Privacy Policy

Overview

Doc2Excel converts user-uploaded documents into spreadsheet-ready data. The product is built for short-lived document processing: uploaded source files and extracted row previews are stored in private backend systems and are scheduled to expire after 24 hours.

Information We Collect

We collect the email address you use to sign in, credit purchase and credit usage records, uploaded file metadata, extraction status, confidence scores, page counts, and basic product analytics such as page views and extraction events.

We also process the files you upload, which may contain financial or business information. Only upload documents you have the right to process.

Document Handling

Uploaded documents are stored in private Supabase Storage buckets. Public bucket access is disabled. File access is handled through server-side routes and short-lived signed URLs used by the extraction worker.

Extraction jobs include an expiration timestamp. A scheduled cleanup job removes stored files, clears extracted preview data, and marks expired jobs after the retention window. Account-level history such as job status, page count, credits charged, and purchase records may be retained for billing, support, fraud prevention, and operational reporting.

AI-Assisted Extraction

Standard extraction uses programmatic document parsing first. Paid advanced extraction may use an AI provider when the standard parser cannot confidently read a document or table. AI fallback is used to produce structured extraction output, not to train Doc2Excel models.

Because AI providers are separate processors, do not upload files that you are not permitted to send to third-party processing services.

Payments

Payments are processed by Stripe. Doc2Excel stores purchase records, credit balances, and Stripe transaction identifiers, but does not store full card numbers.

Cookies and Analytics

Doc2Excel uses cookies for sign-in sessions and anonymous extraction sessions. We use Umami analytics to measure site traffic and page views, and we also record product analytics to understand conversion, extraction quality, and credit usage.

Security

Access to account data is protected with Supabase Auth and Row Level Security. Sensitive server operations use server-side credentials that are not exposed to the browser. No security system is perfect, so you should review extracted data before relying on it for accounting, tax, or financial reporting.

Contact

For privacy questions, deletion requests, or security concerns, contact support@doc2excel.com.