Privacy Policy
Last updated: 7 November 2026
This policy explains what personal data Graph Tree (graph-tree.com, "we") collects, why, and what you can do about it. We collect as little as we can. The data controller is PULSE ADVISORY - FZCO, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates (trade licence no. 55486), contact support@graph-tree.com.
The short version
- The numbers and trees you build stay in your browser. We don't upload them to our servers.
- When you sign in, we receive your name, email address and an account identifier from Google, Microsoft or LinkedIn.
- Payments are handled by our payment provider. We never see your card details.
- We don't sell your data and we don't use advertising trackers.
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Name, email address and sign-in provider identifier | To create your account, recognise you when you come back and send you service emails (receipts, access changes) | Contract |
| Plan and access end date | To unlock Pro features for the period you paid for | Contract |
| Order details (plan, amount, country, date) | Accounting and tax obligations, refunds | Legal obligation |
| Pages visited and basic technical data (browser, country), without cookies | To understand how the site is used and fix problems | Legitimate interest |
What stays on your device
The tables you paste, your trees, their formatting and your saved files are stored in your browser's local storage on your own device. They are not sent to us. Clearing your browser data deletes them, so export anything you want to keep.
Who processes your data for us
- Supabase: account and sign-in data, stored in Singapore.
- Cloudflare: website hosting and cookieless visit statistics.
- Paddle: checkout, payment and invoicing, acting as merchant of record. Paddle has its own privacy policy for the data you give it at checkout.
- Google, Microsoft, LinkedIn: only when you choose them to sign in. We ask for your basic profile and email, and we never post on your behalf.
Some of these providers process data outside your country, including outside the European Economic Area. They do so under standard contractual clauses or equivalent safeguards.
How long we keep it
We keep your account data while your account exists. If you ask us to delete your account, we delete it within 30 days, except order records we must keep for tax and accounting purposes, usually up to 10 years.
Cookies and local storage
We use your browser's storage only for things the site needs to work: keeping you signed in and remembering your trees and settings. We don't use advertising or tracking cookies, so there is no cookie banner.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, or object to how we use it. Email support@graph-tree.com from the address linked to your account and we'll reply within 30 days. If you're in the EU or UK, you can also complain to your local data protection authority.
Changes
If we change this policy in a way that matters, we'll update the date above and tell signed-in users by email.
Contact
Questions about privacy: support@graph-tree.com.