Privacy Policy
This policy explains what data Grapher handles, why, and what you can do about it. The controller is Matvii Oshkalo, a sole proprietor (FOP) registered in Ukraine (registration number 3962314831), trading as Solair Motion, 4 Regeneratorna St., Kyiv, Ukraine. Contact: solairmotion@gmail.com.
1. The short version
- We keep what we need to run your account and count credits: your email, your usage, and the text of your commands.
- Screenshots you attach are sent to our AI provider to process the command. We do not store them.
- Audio for captions is transcribed on our own server and deleted right after.
- We do not sell your data, do not use it for advertising, and do not use your content to train AI models.
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account: email, password (stored only as a one-way hash), sign-in sessions, when you accepted these terms | To give you an account and keep it secure | Contract |
| Credits: balance, every operation with its type, credits charged, status, time, and our cost of running it | To charge credits correctly, refund failed operations, and set fair prices | Contract; legitimate interest |
| The text of your commands, and a technical log of each operation (which tools ran, their settings, layer names, errors, and code that failed) | To run the command, find and fix errors, and improve quality | Contract; legitimate interest |
| Saved macros and saved brands (website address, colors, font names, logo) | Features you choose to use | Contract |
| Billing: name, email, country, subscription status (from our payment reseller) | Subscriptions, invoices, taxes | Contract; legal obligation |
| Invite links: which account's link you arrived through (a cookie on grapher.online for up to 60 days), and for the inviter's statistics a count of visits stored with a daily-changing one-way hash of the IP address, never the address itself | To credit the person who invited you and run the referral and partner programs; to stop self-referrals (we compare the computers that connect the panel) | Legitimate interest; contract |
| Partners: payout details (PayPal or Wise), what you told us in your application, commissions and payouts | To run the partner program and pay you | Contract; legal obligation |
| Server logs: IP address and request times | Security, abuse prevention, limits on sign-in attempts | Legitimate interest |
We do not store the screenshots you attach, the renders the panel sends back to the AI, or your audio. Your After Effects project stays on your computer; the panel sends only what a command needs (for example a short summary of the active composition and the selected layers).
3. Who processes data for us
- Anthropic (AI provider, USA): command text, attached images, and project details needed for the command are sent to Anthropic's API to generate the result. Under Anthropic's commercial terms this data is not used to train its models, and it is kept only for a limited period for safety and abuse monitoring, as described in Anthropic's policies.
- Hetzner Online GmbH (Germany; servers in Finland, EU): runs our server and stores our database.
- Paddle.com Market Ltd (UK): our reseller and Merchant of Record. It processes your payment details under its own privacy policy; we never see your card number.
- Websites you point the Brand feature at: our server opens the public page to read its colors, fonts and logo.
Data is processed in Ukraine and in the countries of the providers above. For users in the EU/EEA and the UK, transfers outside these regions (for example to Anthropic in the USA) are covered by the EU Standard Contractual Clauses or an adequacy decision.
4. How long we keep it
- Account data: while your account exists. When you ask us to delete it, we delete it within 30 days.
- Command text and operation logs: 90 days, then deleted. After that we keep only the totals needed for billing (operation type, credits, our cost), without the command text.
- Billing records: as long as tax and accounting law requires (in Ukraine, at least 3 years).
- Conversations in the panel are kept in server memory for at most 30 minutes of inactivity, so follow-up commands work.
5. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit or object to its use, and to receive it in a portable format. Write to solairmotion@gmail.com from your account email. We answer within one month. You can also complain to the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua), which supervises personal data protection in Ukraine, or to the data protection authority of the country where you live (in the EU, your national supervisory authority).
6. Security
Passwords are stored only as salted one-way hashes. Sessions in the panel use random tokens; our database keeps only their fingerprints. Connections to our server are encrypted (HTTPS). Our AI key never leaves the server.
7. Cookies and tracking
The Grapher panel and these pages use no cookies, analytics or advertising trackers. Your sign-in is kept in the panel's own storage on your computer until you sign out.
8. Children
Grapher is not meant for anyone under 16, and we do not knowingly collect their data.
9. Changes
We will post updates here and tell you in the panel or by email about material changes before they take effect.