Privacy Policy

Last updated: April 10, 2026

1. Information We Collect

We collect information that you provide directly to us, including:

  • Account information (name, email address, password)
  • Excel files and data files you upload to our service for processing
  • Usage information and analytics
  • Payment information (processed securely through Lemon Squeezy)

Excel File Processing: When you upload Excel files (.xlsx, .xls, .csv), they are stored securely in encrypted storage. Files are processed by our AI-powered transformation service to provide you with data analysis and transformation capabilities. All files are associated with your account and are deleted when you delete your account or individual projects.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices and support messages
  • Respond to your comments and questions

3. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Supabase for secure data storage and processing. Excel files are stored in encrypted cloud storage with access restricted to your account. We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption at rest and in transit
  • Secure authentication and authorization
  • Regular security audits and monitoring
  • Automatic cleanup of temporary processing files

4. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You may delete your account and data at any time through your account settings.

Specific Retention Periods:

  • Excel Files and Project Data: Deleted immediately upon account deletion or project deletion
  • Account Data: Deleted immediately upon account deletion, except as required by law
  • Audit Logs: Retained for 7 years for compliance and legal requirements
  • Webhook Events: Retained for 90 days for operational monitoring and troubleshooting
  • Payment Records: Handled by Lemon Squeezy according to their retention policy

5. Third-Party Services

We use third-party services to help us operate our service, including:

These services have their own privacy policies governing the use of your information. We recommend reviewing their policies to understand how they handle your data.

6. Your Rights

You have the right to:

  • Access: View your personal data through your account dashboard
  • Correction: Update and correct inaccurate data in your account settings
  • Deletion: Delete your account and all associated data at any time through your account settings
  • Data Export: Request a copy of your data by contacting us at info@pandapilot.io
  • Opt-out: Decline non-essential cookies and tracking through our cookie consent banner

GDPR Rights: If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to object to processing, and the right to lodge a complaint with a supervisory authority.

7. Cookies and Tracking

We use cookies and similar tracking technologies to run the site securely, understand how it is used, and measure the performance of our marketing. Strictly necessary cookies (for authentication, security, and core functionality) are always active. Analytics and marketing cookies are only set if you give consent via our cookie banner.

You can manage your preferences for analytics and marketing cookies through our cookie preferences banner or by adjusting your browser settings to block or delete cookies. For detailed information about the types of cookies we use and their purposes, please see our Cookie Policy.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@pandapilot.io