Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Excel files and data files you upload to our service for processing
• Usage information and analytics
• Payment information (processed securely through Lemon Squeezy)

Excel File Processing: When you upload Excel files (.xlsx, .xls, .csv), they are stored securely in encrypted storage. Files are processed by our AI-powered transformation service to provide you with data analysis and transformation capabilities. All files are associated with your account and are deleted when you delete your account or individual projects.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions

3. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Supabase for secure data storage and processing. Excel files are stored in encrypted cloud storage with access restricted to your account. We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption at rest and in transit
• Secure authentication and authorization
• Regular security audits and monitoring
• Automatic cleanup of temporary processing files

4. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You may delete your account and data at any time through your account settings.

Specific Retention Periods:

• Excel Files and Project Data: Deleted immediately upon account deletion or project deletion
• Account Data: Deleted immediately upon account deletion, except as required by law
• Audit Logs: Retained for 7 years for compliance and legal requirements
• Webhook Events: Retained for 90 days for operational monitoring and troubleshooting
• Payment Records: Handled by Lemon Squeezy according to their retention policy

5. Third-Party Services

We use third-party services to help us operate our service, including:

• Supabase - For database and authentication services. View Privacy Policy
• Lemon Squeezy - For secure payment processing. We do not store your payment card information. View Privacy Policy
• Anthropic - For AI-powered Excel file processing and transformations. View Privacy Policy

These services have their own privacy policies governing the use of your information. We recommend reviewing their policies to understand how they handle your data.

6. Your Rights

You have the right to:

• Access: View your personal data through your account dashboard
• Correction: Update and correct inaccurate data in your account settings
• Deletion: Delete your account and all associated data at any time through your account settings
• Data Export: Request a copy of your data by contacting us at info@pandapilot.io
• Opt-out: Decline non-essential cookies and tracking through our cookie consent banner

GDPR Rights: If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to object to processing, and the right to lodge a complaint with a supervisory authority.

7. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@pandapilot.io