Your chart data stays under your control.

PlotLark stores account details, saved chart configurations, API-key hashes, and aggregate request counts so the cloud workspace and API can operate. Raw API keys are shown once and are never stored.

Public and private use

The frictionless studio can be used without an account. A saved chart receives an opaque embed token only when public embedding is enabled. Anyone with that full URL can render the chart, so treat it like an unlisted link. Revoking public access makes it return 404.

Service providers

Firebase provides authentication and database storage, Upstash supports coordinated abuse limits, Resend delivers support email, Vercel hosts the service and anonymous Web Analytics, and Sentry records production errors without replay or performance tracing.

Retention and deletion

Account export is available in the product. Account deletion removes saved charts, public render records, API keys, usage counters, and the profile. Infrastructure logs may remain for short operational retention periods.