Privacy policy
Last updated September 2, 2026
This policy explains how TechnicolorLife LLC, doing business as Chartapir (“Chartapir,” “we,” or “us”), handles personal information when you use chartapir.app, join our waitlist, create an account, or use the Chartapir app. Chartapir turns spreadsheets and table images into narrated chart videos.
The website and the app collect different information. We describe both below so you can see what happens at each stage.
Information we collect
Information you provide.
- Waitlist and contact information: your email address and anything you include in a support or privacy request.
- Account information: the identifier supplied by your sign-in provider, your email address, account settings, and notification preferences. Depending on the method you choose, authentication may use Apple, Google, or an email sign-in code. Apple’s Hide My Email feature may provide a relay address instead of your personal address.
- Your content: spreadsheets, CSV or XLSX files, table images, file names, and the instructions and settings you choose for a video.
- Feedback: support messages and any optional rating or comment you submit about a completed video.
Information created or collected when you use Chartapir.
- Generated and working content: detected columns and series, extracted table data, scripts, charts, narration audio, subtitles, render files, posters, and finished videos.
- Service records: projects, job status and errors, plan and credit balances, reservations and settlements, purchase confirmations, account-deletion status, and security or abuse-prevention records.
- Device and usage information: app version, device and operating system information, push-notification token, crash diagnostics, basic feature events, IP address, request time, and similar server logs produced when a device connects.
- Website referral information: the referring page and campaign tags included in a waitlist link. The website currently has no advertising pixels or behavioral analytics cookies.
Please do not upload information you are not permitted to use. Chartapir is a general business tool and is not designed for medical records, biometric data, government identifiers, or other highly sensitive personal information.
How we use information
- Provide accounts, projects, plans, credits, and customer support.
- Read your content, generate the requested video, and deliver the result.
- Process purchases, prevent duplicate charges, and keep accounting records.
- Send service messages and notifications you request, such as a finished-video alert.
- Diagnose failures, secure the service, prevent abuse, and enforce service limits.
- Understand aggregate feature use and improve reliability.
- Comply with law and protect the rights, safety, and integrity of users and the service.
We do not sell personal information or share it for cross-context behavioral advertising. We do not use your files, generated content, or videos to train a model of our own. The model and infrastructure providers that process a request are governed by their own terms, as described below.
How AI processing works
For spreadsheet inputs, Chartapir sends a bounded, derived projection to the language model rather than the original file. The projection may include column labels, statistics, and a limited sample of values. Values from columns detected as personal or sensitive are withheld from that sample. If you upload an image of a table, the whole image is sent to Google Gemini so the table can be extracted. Narration text, including figures selected from your data, is sent to Microsoft Azure to create speech.
Automated classification reduces exposure but cannot guarantee that every personal value will be recognized. You remain responsible for deciding whether the content is suitable to upload and whether you have authority to process it.
Legal bases
Where data-protection law requires a legal basis, we process account and project data to perform our contract with you; waitlist information and optional notifications with your consent; security, diagnostics, and limited product analytics for our legitimate interests in operating a safe and reliable service; and transaction records to meet legal obligations. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
Service providers and disclosures
We disclose information only as needed to operate Chartapir, complete a transaction, comply with law, or protect the service. Our main provider categories are:
- Supabase: authentication, database, account records, and file storage.
- Amazon Web Services and CloudFront: processing, rendering, private storage, and delivery of generated files.
- OpenRouter and the selected model host, currently Reka or CoreWeave: the bounded data projection used to write and structure a video.
- Google Gemini: an uploaded table image when image extraction is requested.
- Microsoft Azure: narration text used to generate speech.
- Apple: sign-in when selected, App Store purchases, and iCloud-related platform services.
- Google and Firebase: Google sign-in when selected, crash reporting, basic app analytics, and push-notification delivery.
- Vercel: website and web-app hosting and request logs.
- Resend: transactional email delivery.
We may also disclose information in response to a valid legal request, to investigate fraud or security incidents, or as part of a merger, financing, acquisition, or sale of assets. We do not give a buyer more rights over your information than this policy provides.
International transfers
Chartapir is operated in the United States, and the providers above may process information in the United States and other countries where they operate. Where required, transfers are supported by recognized safeguards such as adequacy decisions, the EU–U.S. Data Privacy Framework for participating providers, or standard contractual clauses.
How long we keep information
- Source uploads: up to 30 days, or until account deletion, whichever comes first.
- Finished videos and posters: 7 days on Free, 30 days on Starter, 90 days on Pro, and 365 days on Premium, measured under the plan used to create the video.
- Render intermediates: temporary working data is removed on operational schedules and is not kept as your permanent copy.
- Account, project, job, rating, and support records: while your account is active and then as described under deletion below.
- Waitlist information: until we use it to announce availability, you unsubscribe, or you ask us to delete it.
- Transaction records: as long as tax, accounting, fraud-prevention, and charge-dispute obligations require.
- Provider copies: providers may retain short-lived operational copies under their own documented schedules. Account deletion cannot directly erase a copy already held in a provider’s systems.
Deleting your account
You can request deletion from inside the app. As soon as the request is recorded, you can no longer create a project, upload a source file, or generate a new video. A 72-hour grace period lets you reverse the request and restore access to those features. Existing videos remain downloadable during that grace period; after it ends, deletion cannot be undone and downloads stop working, so save anything you want to keep before it closes. We complete deletion within 30 days of your request. For instructions and the lost-device route, see Delete your account.
When deletion begins, we stop unfinished video work. The deletion process removes source uploads, derived dataset readings, generated videos, posters, narration, and rendering artifacts from the Supabase and AWS storage systems we control, including the Remotion render location. It scrubs projects and job records of submitted content and invalidates Chartapir delivery copies before marking the request complete. It also soft-deletes and obfuscates the sign-in identity and removes plaintext contact and profile fields. A video you downloaded or shared cannot be recalled from the place where you put it.
Limited transaction, credit, subscription, provider-reconciliation, security, and deletion audit records may remain where needed for accounting, fraud prevention, charge disputes, legal obligations, and proof that we carried out the request. We remove your name, email, submitted content, and other user-authored fields from those records; they may remain linked to an internal account identifier that no longer identifies a live Chartapir account.
For up to 30 days after your deletion completes, a recovery copy of the deleted content survives as protection against faults or abuse of deletion itself. No automated part of our service can read it. Restoring it requires a named operator credential and a logged administrative act, and any restore re-applies completed deletions.
Security
We use access controls, private storage, encryption in transit and at rest, scoped service roles, and short-lived signed links. Production access is limited and administrative actions are logged. No service can guarantee absolute security, so please contact us promptly if you believe your account or information has been compromised.
Your privacy rights
Depending on where you live, you may have rights to know, access, correct, delete, or obtain a portable copy of personal information; to restrict or object to certain processing; to withdraw consent; and to appeal or complain to a regulator. We do not discriminate against you for exercising a privacy right. Chartapir does not sell personal information, so there is no sale from which you need to opt out.
To exercise a right, email [email protected]. We may need to verify that the request relates to your account. We aim to respond within 30 days, subject to any extension permitted by applicable law.
Children
Chartapir is a business tool and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has provided information, contact us and we will investigate and delete it where required.
Changes to this policy
We may update this policy as Chartapir changes. We will post the revised policy with a new date and provide additional notice in the app or by email when a change materially affects your rights or how we use personal information.
Contact and controller
TechnicolorLife LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States
Privacy and support requests: [email protected]