Last updated: September 17, 2026
Joint (“Joint,” “we,” “us,” or “our”) provides a web-based 2D character rigging and animation platform that allows users to create, edit, store, animate, and export digital projects.
This Privacy Policy explains what information we collect and process when you use Joint, why we use it, how it may be shared, how long it may be retained, and the choices available to you.
By using Joint, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
Account Information
When you create or manage a Joint account, we may process information such as:
- Email address
- Display or profile name
- Account identifier
- Authentication and session information
- Account status
- Subscription or plan information, when applicable
- Account preferences and settings
Authentication infrastructure is provided through Supabase. We do not receive or store your password in readable form.
Projects and Uploaded Content
When you create or save projects using Joint, we may process and store content including:
- Character artwork and images
- Imported files
- Artwork layers
- Rig and bone information
- Animation data and keyframes
- Project settings
- Project thumbnails
- Generated or exported files
- Project metadata
Cloud project content is associated with your account so that you can access and synchronize your work.
Joint may also temporarily store project or recovery information locally in your browser to support editor performance, auto-save, and recovery from unexpected interruptions.
Usage Information
We may collect technical and usage information necessary to operate, secure, and improve Joint, including:
- Feature usage
- Project and storage usage totals
- Export activity
- Auto-rig and animation operation counts
- Application errors
- Browser and device information
- Security events
- Authentication events
- Administrative and audit records
Where optional product analytics are offered, they are handled according to the preferences available to you in Joint.
Billing Information
Joint is currently in beta and paid subscriptions may not yet be available.
If paid services are introduced, payments may be processed by third-party payment providers. Joint may receive information such as:
- Subscription status
- Selected plan
- Billing provider
- Customer identifier
- Transaction status
- Subscription renewal or expiration information
Full payment-card details should be handled by the applicable payment provider and are not intended to be stored by Joint.
This Privacy Policy will be updated with relevant payment-provider information when paid services are activated.
2. How We Use Information
We use information where reasonably necessary to:
- Create and maintain user accounts
- Authenticate users
- Provide the Joint application
- Save and synchronize projects
- Provide auto-save and project recovery
- Process imports and exports
- Provide rigging and animation functionality
- Enforce account, storage, and feature limits
- Maintain subscriptions when paid services become available
- Respond to support or account requests
- Detect abuse, fraud, or unauthorized access
- Maintain application security
- Diagnose errors and technical problems
- Understand and improve product functionality
- Comply with applicable legal obligations
- Enforce our Terms of Use
We do not sell your personal information or your uploaded artwork.
3. Your Artwork and Projects
You retain ownership of the artwork, animations, projects, and other content you upload to or create using Joint, subject to any rights belonging to third parties whose materials you use.
We process your content only as necessary to provide and operate Joint and as otherwise described in this Privacy Policy and our Terms of Use.
Your private cloud projects are not intentionally made publicly accessible to other Joint users.
You are responsible for ensuring that you have the necessary rights to upload and use any content submitted to Joint.
4. AI and Third-Party Integrations
Joint may introduce optional AI, ChatGPT, MCP, or other third-party integrations.
When you explicitly use an integration, information necessary to perform the requested action may be transmitted to the relevant service.
For example, if you request an AI service to analyze a character or generate an animation, selected project information may need to be provided to that service.
We will aim to provide appropriate information about relevant third-party processing before or when such integrations are enabled.
We do not intentionally send your private project content to an optional AI integration merely because a project is stored in Joint.
5. Service Providers
We use third-party infrastructure providers to operate Joint.
These may include providers for:
- Authentication
- Database hosting
- Cloud file storage
- Application hosting
- Error monitoring
- Email delivery
- Product analytics
- Payment processing when enabled
Joint currently uses Supabase for services including authentication, database infrastructure, and cloud storage.
These providers may process information on our behalf according to their own infrastructure, contractual terms, security practices, and applicable privacy obligations.
Information may be processed in countries other than the country in which you live.
6. Cookies and Local Storage
Joint uses technologies necessary for the application to function.
These may include:
Essential Cookies
Used for authentication, session management, security, and other essential functionality.
Browser Storage
Joint may use browser technologies such as local storage or IndexedDB to:
- Store application preferences
- Improve editor performance
- Maintain temporary project state
- Create recovery copies
- Reduce unnecessary network activity
Signing out does not necessarily remove locally stored recovery data from the device.
If you use Joint on a shared or public computer, you should sign out and consider clearing browser/site data after use.
Analytics
If optional analytics are enabled, Joint may collect aggregated product-usage information to understand how the service is used and improve its functionality.
We do not use your uploaded artwork as advertising tracking data.
Joint does not currently intend to use third-party advertising trackers to build advertising profiles from your activity within the animation editor.
7. How We Share Information
We may disclose information:
- To service providers necessary to operate Joint
- When you explicitly request or authorize an integration
- To comply with applicable law, legal process, or enforceable government requests
- When reasonably necessary to investigate fraud, abuse, or security incidents
- To protect the rights, property, or safety of Joint, its users, or others
- As part of a merger, acquisition, financing, restructuring, or sale of all or part of the business
We do not sell your artwork or personal information to advertisers.
8. Data Retention
We retain account information while your account remains active and for an appropriate period afterward where necessary for security, legal, fraud-prevention, dispute-resolution, or operational purposes.
Cloud projects generally remain stored until you delete them or your account is deleted, subject to technical backup and retention processes.
When you delete a cloud project, it is removed from active user-accessible storage. Residual copies may remain temporarily in backups, logs, or disaster-recovery systems before being automatically removed according to applicable retention schedules.
Some records may need to be retained longer where required by law or reasonably necessary for security, accounting, fraud prevention, or dispute resolution.
Local recovery copies stored in your browser are controlled by your device and may remain after cloud content is deleted.
9. Security
We use technical and organizational safeguards designed to protect information processed through Joint.
Depending on the relevant system, these may include:
- Authentication
- Access controls
- Database ownership policies
- Storage access policies
- Server-side authorization
- Secure communication
- Input validation
- Rate limiting
- Audit logging
- Restricted administrative access
However, no online service, storage system, or method of transmission can guarantee absolute security.
You are responsible for protecting access to your account and devices and should notify us if you believe your account has been compromised.
10. Your Choices and Rights
Depending on where you live, you may have rights relating to your personal information.
These may include rights to request:
- Access to personal information
- Correction of inaccurate information
- Deletion
- Restriction of certain processing
- A copy or portability of certain information
- Withdrawal of consent where processing relies on consent
- Objection to certain processing
Some information may need to be retained where permitted or required by applicable law.
Joint may provide self-service controls that allow you to:
- Update profile information
- Download projects
- Delete projects
- Manage optional analytics preferences
- Manage your account
For requests that cannot be completed through the application, contact us using the information in the “Contact Us” section below.
We may need to verify your identity before processing certain requests.
11. Children
Joint is not intended for children who are not legally permitted to use an online service of this type in their jurisdiction without appropriate authorization.
If we learn that personal information has been collected from a child in circumstances where legally required consent or authorization was not obtained, we may take reasonable steps to delete the information.
12. International Data Processing
Joint and its service providers may process information in countries different from your country of residence.
Where applicable law requires specific safeguards for international transfers of personal information, we will use appropriate mechanisms required for those transfers.
13. Beta Service
Joint is currently offered as a beta product.
During beta, features, storage systems, integrations, limits, and functionality may change as the service develops.
While we use reasonable measures designed to protect stored projects, you should maintain independent backups of important work.
The beta status does not change how we treat personal information under this Privacy Policy.
14. Account and Project Deletion
You may delete individual cloud projects using available application controls.
Where account deletion is available, deleting your account may cause associated cloud projects and account information to be scheduled for deletion, subject to legitimate retention requirements and technical backup periods.
Before deleting your account or projects, download any work you wish to retain.
Deletion from Joint does not delete copies you previously exported or provided to third-party services.
15. Changes to This Privacy Policy
We may update this Privacy Policy as Joint develops or when our legal, technical, or business practices change.
The updated policy will display a revised “Last updated” date.
Where appropriate or legally required, we may provide additional notice of material changes.
16. Contact Us
If you have questions about this Privacy Policy, your personal information, or a privacy request, contact:
Joint
Email: service@joint2d.com
Additional business or mailing information may be provided here where required by applicable law.