Effective: August 2026
Privacy Policy
fig2PPT ("we", "us") is a web service that converts research figure images into editable PowerPoint slides. This policy explains what data we collect, how we use it, and what happens to your files.
Core privacy promise
Both your uploaded figure image and the generated PPTX file are permanently deleted 24 hours after the conversion finishes, whether or not you downloaded them. We cannot and do not retain your research figures beyond that window. This deletion is enforced at the infrastructure level — it is not a manual process.
What we collect
- Email address — used for sign-in and to notify you when your conversion job is complete. We email you a one-time sign-in link; there is no password. You may instead sign in with Google, in which case Google tells us your email address and basic profile.
- Uploaded figure image — held only for the duration of the conversion job and for 24 hours after it finishes, then permanently deleted.
- Generated PPTX file — retained for the same 24-hour window, then permanently deleted.
- We collect nothing else. No tracking pixels, no third-party ad scripts, and no analytics or behavioural tracking of any kind — not even anonymous page-view counts. The site ships no analytics code at all.
AI processing
To perform the conversion, your uploaded figure is transmitted to two third-party AI APIs: OpenAI and Google Gemini. Those calls are relayed through a third-party API proxy on their way to the model providers, so the proxy operator also handles the request. This transmission is necessary for the service to function. Please review the privacy policies of OpenAI (openai.com/policies/privacy-policy) and Google (policies.google.com/privacy) if this matters to your institution's data-handling requirements.
Payment data
Payments are handled by WeChat Pay, reached through the XunhuPay payment aggregator (xunhupay.com). You scan a QR code and complete the payment inside the WeChat app — fig2PPT never sees or stores your bank card number, your WeChat credentials, or any other raw payment credentials. All we receive back is an order reference, the amount, and confirmation that the payment succeeded. XunhuPay's and WeChat Pay's roles as payment processors are governed by their own privacy policies.
Where your data is processed
Your account data, your uploaded figures, and the generated slides are stored and processed on third-party servers located in Singapore and Japan. The short-lived containers that perform each conversion run in Singapore. Payment records are additionally processed in mainland China by WeChat Pay and XunhuPay. If we change hosting arrangements in a way that changes the countries named here, we will update this policy and its effective date.
Subprocessors
- Cloudflare — domain registration, DNS, TLS termination, and the reverse proxy that all website and API traffic passes through, including sign-in links (cloudflare.com).
- Supabase — database, authentication, and file storage (supabase.com).
- Alibaba Cloud (Singapore) — the ephemeral per-job conversion containers and the private registry holding their container image (alibabacloud.com).
- XunhuPay (虎皮椒) — payment aggregation and order processing (xunhupay.com).
- WeChat Pay / Tencent — payment processing and settlement (pay.weixin.qq.com).
- Resend — delivery of transactional email, including the sign-in links you use to log in (resend.com).
- A third-party OpenAI-compatible API proxy — relays conversion requests, including your figure, to the two AI providers below.
- OpenAI — AI figure analysis (openai.com).
- Google Gemini — AI figure analysis (deepmind.google).
Cookies and sessions
- Sign-in cookies, set by Supabase Auth — these are what keep you signed in, and they are refreshed automatically as you browse.
- A language cookie (NEXT_LOCALE) — remembers whether you are reading the site in English or Chinese, and lasts one year. It is set on your first visit from your browser's own language setting, and updated when you use the language switch.
- That is the complete list. We set no advertising cookies, no analytics cookies, and no cross-site trackers.
Your rights and data deletion
You may request deletion of your account and all associated data at any time. Use the "Delete account" option in your Account settings, or email us at [email protected]. We will action the request within 30 days. Because uploaded figures and generated slides are auto-deleted after 24 hours, those files are typically already gone long before any formal deletion request arrives.
Data retention summary
- Email address: retained as long as your account is active.
- Figure image: deleted 24 hours after the conversion finishes, successfully or not.
- Generated PPTX: deleted 24 hours after the conversion finishes.
- Payment records: order reference, amount, and date retained as required by WeChat Pay and XunhuPay and by applicable tax and accounting rules. These records contain no payment credentials.
Changes to this policy
If we materially change this policy we will update the effective date at the top and, for significant changes, notify you by email.
Contact
Questions about privacy: [email protected].