Privacy Policy

Your Data Protection Rights

Welcome to XL-Factor's Privacy Policy. This document explains how we collect, use, disclose, and safeguard your information when you use our Excel conversion and processing tools. Please read this policy carefully. By accessing or using our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect different types of information to provide and improve our services:

a. Data You Provide Directly

  • Excel Files: When you upload files for processing, we temporarily store them to perform conversions. Files are automatically deleted after processing unless you opt for extended storage.
  • Account Information: If you create an account, we collect name, email, and password (hashed). For premium services, payment details are processed through PCI-compliant gateways.
  • Communications: Emails, support tickets, and feedback you send us.

b. Automatically Collected Data

  • Usage Data: IP address, browser type, device information, pages visited, and session duration.
  • Cookies: We use essential, analytics, and (if applicable) marketing cookies. Manage preferences via browser settings or our cookie banner.

2. How We Use Your Information

Purpose Legal Basis
Processing Excel conversions Performance of contract
Improving tool functionality Legitimate interest
Customer support Contractual necessity
Fraud prevention Legal obligation
Marketing (opt-in only) Consent

3. Data Storage & Security

a. Storage Locations

Our servers are hosted in EU/US with GDPR/SOC 2 compliance. International transfers use Standard Contractual Clauses (SCCs).

b. Protection Measures

  • Encryption: TLS/SSL for data in transit; AES-256 for data at rest
  • Access Controls: Strict role-based permissions for staff
  • Regular Audits: Penetration testing and vulnerability assessments

c. Retention Periods

  • Excel Files: Deleted immediately after processing and when the user resets the tool (i.e. deleting Excel files is the user's responsibility)
  • Account Data: Retained until deletion request or 2 years of inactivity
  • Logs: 30-90 days for security monitoring

4. Third-Party Sharing

We may share data with:

  • Cloud Providers: AWS and Google Cloud for hosting services, as well as other hosting providers.
  • Analytics: Google Analytics (anonymized where possible)
  • Legal Authorities: When required by law (e.g., subpoenas)

We prohibit third parties from using your data for unrelated purposes.

5. Your Rights (GDPR/CCPA)

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Delete your data (with legal exceptions)
  • Portability: Receive your data in a machine-readable format
  • Object/Opt-Out: Of marketing or automated decisions

To exercise these rights, contact us at xl.factors@gmail.com. We respond within 30 days.

6. Children's Privacy

XL-Factor does not knowingly collect data from children under 16 (or higher per jurisdiction). Parents/guardians may contact us to remove such data.

7. Policy Updates

We will notify users of material changes via:

  • Email: For registered users
  • Website Banner: Displayed for 30 days before changes take effect

8. Contact Information

For questions or requests regarding your privacy:

Email: xl.factors@gmail.com

Data Protection Visual