Privacy Policy

Last updated: February 2026

Introduction

AnglinAI (“we,” “us,” or “our”) operates TheAccessibleOrgChart (the “Service”) at orgchart.theaccessible.org. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and handling your data transparently.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree with our practices, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

  • Account information: When you create an account, we collect your email address and, optionally, your name. Authentication is managed through Supabase, a third-party authentication provider.
  • Uploaded content: Org chart images (PNG, JPG, PDF) and CSV files you upload for processing. These are used solely to extract organizational data and generate accessible HTML outputs.
  • Payment information: When you purchase credits, payment details are collected and processed by Stripe. We do not store your full credit card number, CVC, or other sensitive payment data on our servers.
  • Support communications: Information you provide when contacting us at support@theaccessible.org.

1.2 Information Collected Automatically

  • Usage data: Pages visited, features used, timestamps, and interaction patterns within the Service.
  • Device and browser information: IP address, browser type and version, operating system, device type, and screen resolution.
  • Cookies and similar technologies: We use essential cookies for authentication and session management. See the Cookies section below for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and maintain the Service: Process uploads, generate org charts, manage your account, and deliver purchased credits.
  • Improve the Service: Analyze usage patterns to improve features, performance, and accessibility.
  • Communicate with you: Send account-related notifications, respond to support requests, and provide updates about the Service.
  • Process payments: Facilitate credit purchases and manage billing through Stripe.
  • Ensure security: Detect and prevent fraud, abuse, and unauthorized access.
  • Comply with legal obligations: Meet applicable legal requirements and respond to lawful requests.

3. Data Sharing and Third Parties

We do not sell your personal information. We share data only with the following categories of third-party service providers, and only to the extent necessary to operate the Service:

  • Supabase: Authentication and database services. Supabase processes your account credentials and stores organizational data on our behalf.
  • Stripe: Payment processing. Stripe receives your payment information directly and is subject to its own privacy policy.
  • Cloudflare: Hosting, content delivery, and object storage (Cloudflare Pages and R2). Cloudflare processes requests to serve the application and stores generated files.
  • AI providers (Anthropic, Google): Uploaded images may be sent to AI services for data extraction. These providers process the data under their respective data processing agreements and do not retain your content for training purposes.

We may also disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of AnglinAI, our users, or the public.

4. Cookies and Tracking Technologies

We use a minimal set of cookies, limited to what is necessary for the Service to function:

  • Authentication cookies: Managed by Supabase to maintain your session after login. These are essential and cannot be disabled without losing access to authenticated features.
  • Preference cookies: Store your selected settings (such as theme or template preferences) to improve your experience.

We do not use advertising cookies or third-party tracking pixels. We do not participate in cross-site tracking or ad networks.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods are as follows:

  • Account data: Retained until you request account deletion.
  • Uploaded images: Retained for processing and are available for re-extraction while your account is active. You may delete individual uploads at any time.
  • Generated outputs: Retained while your account is active. Shared links may expire based on configured expiration dates.
  • Payment records: Retained for seven (7) years for tax and accounting compliance.
  • Server logs: Automatically deleted after thirty (30) days.

Upon account deletion, we will remove your personal information and uploaded content within thirty (30) days, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to the processing of your personal data in certain circumstances.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@theaccessible.org. We will respond within thirty (30) days.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

  • Encryption of data in transit using TLS/SSL.
  • Encryption of stored data at rest where supported by our infrastructure providers.
  • Access controls limiting personnel access to personal data on a need-to-know basis.
  • Regular security reviews and dependency vulnerability scanning.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

8. Children’s Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@theaccessible.org.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. Our service providers (Supabase, Stripe, Cloudflare) operate globally. By using the Service, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your home country.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Service. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at support@theaccessible.org.

AnglinAI — Larry Anglin