Privacy Policy

Scope

This Privacy Policy explains how XLSX World collects, uses, stores, and protects personal information when you use our website, account features, and spreadsheet tools.

Information We Collect

• Account data, such as email address and optional profile details.
• Support data you submit through the contact form.
• Operational metadata, including request timestamps, route usage, and basic diagnostic events.
• Security and abuse-prevention data, such as IP address and rate-limit signals.
• If you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.

File Processing

Files you upload are processed temporarily on our servers solely to perform the requested operation (convert, merge, split, inspect, etc.). Files are automatically deleted shortly after processing is complete. We do not read, inspect, sell, or share the contents of your files.

How We Use Information

• To provide and secure core product functionality.
• To authenticate sessions and maintain account access.
• To measure reliability and performance of endpoints and tools.
• To respond to support requests and enforce acceptable use.

Cookies and Session Storage

We use essential cookies and secure session mechanisms required for authentication, request continuity, and abuse prevention. If you select 'Remember me' during login, your session persists across browser restarts; otherwise, session cookies expire when you close your browser. We do not use advertising cookies.

Data Sharing

We do not sell your personal data. We may share limited information with service providers that help us operate the platform (for example, hosting, authentication, and abuse protection), subject to appropriate contractual safeguards.

Third-Party Services

We use third-party services to deliver core product features, including CAPTCHA, hosting infrastructure, authentication, and Google Sign-In. When you sign in with Google, your authentication is handled by Google's OAuth 2.0 service and Supabase Auth. Please refer to Cloudflare's Privacy Policy, Google's Privacy Policy, and other provider terms for details on their data handling.

Data Retention

We retain data only for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Temporary processing artifacts are routinely deleted.

Your Rights and Choices

You may contact us at any time to request deletion of any personal data we may hold, subject to legal and security requirements. Use our contact form to submit privacy requests.

Security

We apply technical and organizational safeguards designed to protect your information, but no system is completely secure. You are responsible for safeguarding your account credentials.

Changes

We may update this policy from time to time. Changes will be reflected on this page with an updated date.