← Back

Privacy Policy

Last updated: February 12, 2026

1. What R-Data Does

R-Data is a Chrome Extension that extracts structured data from visual document platforms (currently Lucidchart) and enables users to export that data as a ZIP file or migrate it to Miro. The extraction happens in the user's own browser using their existing platform session.

2. Data We Access

R-Data accesses Lucidchart document data via the user's own browser session. The Chrome Extension makes HTTP requests to Lucid's servers using the cookies already present in the user's browser. We access:

  • Document titles, metadata, and folder structure
  • Document content: shapes, connectors, positions, colors, text
  • User account information (email, organization name)

3. Data We Do NOT Access

  • We do not access, store, or transmit your Lucidchart login credentials (username or password).
  • We do not read or modify your Lucidchart account settings.
  • We do not access documents from other users or organizations.

4. Data Transmission and Storage

Extracted document data is transmitted from the Chrome Extension to R-Data servers over HTTPS for processing. This includes:

  • ZIP export: Data is packaged into a downloadable ZIP file and served back to the user.
  • Miro migration: Data is held temporarily on our servers while Miro boards are created via the Miro API.

All extracted document data is stored with a 7-day TTL and is automatically deleted after that period. Job metadata (completion status, timestamps) is retained for 30 days.

5. Miro Integration

If you choose to migrate documents to Miro, R-Data uses OAuth 2.0 to connect to your Miro account. Miro OAuth tokens are stored server-side, encrypted, and scoped to the minimum required permissions (board creation and reading). Tokens are retained only for the duration of the migration and can be revoked at any time from your Miro account settings.

6. User Accounts

R-Data user accounts store your email address and a bcrypt-hashed password. We do not store passwords in plaintext. Session tokens are issued as httpOnly, secure cookies.

7. Payment Processing

Payments are processed by Stripe. R-Data never sees, stores, or transmits your full credit card number. Stripe handles all payment data in compliance with PCI DSS standards.

8. Chrome Extension Permissions

The R-Data Chrome Extension requests minimal permissions:

  • storage — Local preferences and session state
  • alarms — Polling for migration status updates
  • notifications — Notify when background migration completes
  • host_permissions — Access to documents.lucid.app (extraction), lucid.app (session validation), and R-Data API servers

The extension does not use content scripts, does not access other tabs, and does not modify any web page content.

9. Data Deletion

You may request deletion of your account and all associated data at any time by contacting support@supe-us.com. Extracted document data is automatically purged after 7 days regardless.

10. Contact

For questions about this privacy policy, contact support@supe-us.com.