Privacy Policy
Last updated: April 6, 2026
FigCanvas is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights. The short version: we collect only what we need to run the service, and we never sell your personal information.
Information we collect
Account information
When you sign up (via Google OAuth or email), we collect your email address, display name, and profile picture URL. This is the minimum needed to create and maintain your account.
Usage data
We collect basic usage information to improve the product: pages visited, features used, device and browser type, IP address, and approximate location. We use this to understand how researchers use FigCanvas and where we can improve.
Content you create
This includes your projects, canvas editor files, uploaded datasets, text prompts, and AI-generated figures. Your projects are private by default.
AI generation data
When you use AI features, your prompts and data summaries (not complete datasets) are sent to third-party AI providers to generate figures. Your conversation history is stored as part of your project data and retained as long as the project exists.
How we use your information
- ·Running the service: authentication, project storage, export, customer support
- ·Improving the product: understanding usage patterns, improving AI output quality, fixing bugs
- ·Communication: service updates, security notices, and support responses (no marketing spam)
Data sharing
We do not sell, rent, or trade your personal information. We share data only in these cases:
- ·Service providers who help us run FigCanvas (hosting, payments, analytics), under data protection agreements
- ·Third-party AI providers (Anthropic, Google, OpenAI) for figure generation, receiving only prompts and data summaries
- ·Code execution via E2B in isolated sandboxes for data visualization
- ·Legal requirements, if compelled by law
Data security
All data is transmitted over HTTPS and stored encrypted. We run regular security audits, enforce access controls, and apply rate limiting. Uploaded datasets are deleted within 24 hours unless saved to a project.
Data retention
- ·Account data: retained while your account is active
- ·Usage analytics: anonymized after 24 months
- ·AI conversation history: retained as part of your project, deleted when you delete the project
- ·Uploaded datasets: deleted within 24 hours unless saved to a project
Your rights
You can access, correct, or delete your personal data at any time. You can export your data or request that we restrict how we process it. To exercise any of these rights, contact us at the email below.
Children
FigCanvas is not directed at children under 13. We do not knowingly collect personal information from children without parental consent.
International transfers
Your data may be processed in the United States and the European Union. We use appropriate safeguards for international data transfers.
Changes to this policy
We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice.
Contact
Questions about this policy? Email us at contact@figcanvas.com.