Hue Draw
Privacy
In force from .
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT.
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase, through Zoho, from support@chromaticcoherence.ai | As Supabase keeps them; a copy in our sent mail for six years |
| An organisation: its name, its members' emails and display names | To run the plan it holds: our contract with the organisation, for the member who bought it; for every other member, our legitimate interest in running the organisation's plan, to which you may object | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and plan it was for | To sell and account for the plan: our contract with the organisation, and our legal duty to keep business records | Yes, to buy | Stripe, and the plan's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the plan terms and confirm your order: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
| Visits to the site's pages: the page's address without anything after ? or #, the page that linked to it, and your country, browser, operating system and device. No cookie is set and nothing is stored in your browser | To see which pages are read, and make them better: our legitimate interest. Say no, free, on the cookies page, or by your browser sending Global Privacy Control | No | Vercel | The figure Vercel makes from your request to tell one visit from another: 24 hours. The counts: 12 months on our plan, and as long after as Vercel keeps them |
| Boards you save: their names, the rows you put in them, their charts and theme, and who you share them with | To keep your boards and show them to whoever you share them with: our contract with you | No | Supabase | Until you delete a board, or your account is closed or erased |
| Charts you save: their names, their data, options and theme, and who you share them with | To keep your charts and show them to whoever you share them with: our contract with you | No | Supabase | Until you delete a chart, or your account is closed or erased |
3. What we do not do
No advertising, no profiling, no automated decisions and no script from another site: the one that counts visits is served from huedraw.com itself. What you draw in Chart Studio stays in your browser until you save it as a chart or a board.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, plans and invitations; the boards and charts you save; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account; keeps their request logs; counts visits to the site's pages | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, the emails that confirm a sign-up and reset a password, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page once you operate no open organisation and your own organisation holds no live or ending plan; an organisation's operator closes it there once its plan has ended. Your sign-in is then deleted and what you hold, your boards and charts among it, is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. Plans are sold to organisations and to people buying for their work.
Changes and earlier versions
This version is in force from . It names Chart Studio alone: Make your own is part of it now. It says what we keep when you save a chart in Chart Studio, and who you share it with. Each earlier version is kept below, whole.
The version in force from
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase, through Zoho, from support@chromaticcoherence.ai | As Supabase keeps them; a copy in our sent mail for six years |
| An organisation: its name, its members' emails and display names | To run the plan it holds: our contract with the organisation, for the member who bought it; for every other member, our legitimate interest in running the organisation's plan, to which you may object | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and plan it was for | To sell and account for the plan: our contract with the organisation, and our legal duty to keep business records | Yes, to buy | Stripe, and the plan's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the plan terms and confirm your order: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
| Visits to the site's pages: the page's address without anything after ? or #, the page that linked to it, and your country, browser, operating system and device. No cookie is set and nothing is stored in your browser | To see which pages are read, and make them better: our legitimate interest. Say no, free, on the cookies page, or by your browser sending Global Privacy Control | No | Vercel | The figure Vercel makes from your request to tell one visit from another: 24 hours. The counts: 12 months on our plan, and as long after as Vercel keeps them |
| Boards you save: their names, the rows you put in them, their charts and theme, and who you share them with | To keep your boards and show them to whoever you share them with: our contract with you | No | Supabase | Until you delete a board, or your account is closed or erased |
3. What we do not do
No advertising, no profiling, no automated decisions and no script from another site: the one that counts visits is served from huedraw.com itself. What you draw in Chart Studio and Make your own stays in your browser until you save it as a board.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, plans and invitations; the boards you save; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account; keeps their request logs; counts visits to the site's pages | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, the emails that confirm a sign-up and reset a password, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page once you operate no open organisation and your own organisation holds no live or ending plan; an organisation's operator closes it there once its plan has ended. Your sign-in is then deleted and what you hold, your boards among it, is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. Plans are sold to organisations and to people buying for their work.
The version in force from
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase | As Supabase keeps them |
| An organisation: its name, its members' emails and display names | To run the plan it holds: our contract with the organisation, for the member who bought it; for every other member, our legitimate interest in running the organisation's plan, to which you may object | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and plan it was for | To sell and account for the plan: our contract with the organisation, and our legal duty to keep business records | Yes, to buy | Stripe, and the plan's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the plan terms and confirm your order: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
| Visits to the site's pages: the page's address without anything after ? or #, the page that linked to it, and your country, browser, operating system and device. No cookie is set and nothing is stored in your browser | To see which pages are read, and make them better: our legitimate interest. Say no, free, on the cookies page, or by your browser sending Global Privacy Control | No | Vercel | The figure Vercel makes from your request to tell one visit from another: 24 hours. The counts: 12 months on our plan, and as long after as Vercel keeps them |
| Boards you save: their names, the rows you put in them, their charts and theme, and who you share them with | To keep your boards and show them to whoever you share them with: our contract with you | No | Supabase | Until you delete a board, or your account is closed or erased |
3. What we do not do
No advertising, no profiling, no automated decisions and no script from another site: the one that counts visits is served from huedraw.com itself. What you draw in Chart Studio and Make your own stays in your browser until you save it as a board.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, plans and invitations; the boards you save; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account; keeps their request logs; counts visits to the site's pages | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page once you operate no open organisation and your own organisation holds no live or ending plan; an organisation's operator closes it there once its plan has ended. Your sign-in is then deleted and what you hold, your boards among it, is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. Plans are sold to organisations and to people buying for their work.
The version in force from
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase | As Supabase keeps them |
| An organisation: its name, its members' emails and display names | To run the licence it holds: our contract with the organisation, for the member who bought it; for every other member, our legitimate interest in running the organisation's licence, to which you may object | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation's licence. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and seat it was for | To sell and account for the licence: our contract with you, and our legal duty to keep business records | Yes, to buy | Stripe, and the licence's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the terms and your right to cancel: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Your licence file: your name (your organisation's, or "Sole trader"), developers, dates, an opaque purchase id | It is the licence; anyone with your product can read it, as the buy step says | — | You, and a copy on your account | Yours for good; our copy until your organisation closes |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
| Visits to the site's pages: the page's address without anything after ? or #, the page that linked to it, and your country, browser, operating system and device. No cookie is set and nothing is stored in your browser | To see which pages are read, and make them better: our legitimate interest. Say no, free, on the cookies page, or by your browser sending Global Privacy Control | No | Vercel | The figure Vercel makes from your request to tell one visit from another: 24 hours. The counts: 12 months on our plan, and as long after as Vercel keeps them |
| Boards you save: their names, the rows you put in them, their charts and theme, and who you share them with | To keep your boards and show them to whoever you share them with: our contract with you | No | Supabase | Until you delete a board, or your account is closed or erased |
3. What we do not do
No advertising, no profiling, no automated decisions and no script from another site: the one that counts visits is served from huedraw.com itself. What you draw in Chart Studio and Make your own stays in your browser until you save it as a board.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, licences and invitations; the boards you save; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account; keeps their request logs; counts visits to the site's pages | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page, once you operate no open organisation and hold no live or ending licence. Your sign-in is then deleted and what you hold is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced, its licence file copy cleared and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. A licence is sold to people aged 18 or over.
The version in force from
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase | As Supabase keeps them |
| An organisation: its name, its members' emails and display names | To run the licence it holds: our contract with the organisation, for the member who bought it; for every other member, our legitimate interest in running the organisation's licence, to which you may object | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation's licence. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and seat it was for | To sell and account for the licence: our contract with you, and our legal duty to keep business records | Yes, to buy | Stripe, and the licence's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the terms and your right to cancel: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Your licence file: your name (your organisation's, or "Sole trader"), developers, dates, an opaque purchase id | It is the licence; anyone with your product can read it, as the buy step says | — | You, and a copy on your account | Yours for good; our copy until your organisation closes |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
| Visits to the site's pages: the page's address without anything after ? or #, the page that linked to it, and your country, browser, operating system and device. No cookie is set and nothing is stored in your browser | To see which pages are read, and make them better: our legitimate interest. Say no, free, on the cookies page, or by your browser sending Global Privacy Control | No | Vercel | The figure Vercel makes from your request to tell one visit from another: 24 hours. The counts: 12 months on our plan, and as long after as Vercel keeps them |
3. What we do not do
No advertising, no profiling, no automated decisions and no script from another site: the one that counts visits is served from huedraw.com itself. What you draw in Chart Studio and Make your own stays in your browser.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, licences and invitations; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account; keeps their request logs; counts visits to the site's pages | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page, once you operate no open organisation and hold no live or ending licence. Your sign-in is then deleted and what you hold is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced, its licence file copy cleared and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. A licence is sold to people aged 18 or over.
The version in force from
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase | As Supabase keeps them |
| An organisation: its name, its members' emails and display names | To run the licence it holds: our contract with it | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation's licence. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and seat it was for | To sell and account for the licence: our contract with you, and our legal duty to keep business records | Yes, to buy | Stripe, and the licence's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the terms and your right to cancel: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Your licence file: your name (your organisation's, or "Sole trader"), developers, dates, an opaque purchase id | It is the licence; anyone with your product can read it, as the buy step says | — | You, and a copy on your account | Yours for good; our copy until your organisation closes |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
3. What we do not do
No analytics, no advertising, no third-party scripts, no profiling and no automated decisions. What you draw in Chart Studio and Make your own stays in your browser.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, licences and invitations; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account, and keeps their request logs | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page, once you operate no open organisation and hold no live or ending licence. Your sign-in is then deleted and what you hold is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced, its licence file copy cleared and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. A licence is sold to people aged 18 or over.
The version in force from
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase | As Supabase keeps them |
| An organisation: its name, its members' emails and display names | To run the licence it holds: our contract with it | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation's licence. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and seat it was for | To sell and account for the licence: our contract with you, and our legal duty to keep business records | Yes, to buy | Stripe, and the licence's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the terms and your right to cancel: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Your licence file: your name (your organisation's, or "Sole trader"), developers, dates, an opaque purchase id | It is the licence; anyone with your product can read it, as the buy step says | — | You, and a copy on your account | Yours for good; our copy until your organisation closes |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
3. What we do not do
No analytics, no advertising, no third-party scripts, no profiling and no automated decisions. What you draw in Chart Studio and the Recipes page stays in your browser.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, licences and invitations; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account, and keeps their request logs | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page, once you operate no open organisation and hold no live or ending licence. Your sign-in is then deleted and what you hold is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced, its licence file copy cleared and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. A licence is sold to people aged 18 or over.
The version in force from
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase | As Supabase keeps them |
| An organisation: its name, its members' emails and display names | To run the licence it holds: our contract with it | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation's licence. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and seat it was for | To sell and account for the licence: our contract with you, and our legal duty to keep business records | Yes, to buy | Stripe, and the licence's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the terms and your right to cancel: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Your licence file: your name (your organisation's, or "Sole trader"), developers, dates, an opaque purchase id | It is the licence; anyone with your product can read it, as the buy step says | — | You, and a copy on your account | Yours for good; our copy until your organisation closes |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
3. What we do not do
No analytics, no advertising, no third-party scripts, no profiling and no automated decisions. What you draw in Chart Studio, the Recipes studio and the recipe builder stays in your browser.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, licences and invitations; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account, and keeps their request logs | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page, once you operate no open organisation and hold no live or ending licence. Your sign-in is then deleted and what you hold is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced, its licence file copy cleared and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. A licence is sold to people aged 18 or over.
The version in force from
1. Who is responsible
Hue Draw is run by Chromatic Coherence. Write to support@chromaticcoherence.ai. Not registered for VAT. Chromatic Coherence decides what is kept and why, and is responsible for it.
2. What we keep, why, and for how long
| What | Why, and on what basis | Must you give it? | Kept by | How long |
|---|---|---|---|---|
| Your account: email, display name and password (stored hashed), or the name and email Google gives when you sign in with Google | To run your account: our contract with you | The email and a password or Google sign-in, yes; the display name, no | Supabase | Until you close your account |
| The emails that confirm a sign-up and reset a password | To run your account: our contract with you | — | Sent by Supabase | As Supabase keeps them |
| An organisation: its name, its members' emails and display names | To run the licence it holds: our contract with it | A name, to found a team | Supabase | While the organisation is open; at closing its name is replaced |
| An invitation: the invitee's email and the name the inviter typed, given by the inviter, not by you | To let you join: our legitimate interest in running the organisation's licence. The inviter hands you the link; we send no email | — | Supabase | Deleted when you accept it, or 30 days after it expires, is declined or is revoked |
| A purchase: the billing name, email and address, the payment, the invoices, and which organisation, product and seat it was for | To sell and account for the licence: our contract with you, and our legal duty to keep business records | Yes, to buy | Stripe, and the licence's record in Supabase | 7 years after the organisation closes, then erased |
| The email confirming your purchase | To give you the terms and your right to cancel: a legal duty | — | Zoho | Six years |
| Which link brought a buyer: Power BI or Hue Charts | To know which channel sells: our legitimate interest | No | Stripe, and the organisation's record | As the purchase |
| Your licence file: your name (your organisation's, or "Sole trader"), developers, dates, an opaque purchase id | It is the licence; anyone with your product can read it, as the buy step says | — | You, and a copy on your account | Yours for good; our copy until your organisation closes |
| Emails you send to support | To answer them: our legitimate interest | No | Zoho | Six years |
| Requests to the site: your address, the time, the page and your browser | To run and secure the site: our legitimate interest | — | Vercel | As long as Vercel's logs on our plan keep them: one to thirty days |
3. What we do not do
No analytics, no advertising, no third-party scripts, no profiling and no automated decisions. What you draw in Chart Studio, MCP Studio and the recipe builder stays in your browser.
4. Who else handles it, and where
| Who | What | Where | How a transfer is safeguarded |
|---|---|---|---|
| Supabase | Accounts, organisations, licences and invitations; the emails that confirm a sign-up and reset a password | London (AWS eu-west-2); Supabase Pte. Ltd is in Singapore | The UK Addendum to the EU standard contractual clauses, in its data processing agreement |
| Stripe | Payments: it collects your email, billing address and card details at its checkout, and keeps its own records as a controller | Stripe's own locations | The UK addendum to the EU standard contractual clauses and the UK extension to the EU–US Data Privacy Framework, in its privacy policy |
| Vercel | Runs the site and our own API at api.chromaticcoherence.ai, which the site asks for your account, and keeps their request logs | Served from the United States (US East) | The UK international data transfer addendum with the standard contractual clauses, in its data processing agreement |
| Zoho | Support mail, and the email confirming a purchase | Zoho's United States data centre | The model contractual clauses its privacy policy names |
| Open-Meteo (OpenMeteo GmbH, Switzerland) | A city's latitude and longitude and your own key, from the Weather board's live data, sent from your browser to customer-api.open-meteo.com, never to us; it keeps request logs 90 days | Europe and North America | Open-Meteo's terms |
5. Closing an account
You can close your account from your account page, once you operate no open organisation and hold no live or ending licence. Your sign-in is then deleted and what you hold is erased. An organisation that ever paid is closed: its members are anonymised, its name is replaced, its licence file copy cleared and its invitations deleted; its billing record is kept 7 years and then erased. One that never paid is erased at once.
6. Your rights
You may ask for a copy of what we keep about you, and to correct it, erase it, restrict it, object to it or take it elsewhere. Write to support@chromaticcoherence.ai; we answer within a month.
7. Complaints
Write to support@chromaticcoherence.ai. We acknowledge a complaint within 30 days and answer it without undue delay. You may also complain to the Information Commission, at ico.org.uk, at any time.
8. Children
The site is for people at work. A licence is sold to people aged 18 or over.