Privacy Policy
Last updated
This policy explains what data we collect, why, and what we do with it. The short version: the files you process never reach our servers, so the only personal data we hold is what you deliberately give us by creating an account.
Who we are
ExcelToolkit Pro operates https://exceltoolkitpro.com. For data protection purposes we are the data controller for account data and the data processor for anything you explicitly upload to your account. You can reach us at support@exceltoolkitpro.com.
The critical point about your files
Every tool in the Convert, Merge & Split, Clean, Analyse, Security, Generate and Templates categories runs entirely inside your browser. Your spreadsheet is read by JavaScript executing on your own device. It is never transmitted to us, never written to our disks, and never seen by our staff.
You can verify this. Open your browser's developer tools, switch to the Network tab, and process a file. No request carries your data.
The AI tools are the exception, and they are labelled as such. They send column names, data types and — unless you enable schema-only mode — up to five sample rows to our API, which forwards them to Anthropic for processing. Full file contents are never sent.
What we collect
If you never create an account, we collect: anonymised page analytics (only after you consent), and standard server logs containing IP address, user agent and requested path, retained for 30 days for security and abuse prevention.
If you create an account, we additionally collect: your email address, a bcrypt hash of your password (never the password itself), your plan and billing status, and an audit log of security-relevant actions such as sign-ins and password changes.
If you subscribe, our payment processors (Stripe and Razorpay) collect and hold your payment details. We never see or store card numbers.
What we do not collect
We do not collect the contents of your spreadsheets. We do not build advertising profiles. We do not sell, rent or share personal data with data brokers. We do not use dark patterns to obtain consent.
Cookies
We set one essential cookie for session authentication and one for CSRF protection. Neither is used for tracking. Analytics cookies are set only after you accept them in the consent banner. See the Cookie Policy for the full list.
Legal bases (UK/EU)
- Contract — account data, necessary to provide the service you signed up for.
- Legitimate interests — security logging and abuse prevention.
- Consent — analytics and marketing cookies, and the newsletter.
- Legal obligation — retaining invoices for the period tax law requires.
Retention
Server logs: 30 days. Account data: for as long as the account exists, then 30 days after deletion. Invoices: seven years, as required by tax law. Newsletter subscriptions: until you unsubscribe.
Your rights
You can request access to, correction of, or deletion of your personal data, object to processing, or ask for a portable export. Email support@exceltoolkitpro.com and we will respond within 30 days. You also have the right to complain to your local supervisory authority.
Account deletion is self-service from your dashboard and takes effect immediately.
Sub-processors
- Hostinger — application hosting (EU/US regions).
- Stripe and Razorpay — payment processing.
- Anthropic — AI features only, and only the schema and sample described above.
- Google Analytics 4 and Microsoft Clarity — anonymised analytics, loaded only with consent.
International transfers
Where data leaves the UK/EEA, transfers are covered by Standard Contractual Clauses or an adequacy decision.
Changes
We will post material changes on this page and, for account holders, notify you by email at least 14 days before they take effect.