Privacy Policy

Plot by Shapes. Privacy Policy

This privacy policy explains how Plot by Shapes (operated by We Are Shapes Limited, company number 14881487) collects, uses and protects your personal data when you use plotkit.io and app.plotkit.io.

Who we are

We Are Shapes Limited ("Shapes", "we", "us") operates Plot at plotkit.io. Our registered office is: The Buttery, Highland Court Farm, Bridge, Canterbury, Kent, CT4 5HW.

For data protection queries: hello@shapes.team

What data we collect

When you use Plot we may collect:

• Name, email address and company details (on signup or demo request)
• Firm name and website URL
• Content you upload or paste to train your brand voice
• Content you generate using Plot (stored in your account)
• Usage data and feature interactions (for improving the product)
• Payment information (processed by Stripe. We do not store card details)
• IP address and browser information (standard server logs)

How we use your data

We use your data to:

• Provide and improve the Plot platform
• Process your subscription via Stripe
• Send transactional emails (account verification, trial reminders, billing notifications) via Brevo
• Send you marketing communications where you have given consent
• Comply with legal obligations

Legal basis for processing

• Contract performance: to deliver the Plot service you subscribe to
• Legitimate interests: to improve the product and prevent fraud
• Consent: for marketing communications (you can withdraw at any time)
• Legal obligation: where required by law

Data storage

Your data is stored securely using:

• Supabase (database and file storage). EU data centres
• Stripe. Payment processing
• Brevo. Email delivery
• Anthropic. AI processing of content you generate, including strategy, planning and written content (subject to Anthropic's data policies)
• OpenAI. Transcription of voice recordings made using Record a Plot. Audio is not retained by Plot, only the text transcript. Subject to OpenAI's data policies
• fal.ai. AI image generation from your brand context
• Firecrawl. Scans website content you provide to build your Brand Intelligence profile
• Canva, LinkedIn, Xero, Mailchimp, Google Analytics. Where you choose to connect these accounts, Plot exchanges data with them to provide the connected feature. See Settings → Connected Accounts for what each connection does
• DataForSEO, Pexels, Cloudinary. Used to power specific tools (SEO analysis, stock imagery, image hosting)

Voice recordings

If you record a voice note using Record a Plot, the audio itself is transcribed and then discarded, it is not stored by Plot. Only the resulting text transcript, along with any summary and knowledge points generated from it, is saved to your account. You can review, edit or delete this content at any time, or request its removal by emailing hello@shapes.team

Data retention

We retain your account data for as long as your account is active. If you delete your account we will delete your personal data within 30 days, except where we are required to retain it by law.

Your rights (UK GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights email hello@shapes.team

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email.