Privacy Policy

Contact and Controller

Image to Excel is responsible for the personal data described in this policy, except where another provider acts as an independent controller for its own service. For privacy, support, access, deletion, or objection requests, contact us at support@image-to-excel.com or through https://image-to-excel.com/support.html.

Data Security and Storage

• Data sent between your browser, the extension, and our hosted service uses secure transport such as HTTPS/TLS.
• Backend credentials and API keys are kept in managed secret storage rather than in public code.
• Operational access is limited to what is needed to run, secure, support, and troubleshoot the service.
• Some review, guest, and sign-in recovery state is stored in your browser so the current workflow can continue after popup close, refresh, retry, or sign-in.

Information We Collect

Account and Access Data

• email address and account identifier when you sign in
• authentication, session, and recovery state needed to keep account access working
• guest-trial identifiers and usage state used to enforce service limits

Submitted Content

• selected browser-capture image regions
• uploaded images and PDFs
• selected PDF pages
• extracted rows, columns, and reviewable table results
• request metadata needed for extraction, such as MIME type, file size, and selected page numbers

Usage, Support, and Technical Data

• support messages and files you choose to send us
• basic operational logs, error details, timestamps, request identifiers, and API route information
• security and abuse-prevention data, including rate-limit and failure signals
• AI provider diagnostics such as model name, timeout outcome, token counts, page count, and payload size
• order and fulfillment metadata if a paid access path is offered; payment card details are handled by the checkout provider and are not stored by Image to Excel

How We Use Your Information

• to provide capture, upload, AI extraction, review, XLSX export, CSV export, account access, and guest-trial continuity
• to process submitted images, PDFs, and extraction instructions with Google Gemini so we can return a structured table result
• to authenticate users, maintain sessions, enforce usage limits, prevent abuse, and protect service reliability
• to process support, privacy, access, deletion, correction, objection, portability, and complaint-related requests
• to debug failures, measure reliability, improve product quality, and maintain operational logs
• to process transactions and deliver purchased access if a paid access path is offered
• to comply with legal, tax, accounting, security, platform, and record-keeping obligations

Chrome Extension and Browser Data

The extension accesses the current tab only after a user action so you can select a visible table area from a page, image, or browser-open PDF. It does not monitor browsing history in the background to build profiles or advertising audiences.

Browser captures, uploads, and selected PDF pages are sent off device only when you choose extraction. For reviewed browser captures, the stored review-session state and extraction request do not include the current-page URL or title.

The extension may keep prepared input, review state, guest state, and sign-in recovery state in browser storage until you clear it through product controls, browser storage management, successful cleanup flows, sign-out, or uninstall.

Third-Party AI Services

Image to Excel uses Google Gemini through a backend-owned Gemini API integration to process submitted images, PDFs, and extraction instructions, and to return structured table data. This means the content you submit for extraction may be sent to Google for AI processing when you choose extraction.

What this means

• Data transmitted to Google: submitted content and extraction instructions are sent to Google's servers for AI processing as part of service delivery.
• Google terms apply: data sent to Gemini is subject to the Gemini API Additional Terms and Google Privacy Policy.
• Processing only: we use Gemini to generate the extraction result you request, not to train models on our side.
• No optional training submissions: we do not intentionally share submitted files, prompts, or Gemini responses with Google through optional datasets or feedback features for model training.
• Paid API handling: Google states that for Gemini API Paid Services it does not use prompts, files, or responses to improve Google products and processes them under its data processing terms.

AI-Generated Output

AI-assisted extraction can make mistakes. The extracted table may contain incorrect, missing, merged, or misread values. You are responsible for reviewing rows, columns, and exported XLSX or CSV files before using them in accounting, operations, compliance, or any other important workflow.

What We Do Not Do

• we do not sell your personal data
• we do not use submitted files or browser-derived data for advertising
• we do not share submitted files, extracted tables, or browser-derived data with data brokers or similar resellers
• we do not collect browsing history in the background for unrelated purposes
• we do not store or transmit the current-page URL or title as part of reviewed browser-capture extraction requests
• we do not use Gemini output to make legal, employment, health, credit, or similarly significant decisions about you

Cookies and Tracking

The public website is not an advertising or cross-site tracking surface. Signed-in website flows may use secure session cookies to maintain account access. The website or extension may also use browser storage to recover a prepared upload, review state, guest state, or sign-in flow.

Analytics (Google Analytics)

We use Google Analytics 4 to understand aggregate website traffic and improve the site. Analytics is strictly opt-in: no analytics cookies are set and the Google Analytics script is not loaded until you choose Accept analytics in the cookie banner. If you reject or take no action, no analytics cookies are placed and no analytics data is sent.

When you accept, Google Analytics sets cookies such as _ga and _ga_<id> to measure visits and traffic sources. This data is processed by Google under the Google Privacy Policy; see also how Google uses data from sites that use its services. You can change or withdraw your choice at any time using the Cookie settings button shown on every page; choosing reject removes the analytics cookies we can clear from your browser.

We may also use server logs and similar technical records for security, troubleshooting, and service reliability. If we add other non-essential cookies or tracking technologies that require consent, we will request consent where required.

Data Retention and Deletion

• Submitted content is retained only as long as needed to process extraction, return the result, troubleshoot reliability or security issues, handle support, or meet legal obligations.
• Operational logs are retained for troubleshooting, security, abuse prevention, and reliability monitoring according to backend and infrastructure retention settings.
• Account, guest-trial, credit, and entitlement records are retained while needed to provide access, prevent abuse, and resolve support or legal issues.
• Purchase, tax, accounting, and compliance records may be retained for the legally required period.
• Browser-held review or recovery data may remain until cleared through product controls, browser storage management, successful cleanup flows, sign-out, or uninstall.
• Backup and business-continuity copies may persist for a limited additional period before deletion cycles complete.

To request deletion or help with privacy-related cleanup, contact support@image-to-excel.com.

Legal Basis and International Transfers

Where data protection laws such as the GDPR apply, we rely on contract performance to provide the service you request, legitimate interests to secure and improve the service, legal obligation to meet required record-keeping or compliance duties, and consent where a specific optional activity requires it.

We and our service providers may process data in multiple countries. Where transfer rules apply, we rely on safeguards such as adequacy decisions, standard contractual clauses, data processing terms, and technical and organizational measures.

Your Rights

Depending on applicable law, you may have the right to:

• request access to your personal data
• request correction of inaccurate or incomplete data
• request deletion of your personal data
• request restriction of processing
• object to certain processing
• request a portable copy of data you provided where portability applies
• withdraw consent where processing is based on consent
• lodge a complaint with a competent data protection authority

To exercise rights, email support@image-to-excel.com or use https://image-to-excel.com/support.html. We may need to verify your identity before completing a request.

Children

Image to Excel is not directed to children. The Gemini API terms require API clients not to be directed to people under 18, and Image to Excel is intended for users who are at least 18 years old.

Changes to this Policy

We may update this policy as the product, providers, laws, or operational practices change. Material changes will be reflected on this page with an updated date.

Questions About this Privacy Policy

If you have questions about this Privacy Policy or our privacy practices, contact us at support@image-to-excel.com or visit https://image-to-excel.com/support.html.