This notice explains how Figurespace collects, uses and protects personal data.
1. Who we are
Figurespace is responsible for the personal data described in this notice. You can contact us at support@figurespace.app.
2. Information we collect
Account information
This may include your name, email address, profile information, account identifiers, sign-in method and information used to authenticate and secure your account.
Content and learning activity
This may include materials you upload or paste, extracted content, prompts, conversations, generated outputs, notes, answers, study activities, workspace structure and learning progress.
Technical and usage information
This may include IP address, device and browser information, timestamps, request and error logs, usage records, security events and other information needed to operate, protect and troubleshoot the service.
Billing information
This may include subscription status, plan details, transaction references and limited billing information received from our payment provider. We do not receive or store full payment card details.
Communications
We collect information you provide when you contact us, request support, report a problem or otherwise communicate with us.
3. How we use personal data
We use personal data to provide and personalise the service; process learning materials; generate AI-assisted content; save and synchronise work; authenticate users; manage plans, payments and usage limits; secure the service; prevent fraud and abuse; diagnose faults; improve performance; respond to communications; and comply with legal obligations.
4. Our lawful bases
Depending on the purpose, we process personal data because it is necessary to perform our contract with you, because we have legitimate interests in operating, improving and securing the service, because we must comply with a legal obligation, or because you have given consent.
Where we rely on consent, you may withdraw it at any time. This will not affect processing that took place before withdrawal.
5. AI processing
When you use AI-assisted features, we may send your prompt, relevant conversation context and selected material to specialist service providers so they can generate the requested output.
You should avoid uploading highly sensitive personal information unless it is genuinely necessary. Generated outputs and limited technical records may be retained to maintain continuity, measure usage, secure the service and diagnose failures.
6. Who we share data with
We share personal data only where reasonably necessary with service providers that support functions such as hosting, storage, authentication, communications, payments, security, support and AI processing.
We may also disclose information where required by law, to protect legal rights or safety, in connection with a business transaction, or with your direction or consent. We do not sell personal data.
7. International transfers
Some service providers may process personal data outside the United Kingdom. Where required, we use appropriate safeguards for international transfers, such as adequacy regulations or approved contractual protections.
8. Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this notice. Retention periods vary according to the type of information, the needs of the service, legal and accounting requirements, security considerations and the establishment or defence of legal claims.
Account and workspace information is generally retained while your account remains active. Some billing, security and legal records may be retained after account closure. Deleted information may remain in backups for a limited period before being overwritten.
9. Security
We use appropriate technical and organisational measures designed to protect personal data, including access controls, authentication, server-side authorisation, protected credentials and operational monitoring. No online service can guarantee absolute security.
10. Your rights
Depending on applicable law, you may have rights to access, correct, erase, restrict or object to the processing of your personal data, and to receive certain data in a portable form. You may also have the right to withdraw consent and to complain to a data protection authority.
To exercise a right, contact support@figurespace.app. We may need to verify your identity before acting on a request.
11. Account deletion
You can request closure of your account and deletion of associated personal data by contacting support@figurespace.app. We will delete or anonymise information that is no longer required, subject to legal, billing, security and backup obligations.
Cancelling a paid subscription does not automatically delete your account or its content.
12. Cookies and local storage
Figurespace uses cookies, browser storage and similar technologies where necessary to keep you signed in, maintain security, remember preferences, preserve drafts or workspace state, and provide core service functionality.
If we introduce non-essential analytics, advertising or similar technologies, we will update this notice and provide any consent controls required by law before using them.
13. Children
Figurespace is intended for users aged 13 and over. If you are under 18, a parent or guardian should review these terms and this notice with you where appropriate.
If you believe a child has provided personal data in circumstances that concern you, contact support@figurespace.app.
14. Complaints
Please contact support@figurespace.app first if you have a privacy concern. You may also complain to the data protection authority in your country. In the United Kingdom, this is the Information Commissioner’s Office.
15. Changes to this notice
We may update this notice to reflect changes to the service, our practices or applicable law. We will publish the revised notice with a new effective date and provide reasonable notice of material changes where appropriate.