Privacy & data handling

Files cleaned without an account stay on your device

When you use the cleaner on our website without saving a file to an account, your file is read and processed by code running in your own browser. The file's contents are not uploaded to our servers.

If you save the resulting recipe, only the list of steps (for example “trim spaces in column Email”) is stored — never your rows.

Files you save to your workspace

If you are signed in and choose to upload a file to your workspace, the original file and each cleaned version are stored in private storage. Files are isolated per workspace and every request is checked against your workspace membership on the server.

Files are never publicly accessible. Downloads use links that are signed, tied to your account and expire after a few minutes.

Files are deleted automatically when your workspace's retention period ends (7 days by default), and you can delete a file and all its versions at any time. Deleting a file also deletes the example values shown in its health report.

What we don't do

We don't use your files to train AI models. Cleaning is done by deterministic rules, not AI.

We don't send file contents, customer names, emails or amounts to analytics. Product analytics only record coarse events such as “a file was analysed” and how many issues were found.

The product has no admin feature for viewing customer files. If privileged access is ever added for support, it will be explicit, authorised and logged.

Security measures

HTTPS, private (never public) file storage, content-based file type checks (we don't trust file extensions), rate limiting, and an audit log of important actions such as uploads, downloads and deletions.

What this page is — and isn't

This page describes how the product handles data technically. It is not a certification: TheSpreadFix does not currently claim GDPR, SOC 2 or ISO 27001 compliance or certification.