Privacy Policy
Last updated: 5 October 2026
Who we are
chartlink.app is operated by Oscar Österberg, sole proprietor, Sweden. Contact: support@chartlink.app.
What we store
Your account: your email address and, if you give one, your name. Signing in is by a link sent to that address or with Google — there is no password. With Google we receive your name, email address and profile picture, and nothing else from your Google account. Your workspaces: their members and roles, your brands, and the charts, data and settings you or your AI agents create. Don't put personal data in chart data; it isn't designed for it. API keys for your agents are stored only as hashes. Usage: events (which workspace did what, when), a record of each AI assistant request (when, which model, how many tokens and what it cost — not what was said), and standard server logs including IP addresses, kept for operations and abuse prevention. Published charts and their view counts are public by design. We look at a workspace's brands and charts, drafts included, only to run the service: support you ask for, fixing errors, and understanding which features are used.
Cookies
One: when you sign in to the studio, a session cookie keeps you signed in (for up to 30 days). The studio also remembers small preferences in your browser, such as the chart shape you last chose. No advertising or tracking cookies. Published charts and embeds set no cookies. We use Vercel's cookieless, aggregate web analytics (page counts, referrers, countries — no cross-site tracking, no personal profiles). On the front page we also count what is used — which chart, style or shape is picked, the buttons and links clicked, how long the page stays open — under a key made from the day, your IP address and browser that changes every day, so a visit can be counted but not followed from one day to the next. No cookie is set for it.
The AI assistant
When you use the assistant (or paste data for it to tidy), what you send — your message, any screenshot or web page you share, and the brand settings and chart data it works on — goes to the AI model that answers, through OpenRouter, which passes it to the model's provider (such as OpenAI, or Anthropic directly or through a cloud such as AWS). We ask OpenRouter to use only providers that don't keep prompts for training. We do not keep the conversation. When you try a brand from a screenshot on the front page, we keep the brand settings it made and a fingerprint of the screenshot — not the screenshot — so the same screenshot gives the same brand at once. Don't share anything with the assistant that you wouldn't put in a chart.
What we don't do
No advertising, no sale of data, no profiles. We never see card numbers or payment details — payments are processed entirely by Paddle.com as merchant of record (see Paddle's privacy policy).
Who processes data for us
Vercel (hosting and CDN), Neon (database), Resend (sign-in emails), Google (if you sign in with it), OpenRouter and the AI model providers it routes to (the assistant), and Paddle (payments). They process data on our behalf under their own security and privacy terms.
Your rights
You can ask for a copy of your data or for your account and workspaces to be deleted at any time: email support@chartlink.app from the address you sign in with. EU/EEA users have the rights provided by the GDPR, including complaint to a supervisory authority (in Sweden: IMY).