Privacy Policy
Ontology Studio is an independent software product. For privacy questions or data requests, contact [email protected].
Data controller: Ontology Studio. Contact: [email protected]. When a legal entity is formed, this policy will be updated to name it.
1. What we collect and why
Email address
If you sign up for product updates or early access, we collect your email address to send you product announcements — only if you opt in explicitly.
GDPR lawful basis: consent.
Error and crash data
We use Sentry to capture anonymous error reports (stack traces, browser/OS version) when the app crashes. No ontology content is included in error reports.
GDPR lawful basis: legitimate interest (app stability).
Usage analytics (optional, opt-in)
If you choose to share usage data, we collect anonymous product events (e.g. graph created, file saved) via PostHog. You can opt out at any time in app settings. No ontology content is included.
GDPR lawful basis: consent.
2. What we do NOT collect
- Ontology content — ontology files remain on your device or in your Google Drive. Ontology Studio does not upload or process your ontology content on its own servers.
- AI Advisor conversations — you provide your own API key; requests are sent directly from your device to your chosen AI provider (such as Anthropic, Google, or OpenAI). Ontology Studio does not receive or store the contents of those requests.
3. Sub-processors
| Processor | Purpose | Privacy policy |
|---|---|---|
| Sentry | Error monitoring | sentry.io/privacy |
| PostHog | Usage analytics (opt-in only) | posthog.com/privacy |
Your AI provider (Anthropic, Google, OpenAI) is not an Ontology Studio sub-processor — you interact with them directly via your own API key under their own terms and privacy policies.
4. International data transfers
Some of our service providers may process personal data outside your country of residence. Where required by applicable law, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
5. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, and destruction.
6. Marketing emails
We only send product update emails if you explicitly opt in. Every marketing email includes an unsubscribe link.
7. Data retention
| Data type | Retention |
|---|---|
| Email (opt-in list) | Until you unsubscribe, then deleted promptly |
| Error data (Sentry) | 90 days |
| Usage analytics (PostHog) | 12 months |
8. Your rights
GDPR (EU users) and CCPA (California users) give you the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Withdraw consent for marketing emails at any time
- Data portability (receive a copy of your data)
To exercise any of these rights, email [email protected]. We will respond within 30 days.
9. Data deletion
Email [email protected] with the subject "Delete my data". We will respond within 30 days and delete your personal data where required by applicable law.
10. Cookies
The web app does not use tracking cookies by default. If you opt in to anonymous usage analytics, PostHog may place a cookie or similar local identifier to distinguish returning sessions.
11. Children
Ontology Studio is not directed at children under 16. We do not knowingly collect personal data from anyone under 16.
12. Changes to this policy
We will notify you by email of any material changes to this policy before they take effect. The "last updated" date at the top of this page reflects the most recent revision.
13. Contact
Privacy questions and data requests: [email protected]
We aim to respond within 30 days.