Privacy Policy

Scope

This Privacy Policy explains how XLSX World collects, uses, stores, an' protects personal information when ye use our website, account features, an' spreadsheet tools.

Information We Collect

• Account data, such as pigeon address an' optional profile details.
• Support data ye submit through th' contact form.
• Operational metadata, including request timestamps, route usage, an' basic diagnostic events.
• Security an' abuse-prevention data, such as IP address an' rate-limit signals.
• If ye sign in with Google, we receive yer name, pigeon address, an' profile picture from yer Google account. We do not receive or store yer Google passphrase.

Scroll Processin'

Files you upload are processed on our servers solely to perform the requested operation (convert, merge, clean, etc.). Uploaded files are temporarily cached on the server filesystem for up to 15 minutes to avoid redundant re-uploads during your session. After processing or cache expiry, files are automatically deleted. We do not retain, inspect, or share the contents of your files beyond what is necessary to deliver the requested result. Maximum upload size: 5 MB without an account, 10 MB with a free account, 50 MB with Pro.

How We Use Information

• T' provide an' secure core product functionality.
• T' authenticate sessions an' maintain account access.
• T' measure reliability an' performance o' endpoints an' tools.
• T' respond t' support requests an' enforce acceptable use.

Cookies an' Session Storage

We use essential cookies an' secure session mechanisms required fer authentication, request continuity, an' abuse prevention. If ye select 'Remember me' during login, yer session persists across browser restarts; otherwise, session cookies expire when ye close yer browser. We do not use advertisin' cookies.

Data Sharing

We do not sell yer personal data. We may share limited information with service providers that help us operate th' platform (fer example, hostin', authentication, an' abuse protection), subject t' appropriate contractual safeguards.

Third-Party Services

We use third-party services t' deliver core product features, including CAPTCHA, hostin' infrastructure, authentication, an' Google Sign-In. When ye sign in with Google, yer authentication is handled by Google's OAuth 2.0 service an' Supabase Auth. Please refer t' Cloudflare's Privacy Policy, Google's Privacy Policy, an' other provider terms fer details on their data handling.

Data Retention

We retain data only for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Uploaded files are cached for a maximum of 15 minutes and then permanently deleted. Account data is retained until you request deletion. Usage analytics are retained in aggregate form.

Payment Processor

Payments fer XLSX World Pro arr processed by Lemonsqueezy (Lemon Squeezy International Limited), which acts as our Merchant o' Record. When ye subscribe, we share yer pigeon address an' a unique user identifier with Lemonsqueezy t' create yer checkout session. We do not receive, store, or have access t' yer credit card number, CVV, or billing address — these arr handled exclusively by Lemonsqueezy. Fer details on how Lemonsqueezy handles yer data, see their privacy policy at lemonsqueezy.com/privacy.

Yer Rights an' Choices

Ye may contact us at any time t' request deletion o' any personal data we may hold, subject t' legal an' security requirements. Use our contact form t' submit privacy requests.

Security

We apply technical and organizational safeguards designed to protect your information. All stored outputs are encrypted at rest. Authentication uses secure httpOnly cookies with short-lived JWT tokens. File uploads are transmitted over HTTPS and cached in isolated temporary storage with automatic expiration. Access to production systems is restricted to authorized personnel.

Changes

We may update this policy from time t' time. Changes will be reflected on this page with an updated date.