Plotly
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- They say they do not sell or share your data.
- The documents do not say who can read your content.
Enterprise data-app platform: you own outputs, they say they do not sell data.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
The privacy page here is mostly headings, so it does not list every type of data they collect.
Read the exact line
Privacy policy
“This Privacy Policy describes how Plotly processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy”
Training
They use data to improve the product and usage telemetry to run the service.
Read the exact line
Terms of service
“Customer grants Plotly a worldwide, non-exclusive, license to use Data solely for the following purposes: (i) analytics and reporting; (ii) product and service development and improvements”
Sharing
They say they will not sell customer data; contractors may host it so the service can run.
Read the exact line
Terms of service
“Plotly will not sell, lease, or otherwise transfer Customer Data or Data to any third party for monetary or other valuable consideration.”
Kept
They say they keep customer data only as long as needed to provide the service, unless law requires longer.
Read the exact line
Terms of service
“Plotly will retain Customer Data only for as long as necessary to provide the Services and fulfill the purposes described herein, unless a longer retention period is required by applicable law.”
Controls
You must back up your own data; these documents do not describe an in-app delete button.
Read the exact line
Terms of service
“Customer is solely responsible for selecting and implementing procedures, processes, and controls regarding the access, use, and transmission of Customer Data to Plotly Services, and for ensuring the backup and recovery of any data.”
Fine print
Paid plans auto-renew with no refunds; you them.
Read the exact line
Terms of service
“All paid plans are automatically renewed for successive monthly or annual periods, as applicable, unless you cancel your subscription before the renewal date.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Cancel before the renewal date
Cancel your subscription before the renewal date (terms section 3.c Renewals)
Do not upload sensitive data
Terms section 2(d) Restrictions — no PHI, biometrics, IDs, payment data
Back up your own customer data
Terms: Customer is solely responsible for backup and recovery of any data
Contact legal for notices
legal@plotly.com
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If you pay, you generally cannot get money back for time you do not use.
Read the exact line
Terms of service
“All paid plan purchases are final, and no refund will be given for unused portions of your plan.”
For example, if you cancel a yearly plan after one month, they keep the rest of the fee.
If someone sues them because of how you used the product, you may have to pay their legal bills.
Read the exact line
Terms of service
“The Customer will , and hold Plotly and its directors, officers, employees harmless against any loss, damage, or cost (including reasonable attorneys' fees) incurred in connection with a claim”
For example, if you upload someone else’s private data and they sue Plotly, you could owe Plotly’s lawyer fees.
They do not promise the service will work correctly or that AI output is accurate.
Read the exact line
Terms of service
“PLOTLY SERVICES ARE PROVIDED BY PLOTLY "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND OF ANY KIND”
For example, if a chart or AI answer is wrong and you make a bad business decision, they say that is your risk.
You are not allowed to put health, ID, payment, biometric, or similar sensitive data into the service.
Read the exact line
Terms of service
“upload, store, process, or transmit any sensitive data to or through the Plotly Services. Sensitive Data includes, without limitation, (A) social security numbers”
For example, do not upload a spreadsheet of patient records or passport numbers.
They say they will not sell your uploaded data or aggregates for money.
Read the exact line
Terms of service
“Plotly will not sell, lease, or otherwise transfer Customer Data or Data to any third party for monetary or other valuable consideration.”
For example, they say they will not sell your datasets to an advertiser.
Charts and other output the tool makes from your data are yours, as long as you follow the contract and pay if required.
Read the exact line
Terms of service
“As between the Parties, and subject to Plotly's underlying rights in the Plotly Services and Plotly IP, Customer owns all right, title, and interest in and to Generated Output.”
For example, a dashboard the AI builds from your spreadsheet is treated as your content.
They claim they do not keep your files forever just because they can, unless the law says they must.
Read the exact line
Terms of service
“Plotly will retain Customer Data only for as long as necessary to provide the Services and fulfill the purposes described herein, unless a longer retention period is required by applicable law.”
For example, after your subscription ends they should not keep your datasets longer than needed to run the service.
They can change the rules after written notice; keeping using the product means you accept the new rules.
Read the exact line
Terms of service
“Plotly may modify this Agreement from time to time. Plotly will give Customer written notice of modifications to the Agreement by any reasonable manner of notice which it elects, and Customer's use of Plotly Services after the effective date of the modifications as set out in such notice constitutes Customer's Agreement to such modifications.”
For example, they could email a new cap and it applies if you keep logging in.
Their AI can make things up; you must check the results yourself.
Read the exact line
Terms of service
“CUSTOMER FURTHER ACKNOWLEDGES THAT THE PLOTLY SERVICES INCLUDE GENERATIVE ARTIFICIAL INTELLIGENCE FEATURES THAT MAY PRODUCE OUTPUT THAT IS INACCURATE, INCOMPLETE, OR HALLUCINATORY.”
For example, if the AI invents a number in a chart, they say you must catch it before you publish it.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- sensitive personal information
- Data that could hurt you if exposed, like health, religion, sexuality, race, exact location or bank details. For example, telling a chatbot about a medical condition creates sensitive data that some laws protect more strictly.
- inputs and outputs
- Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
How we got here · grade D · score 38/100 · 15 of 15 policy answers backed by a verified quote · 8 not stated
What does the app collect beyond what it needs to work?
Not stated in the documents.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
The terms say Plotly will not sell, lease, or transfer customer data or aggregated data for money or other valuable consideration.
What rights do they take over what you type and what the AI makes?
You own generated output. Plotly gets a limited license to host and display customer data so the service can run, and says it acquires no ownership of customer data.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They mention industry-accepted malware checks. The privacy policy has a Security heading but no details in the text provided.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated December 9, 2024. Terms say they will give written notice of changes and continued use means you accept.
Can they close your account without warning, and can you get your data out first?
Either party can terminate for uncured material breach after 30 days’ written notice. They may suspend for security threats after trying to give notice. No data-export path is described.
If something goes wrong, who pays?
The service is as-is, liability is capped (often 12 months of fees or $1,000), and you must indemnify Plotly for certain third-party claims about your use.
Do subscriptions renew on their own, and can you get a refund?
Paid plans auto-renew unless you cancel before the renewal date, and paid purchases are final with no refunds for unused time.
The privacy policy is 400 words at a professional or legal expert level (Flesch reading ease 25.2); the terms are 6,984 words at a professional or legal expert level.
