Privacy Policy

How we collect, use, and protect your personal information.

Last updated: 2026-08-08

Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

Information We Collect

We collect the following types of information to provide and improve our service:

1. Account Information — Your name, email address, and other details you provide when creating an account.
2. Usage Data — Information about how you interact with the service, including features accessed, frequency of use, and interaction patterns.
3. Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance.
4. Cookies — Small data files stored on your device to remember preferences and improve your experience.
5. Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers.

How We Use Your Information

We use the data we collect to:

• Provide, maintain, and improve the service.
• Process transactions and send related confirmations.
• Send technical notices, security alerts, and support messages.
• Respond to your questions, feedback, and support requests.
• Detect, prevent, and address fraud and abuse.

Data Sharing

We do not sell your personal information. We may share data only in these limited cases:

• With service providers who help us operate the service, under confidentiality agreements.
• To comply with legal obligations or respond to lawful requests from public authorities.
• To protect our rights, property, or safety, or that of our users.

Sub-processors

To run the service we rely on a small number of vetted third-party processors. Each may process the minimum personal data required to perform its function:

• Cloudflare — hosting, edge delivery (CDN), and DDoS protection.
• Payment processors — PayPal, Creem, and Waffo handle billing. We do not store full card numbers; these processors receive the data needed to complete a purchase.
• Zhipu AI — provides OCR (optical character recognition) on uploaded documents.
• DeepSeek — provides AI normalization of extracted tables (column typing, vendor/currency inference).

Uploaded files are sent to the OCR/AI providers only to perform the conversion you requested and are not used to train models. Before signing in, source images are used only during the request and then discarded.

Data Security

We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.

Your Rights & Data Deletion

You have the right to access, update, export, or delete your personal information.

• Conversion history — you can delete individual results any time from your account settings.
• Full account deletion — to delete your account and the personal data tied to it (profile, credentials, credits, and conversion history), email support@aitoexcel.com with the subject "Account deletion". We process verified requests within 30 days and confirm once completed.
• Legal retention — we keep the minimum records required for tax, accounting, or legal compliance (for example, completed order records) even after account closure; these are isolated from active use.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.

Data Controller

The service is operated by AitoExcel (operated by an individual). Questions about this policy or your data can be sent to support@aitoexcel.com or contact@aitoexcel.com.

Contact Us

If you have questions about this Privacy Policy, you can reach our support team at support@aitoexcel.com or contact@aitoexcel.com.