Privacy policy
Last updated: July 20, 2026
The short version
Spreadsheet cleaning and downloads happen in your browser. We do not upload or store your workbook. AI tools receive only the bounded receipt shown or described in the tool. Business Dashboards are the explicit exception: when you choose Save dashboard or Import data, the selected sheet is converted to JSON and stored in your account. The Excel or CSV file itself is not stored.
What we collect
- Local cleaning data: workbook bytes, cleaning history, and notes stay in your browser's local storage so you can resume local work. They are not sent to TidyCell storage.
- Saved Dashboard data: for Business accounts only and only after an explicit save/import, we store the selected sheet's headers and cell values as chunked JSON, plus widget and layout settings.
- Account basics: email address, privacy preferences, saved recipes, and subscription status. Magic-link accounts have no password.
- Operational records: ordinary request logs, rate-limit records, errors, and messages you send through the contact form.
What the AI sees
AI never receives a workbook or an unbounded set of rows. Dashboard design receives a bounded column profile. Column Parsing sends only a small capped set of misses. Find a Problem sends at most the disclosed candidate cells and nearby-cell receipt after your explicit approval. Deterministic code computes all changes, KPIs, and chart values. Merely saving Dashboard rows does not send them to OpenAI.
How long data is kept
Local workbook data remains under your browser's controls and TidyCell's local retention limits. Saved Dashboards and their JSON datasets remain until you delete the dashboard or your account. A failed replacement import is kept only as staging data and never replaces the active dataset; abandoned staging data may be deleted automatically.
Who we share data with
- OpenAI: bounded AI receipts, never the workbook.
- MongoDB Atlas and Vercel: account records and explicitly saved Dashboard JSON.
- Stripe: payments and subscription status.
- Resend: transactional email.
We do not sell, rent, or use your data for advertising.
Usage analytics
We use Vercel Web Analytics (Vercel is the processor) to understand how the site is used in aggregate — page views, referrers, rough device and country, and product funnel events. It is cookie-free and does not track you across other sites. Crucially, no spreadsheet data is ever sent to analytics: no file names, cell contents, emails, or account identifiers. Cleaning happens in your browser; analytics only ever sees anonymous page and interaction data.
Your choices
- Clean and download without saving a Dashboard; the workbook stays local.
- Delete an individual saved Dashboard and all of its datasets.
- Delete your account to remove your identity, subscriptions mirror, saved recipes, Dashboards, datasets, and chunks.
- Contact us about access or deletion.
Cookies and changes
We use a first-party session cookie for sign-in, without cross-site ad tracking. Material policy changes will be dated and explained here.