This Privacy Policy explains what personal data PruneChart (“we”, “us”) collects when you use our value stream mapping application, why we collect it, who we share it with, and the choices and rights you have. PruneChart is operated in the United Kingdom and this policy is written to meet UK GDPR.
Information we collect
- Account information. Name and email address, collected when you create an account or sign in (via our third-party authentication provider). We use this to identify your account. Lawful basis: performance of a contract with you.
- Payment information. Once billing is live, subscription payments are handled by our third-party payment provider: your email, payment method and billing history are stored by that provider, not on our own servers. Lawful basis: performance of a contract with you.
- Diagram content. The value stream maps you create — nodes, edges, data fields, titles and folders — stored in our database, hosted by a third-party service provider, so you can return to them. This may include whatever you type into your maps. Lawful basis: performance of a contract with you.
- Usage & device data. IP address and basic, aggregate analytics on page visits, used to operate and secure the service. We do not currently use a third-party analytics provider. Lawful basis: legitimate interest in keeping the service reliable and secure.
How we use your information
- To provide the application — saving, loading and sharing your maps.
- To authenticate you and enforce access controls on shared diagrams.
- To bill you for paid plans, once billing is live.
- To secure the service, prevent abuse, and diagnose problems.
Who we share data with
We don't sell your personal data. We share it only with the third-party service providers needed to run the service:
- Authentication provider — when you sign in, our third-party authentication provider verifies you and passes us your name and email.
- Hosting & database provider — a third-party service provider that stores your account, diagram content and session data.
- Payment provider — a third-party service provider, once billing launches, that stores your payment method and billing history.
Where your data is stored
Account and diagram data is stored with our third-party hosting provider in the EU. Access to each diagram is enforced at the database with row-level security: a diagram is readable or editable only by its owner, people it has been explicitly shared with, or — for “anyone with the link” diagrams — signed-in users who have the link. A leaked URL alone does not grant access.
Sharing diagrams with other users
When you share a diagram, the email addresses you grant access to are stored so we can match them at sign-in.
Data retention & deletion
We retain your diagrams and account data for as long as your account is active. If you delete an individual map, it's removed immediately. If you delete your account (or ask us to), we delete your account data and diagrams; our payment provider retains billing records separately for as long as it's legally required to.
Your rights under UK GDPR
You have the right to access the personal data we hold about you, ask us to correct it, ask us to erase it, and object to certain processing. To exercise any of these rights, email support@prunechart.com and we'll respond within one month. If you're unhappy with how we've handled your data, you can also complain to the UK Information Commissioner's Office (ico.org.uk).
Contact
PruneChart
prunechart.com
Email support@prunechart.com
Questions about this policy? Email support@prunechart.com.