Plotwright

Legal

Privacy Policy

Last updated: 2 August 2026

Plotwright is designed so that project files remain in your browser unless you choose to export or send them. This policy explains what Furiga GmbH collects when you use the Plotwright website, hosted application, account, billing, AI and feedback services.

1. Controller

The controller is Furiga GmbH, Kettberg 31, 8049 Zürich, Switzerland, UID CHE-390.989.511. Privacy requests may be sent to [email protected].

2. Data we process

  • Account and security data: email address, password hash, account and trial dates, subscription status, sessions, security events, and optional two-factor or third-party sign-in identifiers. We never store your plaintext password.
  • Projects and analyses: recent projects and autosaves are stored in your browser's local storage. When you request an analysis in the hosted app, the necessary input values are sent over HTTPS to Plotwright's stateless computation service, processed for that request, and not stored as a cloud project or written to application logs.
  • AI assistant data: if you use the optional assistant, your prompt, selected project scope, tool results and conversation context are sent to the chosen AI provider. A bring-your-own OpenAI API key is stored in your browser and forwarded for the current request; Plotwright does not store it server-side. Managed AI also processes account and token-usage information for credit metering.
  • Billing data: Stripe processes payment details on its hosted pages. Plotwright receives customer and subscription identifiers, plan, payment status, invoice events and purchased AI-credit amounts, but not complete card details.
  • Feedback and diagnostics: feedback is sent only when you press Send after reviewing the payload. It can include your message, optional reply address, redacted diagnostics and, only if you explicitly select it, a project attachment that contains your data. A truncated hash of the network address is used to rate-limit feedback abuse.
  • Operational data: request metadata such as time, route, response status, user agent, network address and request identifier may appear in short-lived security and server logs. Request bodies and scientific values are not logged.
  • Research-outreach data: earlier research outreach used names, professional email addresses, institutions, research fields and publication references from public scientific literature, together with delivery, reply, bounce, open and opt-out state. Automated marketing to publication-derived contacts is disabled unless the consent required by applicable law can be demonstrated.
  • Optional website measurement: if you choose Allow on the website, Plotwright records the page path, known campaign tags, an optional referral identifier, referring page, user agent, a random first-party visitor identifier and a truncated hash of the network address. This helps us understand which scientific resources lead to genuine product use. We do not send arbitrary URL parameters, URL fragments, form values or project data with this event.
  • Crash reports and usage counts: early-access builds enable scrubbed crash reports and anonymous feature counts by default. Crash reports contain error text, stack information, app version, platform and limited redacted breadcrumbs, not project values. Usage reports contain day-bucketed event names and counts without an account or device identifier. Both can be disabled at any time in Preferences.
  • Updates: the app checks the release feed and sends an anonymous, day-bucketed ping containing app version and platform so we can measure active versions. No installation identifier is included.

3. Why we process data

We process data to provide and secure accounts, perform requested computations, deliver optional AI and support features, administer trials and subscriptions, prevent abuse, diagnose failures, improve Plotwright, meet accounting and legal obligations, and communicate service-related information. Where the EU/EEA GDPR applies, our bases are performance of a contract, legitimate interests in operating and securing the service, consent for optional actions and direct marketing where required, and compliance with legal obligations. We retain suppression records as necessary to honour objections and avoid contacting the same address again.

4. Cookies and browser storage

Plotwright uses a secure session cookie for authentication. If you allow optional website measurement, a first-party consent cookie records that choice and a random first-party visitor cookie distinguishes repeat visits; declining is also remembered so the prompt stays dismissed. Browser local storage holds project autosaves and recent projects, display preferences, telemetry choices, update state and, if you choose bring-your-own AI, the API key. Anyone with access to your browser profile may be able to access locally stored information. Plotwright does not use advertising cookies or cross-site advertising trackers.

5. Recipients and international transfers

We disclose data only as needed to operate the service, including to:

  • Cloudflare for DNS, content delivery, network security and tunnel access;
  • Google for transactional email and, if selected, Google sign-in;
  • Stripe for checkout, subscription administration, invoices and fraud prevention;
  • OpenAI for assistant requests when you enable an OpenAI-backed AI mode; and
  • GitHub or another sign-in provider if you explicitly select that provider.

These providers may process data in Switzerland, the EEA, the United Kingdom, the United States and other countries in which they maintain infrastructure. Where a destination does not provide an adequate level of protection, we rely on recognised safeguards such as contractual data-protection clauses or an applicable legal exception. We may also disclose information when required by law or to protect users, Furiga GmbH or the public.

6. Retention and deletion

  • Browser-stored projects remain until you remove them or clear site data.
  • Hosted computation inputs are retained only for the duration of the request.
  • Account data is kept while the account is active. Account deletion revokes sessions, removes the password and email address, and leaves an anonymised account tombstone. Billing identifiers, transaction records and audit entries may remain where required for accounting, fraud prevention or legal claims.
  • Research-outreach prospect records are periodically reviewed and deleted when no longer needed. Minimal suppression records may be retained to ensure that an address that objected, unsubscribed or bounced is not contacted again.
  • Feedback and optional attachments are retained while reasonably needed to respond, investigate and improve the product, then deleted or anonymised. Operational logs are retained for a limited period appropriate to security and troubleshooting.
  • Anonymous aggregate counters may be retained because they cannot identify a user.

7. Security

We use HTTPS, hashed credentials and tokens, secure session cookies, access controls, payload limits, redaction and rate limiting. No online service can guarantee absolute security. You are responsible for securing your account, browser profile, exported project files and any API key stored in your browser.

8. Your choices and rights

You can change crash-report and usage-count settings in Preferences, disconnect an AI key, clear local browser data, or delete your account from the account page. Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability of your personal data, and withdraw consent without affecting earlier processing. Contact us at [email protected]. You may also complain to the Swiss Federal Data Protection and Information Commissioner or your local supervisory authority.

9. Research and sensitive data

Plotwright is a general research tool and is not designed as a repository for directly identifiable patient data or regulated clinical records. Do not submit personal, health, confidential or third-party data unless you have authority to process it and have assessed whether Plotwright is appropriate for that use.

10. Changes and contact

We may update this policy as the service changes. The date above identifies the current version; material changes will be communicated through the service or by email where appropriate. Questions may be sent to [email protected].