Privacy Policy
Last updated: October 11, 2026
This Privacy Policy describes the information that To XLSX Tools collects when you use the website and the conversion service (the "Service"), how that information is used, and the rights you have. The Service is operated by [Company name] ("we," "us," or "our"). In summary: the Service requires no account, the documents you upload are never stored, and the website sets no cookies.
1. Controller and contact
The Service is operated by [Company name], [Street address, City, State ZIP, Country]. Questions about this policy and requests concerning your personal data may be sent to [support@example.com]. Where the General Data Protection Regulation (GDPR) or the UK GDPR applies, [Company name] is the controller of the personal data described in this policy.
2. Information we collect
The document you upload
When you upload a Word document, the Service converts it into an Excel workbook in the server's memory. The document is not written to storage, is not read by anyone, and is discarded as soon as the conversion finishes or fails. If you use the browser extension, it downloads the document from the link you chose, or from a download that has just finished, and hands it to the website in a new tab, which uploads it to the Service in the same way. The extension stores in your browser only its two settings, the address and name of a document until the website's tab has received it, and, while its popup shows them, the names of the downloaded documents it offers to convert.
The converted workbook
The workbook is stored on our server for up to one hour so that you can download it, and is then deleted automatically. You may delete it earlier with the Delete file button on the result page. The workbook is named after your document, and the notes shown on the result page are stored with it. The name and the notes are deleted together with the workbook. After that, nothing about the conversion remains except the entries in the server logs described below.
The link to the result page contains a long random identifier. Anyone who has the link can open the page and download the workbook until it is deleted. Share the link with care.
Server logs
When you visit the website or submit a conversion, our servers record standard request data: your IP address, the date and time, the browser and operating system reported by your browser, the page or endpoint requested, the response status, the size of the uploaded document and of the produced workbook, the duration of the conversion, and how the conversion was started (from the website, or from the browser extension's link menu or download offer). For each conversion, the logs also record counts of what the document contained, such as the number of tables, pictures, and footnotes, and the kinds of notes produced. The logs never contain the text of your document, its file name, or the values in it.
Messages you send us
If you write to us, we receive your email address and the content of your message.
What we do not collect
The Service has no accounts. The website sets no cookies, uses no local storage, and loads no analytics, advertising, or other third-party scripts.
3. Purposes and legal bases
We use the information above:
- to perform the conversion you requested and to provide the download link. Where the GDPR or the UK GDPR applies, this processing is necessary to perform our contract with you;
- to keep the Service secure and operational: to apply rate limits per IP address, to detect and investigate abuse and attacks, and to diagnose failures. This is our legitimate interest in operating a reliable service;
- to understand how the Service is used, through aggregate counts, sizes, and timings rather than content. This is our legitimate interest in improving the Service;
- to respond to your messages;
- to comply with legal obligations and to enforce our Terms of Service.
We do not use your information for advertising or profiling, and we make no automated decisions about you that have legal or similarly significant effects.
4. Recipients
- Hosting. The Service runs on servers provided by [Hosting provider] in [Country or region]. The provider processes information only on our instructions and only to host the Service.
- Legal requirements. We may disclose information where the law, a subpoena, or a court order requires it, or where disclosure is necessary to protect the rights, property, or safety of To XLSX Tools, its users, or others.
- Business transfers. If the Service is transferred in a merger, acquisition, or sale of assets, the information described in this policy may be transferred with it. We will post a notice on the website if that happens.
We do not sell personal information.
5. Retention
| Information | Kept for |
|---|---|
| Uploaded Word document | The duration of the conversion, in memory only. It is never written to storage. |
| Converted workbook, its file name, and the notes about it | Up to one hour after the conversion, or until you delete the workbook from the result page. |
| Server logs | For as long as they are needed to operate, secure, and improve the Service. The IP address in them is removed after one year; the remaining entries do not identify you. |
| Email correspondence | As long as needed to handle your request, and up to [two years] afterward. |
We retain the IP address for that period so that we can investigate abuse and attacks, which are often discovered long after they occur, enforce our Terms of Service, and establish or defend legal claims.
6. Security
Uploads and downloads travel over HTTPS. We collect as little information as the Service requires, and access to our servers is restricted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Do not upload documents that you are not permitted to share with a third-party service, and keep in mind that anyone with the link to your result page can use it until the workbook is deleted.
7. International transfers
Our servers are located in [Country or region]. If you use the Service from elsewhere, your information is transferred to and processed there. Where the law requires safeguards for such transfers, such as the European Commission's standard contractual clauses or the UK's international data transfer addendum, we rely on them.
8. Your rights
Where the GDPR, the UK GDPR, or a similar law applies, you have the right to request access to your personal data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format, and the right to lodge a complaint with your supervisory authority. Requests may be sent to [support@example.com]. Because our logs identify you only by IP address, we may ask for your IP address and the approximate time of your request in order to find the relevant entries.
Since we never store your documents and delete the converted workbook within an hour, in most cases the only personal data we hold about you is the IP address in our logs.
We do not track visitors across websites, so a "Do Not Track" or "Global Privacy Control" signal from your browser does not change how the Service behaves.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe that a child has provided us with personal information, contact us and we will delete it.
10. Changes to this policy
We may update this policy. The new version will be posted here with a new "Last updated" date. If a change materially reduces your rights, we will give more prominent notice on the website before it takes effect.
11. Contact
[Company name]
[Street address, City, State ZIP, Country]
[support@example.com]