Privacy Policy

This policy explains how ImageToXLSX handles information when you use the image conversion service.

Files you upload

Uploaded images are processed to extract table data and create an editable spreadsheet.

We do not intentionally store uploaded images in our application database or provide permanent file storage. The current service does not include user accounts or file history.

AI processing

To extract table data, uploaded images are sent to a third-party AI service for processing.

We use DeepSeek as an AI processing provider.

Downloaded files

The generated Excel file is created from the extracted table data and downloaded directly by you. We do not provide cloud storage or a download history for generated files.

Anonymous usage limits

We use a random anonymous browser identifier and limited network information to enforce free usage limits and prevent abuse. We do not collect your name or email address for the current free conversion feature.

Cookies

A necessary functional cookie remembers this browser's daily free usage allowance. It is not used for advertising or cross-site tracking.

Data security

We take reasonable technical measures to protect the service and limit unnecessary data collection.

Sensitive information

Please avoid uploading highly sensitive or confidential information unless you are comfortable having it processed by our AI provider.

Usage analytics

We collect limited, aggregated usage information such as page views, conversion attempts, successful conversions and downloads to understand how the service is used and improve reliability.

We do not include uploaded image contents, extracted spreadsheet data, filenames, names or email addresses in these analytics.

Payments and support email

Paddle processes payment and transaction data as our Merchant of Record. We do not claim that Paddle or Resend never retain data; their own policies apply.

Resend is used to send Magic Links and support email. The email used for a payment can be used to recover purchased credits.

We avoid using raw email addresses as Redis keys where practical. Paid-credit accounts use an HMAC-derived anonymous account identity. Magic Link tokens are single-use and short-lived.

Changes to this policy

We may update this Privacy Policy as the service changes. Any updated version will be published on this page.