Privacy

In short: your spreadsheet never leaves your device. DataFinery reads, cleans and charts it inside your browser. The only information that reaches anyone else is your payment, which Stripe handles when you buy an export or subscribe to Pro, and, if you subscribe, the email address we send sign-in links to.

Who runs DataFinery

DataFinery.io is run by Rhea Prokop, Na Formance 495/6, Újezd u Průhonic, 149 00 Praha, Czech Republic (company ID 03681033). For anything about your data, write to hello@datafinery.io.

Your spreadsheet

• Your file is read in your browser, on your device. It is never uploaded to our servers or to anyone else.
• While you work, the data is kept only in the browser tab’s memory. We don’t save it to your browser’s storage. Closing or reloading the tab removes it.
• We don’t log, analyse or look at the contents of your file. We couldn’t: they never reach us.
• The sample files on the home page are fictional and come from our website, like any image or page.

Exported dashboards

An exported dashboard is an HTML file that contains the rows you exported. It is saved on your device, and you decide who to send it to. Anyone who opens it can see those rows. The file doesn’t contact us or any other website. Excel, CSV, PDF and image files from Pro are made the same way, in your browser, and saved straight to your device.

Payments (Stripe)

• Payments are handled by Stripe. Stripe’s script (Stripe.js) is loaded on the page only when you click Pay, not before.
• Stripe receives your payment details, the email address you give for the receipt, and information about your device and connection that it uses to prevent fraud. At that moment Stripe also sets its own cookies for fraud prevention.
• Nothing from your spreadsheet goes to Stripe. A payment only says “one dashboard export” or “Pro, monthly” or “yearly”, together with your agreement that it starts immediately.
• From Stripe we can see the payment itself (amount, date, status), the receipt email address and that agreement. We never see your full card number.
• Stripe’s own privacy policy explains how it handles this information: stripe.com/privacy (opens in a new tab).

Pro subscription and signing in

• When you subscribe, Stripe keeps you as a customer: your email address, payment method and subscription. Stripe is the only place your subscription is recorded. We have no database of users.
• To sign in on another device, you type your email address. We ask Stripe whether it has an active subscription, and if so we email you a sign-in link that works for 15 minutes. These emails are sent by Resend, our email provider, which receives your address and the link, and nothing else.
• Once you’re signed in, your browser keeps one sign-in cookie (see below), so we can check with Stripe that your subscription is active when you export.
• You cancel or change your card in Stripe’s customer portal, which opens from “Manage subscription”.

Our website’s logs

Our website is hosted by Vercel. Like any web host, it keeps short-term technical logs of requests to the site: your IP address, browser type, the pages and files requested, and when. These are used to run and protect the site. They never contain your spreadsheet, because the spreadsheet is never sent.

Cookies, analytics and tracking

We use no analytics, advertising or tracking tools, and no tracking cookies. There are two kinds of cookie, both only when you choose them:

• Our sign-in cookie, only if you subscribe to Pro or sign in. It holds a signed customer number from Stripe and when it expires (after 30 days without use), and nothing else. Page scripts can’t read it. It’s needed for the service you asked for, so there’s nothing to accept. “Sign out” removes it.
• Stripe’s cookies, set when you choose to pay or subscribe, for fraud prevention.

Legal basis and how long data is kept

• Payment records: to carry out your purchase, and kept as long as accounting and tax law require.
• Your subscription, and the email address it uses: to provide Pro, for as long as you subscribe and then as long as accounting and tax law require.
• Sign-in emails: to provide Pro; the link stops working after 15 minutes.
• Website logs: our legitimate interest in running a secure site, kept only briefly.

Your rights

You can ask us for a copy of the personal data we hold about you (in practice, your payment and subscription records), and ask us to correct or delete it where the law allows. You can also complain to your data protection authority (in the Czech Republic, the Office for Personal Data Protection, Úřad pro ochranu osobních údajů, uoou.gov.cz). Write to hello@datafinery.io.

Changes

If we change how DataFinery handles data, we will update this page first and change the date at the top.