01Who is responsible
Sun, an individual based in China, operates PeasyChart and is responsible for the personal information processed to provide this service. Contact support@peasychart.com for privacy matters. This policy covers the website, accounts, private templates, feedback and subscription records.
02Information we collect
Account information: email address, display name, account status, password hash for password accounts, and login activity. If you choose Google sign-in, we receive the identifiers and profile information supplied for authentication, such as your name, email and profile image. We do not receive your Google password.
Charts and templates: chart data and settings you choose to save online, template names, and related update information. Importing a local spreadsheet or rendering a chart is handled in your browser; it is not by itself an instruction to upload that file to our database. Cloud saving transmits the selected template content to our server.
Billing information: selected plan, subscription status, billing periods, order references, payment or refund references, amounts and currencies. Waffo Pancake and its payment partners collect card and billing details on their hosted checkout. We do not store full card numbers or security codes.
Feedback and support: the name, email, message and page/language context you submit, and account reference when signed in. Emails you send to support include the information you choose to provide.
Technical information: necessary session cookies, a random encrypted visitor cookie used to count guest image exports without registration, IP addresses, request times, security and error logs, trial eligibility and export quota records. Guest export records use a keyed hash of the visitor identifier; the cookie lasts up to one year unless you remove it. It is not used for advertising or browser fingerprinting. Your browser may store local chart drafts, language preferences and account-scoped template caches.
03How information is used
We use information to authenticate accounts, save private templates, apply membership and trial rights, manage subscriptions and quotas, confirm payments and refunds, respond to feedback, secure the service, prevent abuse, and meet applicable obligations.
Where a legal basis is required, processing may be necessary to provide the service or perform a contract, meet legal obligations, protect legitimate security interests, or rely on consent where required. We do not use your charts for AI model training or publish them as public templates. We do not sell personal information.
04Service providers and sharing
We use Cloudflare for website delivery, DNS, security and proxy services; Tencent Cloud infrastructure in Virginia, United States, for the backend and database; Google for optional sign-in; Waffo Pancake for checkout, payments, subscriptions and refunds; and Zoho Mail for support email.
Providers receive information needed for the functions they perform. For example, Waffo receives the account email and order context needed for checkout. Payment providers also process information under their own policies and legal responsibilities. We may disclose information when legally required, to address fraud or security incidents, or to protect legal rights.
We do not sell data to advertisers. The current app does not use advertising cookies or a marketing analytics tracker. If our use of optional tracking changes, we will update the policy and seek consent where required.
05Storage and international processing
The backend database is hosted in Virginia, United States. Cloudflare operates a global delivery network, and login, payment and email providers may process information in other countries. Your information may therefore be processed outside your country, including outside China.
Applicable rules for international transfers depend on your location and the processing involved. Contact us for information about a transfer affecting your data. This policy does not claim that a particular transfer contract or certification applies where it has not been established.
06Retention and deletion
Account information and private templates are retained while needed to operate your account and provide the features you use. You can delete saved templates through the app. Contact support to request account deletion or further assistance; we may verify account ownership first.
Payment and accounting records may need to be retained after account deletion to meet applicable legal obligations, resolve disputes or prevent fraud. Feedback and security records are retained only for the support, security or legal purposes for which they are needed. We review retention when handling deletion requests and service changes.
We aim to respond to verified privacy requests within 30 days, or the applicable legal deadline. If the law permits additional time, we will explain the reason. Files already exported to your device and browser-stored copies remain under your control; you can remove local data through your browser settings.
07Your choices and rights
Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction or objection to processing, or withdrawal of consent where consent is the basis. Withdrawing consent does not undo earlier lawful processing. Essential information may still be needed to provide an account or comply with law.
Send requests to support@peasychart.com from your account email where possible. Do not include identity documents, passwords or full card details unless a justified and secure verification process is separately arranged. You may also raise a complaint with a relevant data protection authority.
You can stop using optional Google sign-in, control cookies in your browser, clear local drafts and caches, and cancel subscription renewal in Account center. Blocking essential cookies may prevent sign-in.
08Security, children and updates
Production connections use HTTPS, and password accounts store password hashes rather than plaintext passwords. Access to administration is restricted. No online service can guarantee absolute security; report suspected account compromise to support promptly.
The service is not intended for children under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
We update this policy when our practices change and communicate material changes as required by applicable law. The date above identifies this version. Our Terms of Service explain billing, cancellation and refund rules.