Privacy policy

Spreadsheet cleaning and downloads happen in your browser. We do not upload or store your workbook. AI tools receive only the bounded receipt shown or described in the tool. Business Dashboards are the explicit exception: when you choose Save dashboard or Import data, the selected sheet is converted to JSON and stored in your account. The Excel or CSV file itself is not stored.

• Local cleaning data: workbook bytes, cleaning history, and notes stay in your browser's local storage so you can resume local work. They are not sent to TidyCell storage.
• Saved Dashboard data: for Business accounts only and only after an explicit save/import, we store the selected sheet's headers and cell values as chunked JSON, plus widget and layout settings.
• Account basics: email address, privacy preferences, saved recipes, and subscription status. Magic-link accounts have no password.
• Operational records: ordinary request logs, rate-limit records, errors, and messages you send through the contact form.

AI never receives a workbook or an unbounded set of rows. Dashboard design receives a bounded column profile. Column Parsing sends only a small capped set of misses. Find a Problem sends at most the disclosed candidate cells and nearby-cell receipt after your explicit approval. Deterministic code computes all changes, KPIs, and chart values. Merely saving Dashboard rows does not send them to OpenAI.

Local workbook data remains under your browser's controls and TidyCell's local retention limits. Saved Dashboards and their JSON datasets remain until you delete the dashboard or your account. A failed replacement import is kept only as staging data and never replaces the active dataset; abandoned staging data may be deleted automatically.

• OpenAI: bounded AI receipts, never the workbook.
• MongoDB Atlas and Vercel: account records and explicitly saved Dashboard JSON.
• Stripe: payments and subscription status.
• Resend: transactional email.

We do not sell, rent, or use your data for advertising.

Two systems measure how the site is used, and neither of them sees your spreadsheet.

Vercel Web Analytics (Vercel is the processor) gives us aggregate traffic — page views, referrers, rough device and country. It is cookie-free, stores nothing in your browser, and does not track you across other sites. The page address is normalised before it is sent, so the per-file address of a cleaning session and any query string never reach it.

TidyCell's own measurement stores data on our own database and shares it with nobody. It records which pages were visited and in what order, how long the page was actually in view, which tools were opened and applied, whether a file was opened, a coarse size band for that file (for example “1–10 MB”), where the visit came from, and an anonymous random number kept in this browser's local storage so we can tell a returning visit from a new one.

It never records your file's contents, its name, your column headers, sheet names, any cell value, or your exact row count. Cleaning happens in your browser; the measurement only ever sees which buttons were pressed.

The search box is the one exception, so we'll name it. If you use the search box to describe what you're trying to do, we keep the words you typed for 30 days so we can see what people are asking for and build it. It is stored on its own, with no id attached, so it can't be linked back to you or to your file — and anything that looks like personal information is discarded rather than saved.

No cookie is set for analytics, no data is shared with advertisers, and none of it is joined to your account: the records carry no account identifier at all. That is also why deleting your account does not delete them — there is nothing in them to link back to you.

We decided not to show one, and we'd rather explain why than leave you wondering.

A banner exists to ask permission for things stored on your device. Here, the only things TidyCell stores in your browser are: your sign-in, your own spreadsheet (which is the product — it stays on your machine instead of being uploaded to us), and one random number used to count visitors. No advertising cookie, no third-party tracker, no cross-site identity, and we never store your IP address. A banner for one random number would imply there is something bigger to consent to, and there isn't.

Instead you get the switch itself, in the footer of every page: “Usage analytics: On · Turn off”. Turning it off stops all measurement immediately and deletes that random number from this browser. There is a second switch below. We also honour your browser's Do Not Track setting automatically — if it is on, nothing is measured and no number is ever created.

That random number expires by itself after 13 months and is not renewed each time you visit, so it can never quietly become permanent.

• Turn usage analytics off — the switch in the footer of every page, or turn it off here. Do Not Track is honoured automatically.
• Clean and download without saving a Dashboard; the workbook stays local.
• Delete an individual saved Dashboard and all of its datasets.
• Delete your account to remove your identity, subscriptions mirror, saved recipes, Dashboards, datasets, and chunks.
• Contact us about access or deletion.

We use a first-party session cookie for sign-in, and a second cookie carrying a single yes/no bit so the signed-in header renders correctly on the first frame. Neither is used for advertising and there is no cross-site tracking. No cookie is used for analytics at all — see “Do we need a cookie banner?” above. Material policy changes will be dated and explained here.