applies completed deletions.

Security

We use access controls, private storage, encryption in transit and at rest, scoped service roles, and short-lived signed links. Production access is limited and administrative actions are logged. No service can guarantee absolute security, so please contact us promptly if you believe your account or information has been compromised.

Your privacy rights

Depending on where you live, you may have rights to know, access, correct, delete, or obtain a portable copy of personal information; to restrict or object to certain processing; to withdraw consent; and to appeal or complain to a regulator. We do not discriminate against you for exercising a privacy right. Chartapir does not sell personal information, so there is no sale from which you need to opt out.

To exercise a right, email [email protected]. We may need to verify that the request relates to your account. We aim to respond within 30 days, subject to any extension permitted by applicable law.

Children

Chartapir is a business tool and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has provided information, contact us and we will investigate and delete it where required.

Changes to this policy

We may update this policy as Chartapir changes. We will post the revised policy with a new date and provide additional notice in the app or by email when a change materially affects your rights or how we use personal information.

Contact and controller

TechnicolorLife LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States

Privacy and support requests: [email protected]