Privacy Policy

This Privacy Policy explains how Plotap(“we”, “us”) handles information when you use our dashboard and when the Explain widget runs on a website that has installed it. We aim to collect as little as possible.

1. Who is responsible for what

When you sign in and manage sites, we are the data controller for your account. When the widget runs on a customer’s website, that website owner is the controller of their visitors’ experience; we act as a processor that returns explanations and records aggregate usage on their behalf.

2. Information we collect

• Account data. When you sign in with Google via Supabase, we receive your email, name, and avatar URL to create your profile.
• Site configuration. The sites you create, their settings, allowed origins, and public keys.
• Widget usage. For each explanation we store the time, status, latency, token counts, the requesting origin, and a short preview (up to 280 characters) of the selected text for your analytics. We do not store full page content or build profiles of individual visitors.
• Selected text. When a visitor requests an explanation, the selected text and a small amount of surrounding page context are sent to our AI provider to generate the response. It is not used to train models.

3. How we use information

• To provide the dashboard, generate explanations, and show you analytics.
• To enforce quotas, rate limits, and origin allow-lists that protect your account.
• To secure the service, debug issues, and prevent abuse.

4. AI processing

Explanations are generated by a large language model hosted by Groq. Selected text and context are transmitted to the provider solely to produce a response and are subject to that provider’s terms. We do not sell your data or your visitors’ selections.

5. Sharing

We share data only with infrastructure providers that make the service work, currently Supabase (authentication and database) and Groq (model inference), and only as needed. We may disclose information if required by law.

6. Retention

Usage events are retained to power your analytics and are removed when you delete a site or your account. You can delete a site at any time from the dashboard, which removes its configuration and associated analytics.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at [email protected].

8. Children

The service is not directed to children under 13, and we do not knowingly collect their data.

9. Changes

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

10. Contact

Questions about privacy? Email [email protected] or use our contact page.

This document is a general template provided for transparency and is not legal advice.