Privacy Policy.

Best Data Viz is operated by S-Tier Analytics LLC ("we," "us"). We are the data controller for any personal data processed through this site. To reach us about privacy, email davis.townsend@s-tier-analytics.com.

We try to collect as little as possible. The categories are:

• The file you upload or paste (CSV, TSV, JSON, or sample data). Used only to generate charts and render previews.
• Your email address, if you give it to us on sign-up or join the waitlist.
• Basic request metadata - IP address, user agent, timestamps - captured by our hosting and error-tracking tools.
• A small number of first-party cookies / localStorage entries for theme preference, last dataset, and credit accounting.
• Payment information, handled by Paddle on their own infrastructure. We never see full card details.

Uploaded datasets: processed in your browser whenever possible; sent to our AI provider only for the generation request, and never stored on our servers beyond the request lifecycle. Any cached artifacts are purged within 24 hours.

Account email + credit balance: kept for the life of the account, plus a reasonable grace period after deletion for tax and dispute reasons (typically 90 days).

Request logs: retained for up to 30 days for debugging and abuse prevention, then rotated.

• Contract: to provide the service you signed up for (generation, exports, account management).
• Legitimate interest: to prevent abuse, keep the service up, improve product quality. We weigh this against your interests, and you can object.
• Consent: for optional analytics or marketing emails, where applicable. You can withdraw consent at any time.

We use a small set of vendors to run the service. They are bound by data processing agreements and only see what they need:

• Vercel - hosting, edge delivery, page-view analytics, and Core Web Vitals (Speed Insights). Vercel Analytics does not use cookies and does not collect cross-site identifiers.
• Anthropic / OpenAI - the AI model that ranks chart recommendations. The prompt includes a summary of your data (column names and types, small aggregates), not the full dataset.
• Supabase - application database for accounts, credits, and audit logs.
• Paddle - payment processing, tax, and invoicing (merchant of record).
• Clerk (if configured) - authentication.
• Sentry - error and performance monitoring. Receives crash diagnostics (stack traces, browser version, the URL where the error fired). We scrub email addresses and any uploaded data before send.

If we add a new sub-processor we will update this page before they start processing your data.

If you are in the EU, UK, or a jurisdiction with comparable rights, you can ask us to access, correct, delete, or port your data, and you can object to certain processing or withdraw consent. Email davis.townsend@s-tier-analytics.com and we will respond within 30 days. If we get it wrong you can complain to your local data protection authority.

California residents have the same access, deletion, and correction rights under the CCPA/CPRA, plus the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, but the request channel is the same email above.

Our vendors operate in the US and EU. Where we transfer data from the EEA/UK to the US, we rely on the EU-US Data Privacy Framework, Standard Contractual Clauses, or equivalent safeguards.

We use a small number of first-party cookies and localStorage entries - none for cross-site tracking. No third-party advertising cookies are set.

If we change anything material, we will update the date at the top and, for account holders, email the change. The current version is dated May 4, 2026.