Privacy Policy

Last updated: December 6, 2025

1. Introduction

NodePlot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our visual timeline builder application (the "Service"). By using NodePlot, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account or sign in, we collect:

Email address (required for authentication and account management)
User ID (automatically generated unique identifier)
Authentication tokens and session data

2.2 User-Generated Content

We store the content you create within NodePlot, including:

Project titles, descriptions, and settings
Timeline nodes (titles, descriptions, categories, colors, positions)
Connections between nodes and dates
Category settings and customizations
Project dates (start dates, end dates)

2.3 Collaboration Data

When you share projects with others, we collect:

Email addresses of users you invite to projects
Sharing permissions (viewer or editor access)
Invitation tokens and expiration dates
Project access records and view timestamps

2.4 Usage Data

We automatically collect certain information when you use the Service:

Project view timestamps
Last viewed project information
Browser type and version
Device information
IP address (collected by our hosting provider)

2.5 Local Storage Data

We use browser local storage to improve performance and user experience:

Project data cached locally for faster loading
User preferences and settings
Active project state

Note: Local storage data is stored on your device and can be cleared at any time through your browser settings.

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To provide, maintain, and improve the NodePlot service, including authentication, data storage, and synchronization across devices
Collaboration: To enable project sharing, send invitation emails, and manage access permissions
Communication: To send authentication codes, invitation emails, and important service notifications
Account Management: To manage your account, verify your identity, and provide customer support
Security: To detect, prevent, and address technical issues, fraud, and unauthorized access
Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Third-Party Services

NodePlot uses the following third-party services that may process your data:

4.1 Supabase

We use Supabase for:

User authentication and account management
Database storage for all user data and projects
Email delivery for authentication codes and invitations
Real-time data synchronization

Supabase's privacy practices are governed by their own privacy policy. For more information, visit https://supabase.com/privacy

4.2 Hosting and Infrastructure

Our application is hosted on infrastructure that may collect standard server logs, including IP addresses, request timestamps, and browser information. This data is used for security, debugging, and service improvement purposes.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Project Sharing: When you share a project with other users, those users will have access to the project content and your email address (as the project owner or collaborator)
Service Providers: We may share data with third-party service providers (such as Supabase) who perform services on our behalf, subject to confidentiality agreements
Legal Requirements: We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using HTTPS/TLS
Secure authentication using industry-standard protocols
Access controls and authentication requirements
Regular security assessments and updates
Database security measures provided by Supabase

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You can access your data at any time through the NodePlot application. You can view, edit, and export your projects and content directly from the Service.

7.2 Deletion

You can delete your account and all associated data at any time. To request account deletion, please contact us using the information provided in Section 11. Note that:

Deleting your account will permanently remove all your projects, nodes, and user data
If you have shared projects with others, those projects may remain accessible to collaborators until they are deleted by the project owner
Some information may be retained for legal or legitimate business purposes (e.g., transaction records)

7.3 Correction

You can update your account information and project content at any time through the Service interface.

7.4 Opt-Out

You can opt out of non-essential communications by adjusting your preferences. However, we may still send you important service-related messages (e.g., security alerts, account changes).

7.5 European Economic Area (EEA) and United Kingdom Rights

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR), including:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

7.6 California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

8. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

Account data is retained until you delete your account
Project data is retained until you delete the project or your account
Invitation data is retained until the invitation is accepted, expires, or is revoked
Usage logs may be retained for up to 90 days for security and debugging purposes
Some data may be retained longer if required by law or for legitimate business purposes

9. Children's Privacy

NodePlot is not intended for children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

Standard contractual clauses approved by relevant data protection authorities
Compliance with applicable data protection laws
Working with service providers (like Supabase) that maintain appropriate data protection standards

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on this page with a new "Last updated" date
Sending an email notification to registered users for significant changes
Displaying a notice within the Service for substantial updates

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

NodePlot Privacy Inquiries

Email: support@nodeplot.com

Please include "Privacy Policy Inquiry" in the subject line for faster processing.

For account deletion requests, data access requests, or other privacy-related requests, please use the contact information above and allow up to 30 days for processing.

13. Consent

By using NodePlot, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

← Back to Home Terms of Service →