Privacy Policy

Effective August 15, 2026.

The short version

• Your graphs are yours. We do not sell your data or use it to train models.
• If you use AI features with your own API key, that key and your prompts go straight from your browser to the model provider. We never receive either.
• Usage analytics are anonymous, aggregate, and contain no prompt text and no graph contents.
• Anything you share by link becomes public to that link.

1. Who we are

Luke Anger, trading as AxoGeo operates the AxoGeo website (axogeo.com) and editor (app.axogeo.com). This policy explains what we collect, why, and what choices you have.

2. What we collect

Information you give us

• Account details. If you create an account, the email address and authentication identifiers needed to sign you in. If you sign in with Google, Google gives us your email address, your name and a Google account identifier, and nothing else. We use them only to create and recognise your account. We never receive your Google password, and we do not read, use or share any other data in your Google account.
• Billing details. Handled by our payment provider (see §4). We receive confirmation of your subscription status, not your card number.
• Graphs you save to your account. The graph document, its name, a thumbnail generated from it, and whether you have chosen to publish it. A graph you delete is kept for 30 days, so that a device which has been offline learns it was deleted rather than restoring its own copy, and is then permanently removed.
• Your username, if you choose one, together with any display name. These are public, so that work you publish can be attributed to you.
• Correspondence. Anything you send us by email or a feedback form.

Information collected automatically

• Anonymous usage analytics. We record events such as a session starting, which features are used, timings and error counts, along with the application version and the referring page. These are not tied to an advertising identifier and are used to understand which parts of the product work.
• A coarse description of your browser, once per session: a rough size band (small, medium or large), whether the device has a touchscreen, whether 3D graphics are available, and whether the browser reports itself as automated. This is kept deliberately imprecise — no screen dimensions, no device model, nothing that would identify a particular machine. It exists so we can tell a phone from a desktop, and a person from a bot, when something breaks.
• Error reports. When something breaks, we may record the error and the technical context needed to fix it.
• Server logs. Our hosting and content delivery providers log requests, including IP address, as a normal part of serving and securing the site.

What we do not collect

• AI API keys and prompts. Where AI features require your own provider key, the key is held in your browser and requests go directly from your browser to that provider. The key, your prompts and the generated results never pass through our servers.
• The contents of your graphs, except where you save to an account or deliberately publish a share link.
• Payment card details.

3. Data stored in your browser

AxoGeo stores data locally in your browser — including your graphs on unsigned-in or local-first plans, your editor preferences, and, if you enter one, your AI provider key. This data lives on your device and is not transmitted to us.

Because it lives on your device, it can be erased by clearing your browser data, by private-browsing modes, or by your browser reclaiming storage. Export anything you cannot afford to lose.

4. Third parties we rely on

• Paddle — payments. Paddle acts as merchant of record and processes your billing information under its own privacy policy.
• Supabase — accounts and database. Supabase holds your email address, your sign-in identifiers, the graphs you save and their thumbnails, on servers in the United States, under its own privacy policy.
• Google — sign-in, if you choose it. Signing in with Google discloses to Google that you are signing in to AxoGeo, and returns to us the account details described in §2. Google’s handling of that exchange is governed by its own privacy policy.
• Amazon Web Services — hosting, content delivery, storage of saved and shared graphs, and analytics ingestion.
• Your AI model provider, if you choose to use AI features with your own key. Your prompts are governed by that provider’s privacy policy, not this one.
• Google Fonts — the editor loads a webfont from Google’s content delivery network, which necessarily discloses your IP address to Google when the font is fetched.

5. How we use information

To operate and secure the Service, to authenticate you, to provide paid features to subscribers, to diagnose faults, to understand aggregate usage so we can improve the product, and to respond to you when you contact us.

We do not sell personal information, and we do not use your graphs or prompts to train machine-learning models.

6. Sharing and publishing

Creating a share link publishes that graph: anyone with the link can view and import it, and links are immutable. Do not share anything you wish to keep private.

7. Retention

Account data is kept while your account exists and for a short period afterwards. Analytics and logs are kept for a limited period for operational and security purposes. Published shares persist until removed on request.

8. Your rights

Depending on where you live — including under the GDPR in the EU and UK, and the CCPA in California — you may have the right to access, correct, export or delete your personal information, and to object to certain processing. Contact us and we will act on reasonable requests. We do not discriminate against anyone for exercising these rights.

9. International transfers

We operate from the United States and our infrastructure is hosted there. If you use the Service from elsewhere, your information is transferred to and processed in the United States.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes

We will update this page when our practices change, with a revised effective date.

12. Contact

Privacy questions or requests: privacy@axogeo.com.