Privacy Policy

About this policy

SciFigure AI provides scientific illustration, conversational figure creation and editing, and data visualization at scifigure.org. This policy explains how we handle information when you browse the website, create an account, upload materials, use our tools, or make a purchase. Read it together with our Terms of Service.

For privacy questions or requests, contact support@scifigure.org.

Information we handle

• Account and authentication: your name, email address, profile image where provided, account identifiers, and session information. If you choose a third-party sign-in option, we receive the profile information it supplies for authentication, not your password for that provider.
• Research inputs and outputs: prompts, conversation messages, reference images, uploaded datasets such as CSV or Excel files, chart settings, generated figures, output links, and task status or error details. These are used to fulfill requests and provide conversation and generation history.
• Orders and credits: purchase and subscription records, payment status, transaction identifiers, credit grants, usage, expiration, and adjustments. The payment provider shown at checkout handles payment credentials; we do not store full payment-card numbers.
• Technical information: browser and device information, network identifiers such as IP addresses, request times, usage events, and logs needed to operate and protect the service.
• Support correspondence: messages and attachments you send us, including information needed to investigate a payment or generation issue. Do not send passwords, secret keys, or full card details.

How information is used

We use information to authenticate accounts, process requests, deliver and recover results, maintain history, administer paid access and credits, answer support requests, diagnose errors, prevent abuse, and comply with applicable obligations. Operational information helps us improve reliability.

Where applicable law requires a legal basis, processing may rely on providing the service you request, legal obligations, legitimate interests in operating and securing the service where permitted, or consent where required. Contact us about a particular use or to withdraw consent where that is the applicable basis.

AI processing and research confidentiality

Creating or editing a figure may require sending relevant prompts, conversation context, reference images, data, and settings to AI service providers, including Kie and the underlying providers used for the selected feature. Hosting and storage services also process files needed to deliver results. Providers have their own applicable terms, retention practices, and policies; this policy does not promise zero retention or no model training by every third party.

Upload only material you have permission to share for this processing. Remove patient identifiers, personal information about research participants, confidential credentials, and other unnecessary sensitive information. Check your institution's requirements before submitting unpublished or restricted research.

Files and results may be delivered using accessible URLs. Anyone who obtains such a link may be able to view the file; treat these links as confidential. A login-protected history page does not by itself make each file URL access-controlled.

Sharing information

We do not sell personal information. We share information as necessary with providers of AI processing, authentication, payment processing, hosting, storage, security, and support communications. For example, payment processing may involve Stripe, and site hosting or storage may involve Cloudflare. The actual processing chain depends on the feature and configuration in use.

Support email is forwarded to our support inbox for handling. Information may also be disclosed to comply with lawful requests, investigate fraud or abuse, or protect rights and safety.

Cookies and browser storage

Cookies and browser storage support sign-in, language preferences, interface state, and session behavior. Browser controls let you remove or restrict this storage, which may sign you out or reset preferences. This does not delete server-side history or payment records. Where non-essential tracking requires consent, that requirement applies separately from essential service storage.

Retention and deletion

We retain information as reasonably needed to provide the service, preserve history and paid entitlements, resolve disputes, maintain security, and meet legal obligations. Retention needs differ by category. We do not promise indefinite output storage or a universal automatic deletion period; download important results.

Request account or content deletion by emailing support. We may verify your identity and retain records required for billing, disputes, security, or law. Removing data from active systems may not immediately remove backups or provider-held copies; contact us about the applicable process.

Security, international processing, and your rights

We use reasonable safeguards, including access controls and encrypted web connections, but cannot guarantee absolute security. Service providers may process information in countries with different privacy laws. Where required, applicable safeguards for international transfers must be observed.

Depending on applicable law, you may request access, correction, deletion, a copy of your data, restriction of processing, or objection to processing, and may complain to a relevant authority. Send requests to support@scifigure.org. Rights may be subject to identity verification and legal exceptions.

Children and updates

The service is not directed to children under 13 or below the applicable minimum age. Contact us if a child has submitted information without required authorization.

We may update this policy as the service changes. The date above identifies this version; material changes will receive appropriate notice where required.