Privacy Policy

Effective Date: February 2026

Overview

Open Excel is a Chrome extension that lets you open and view Excel files (.xls, .xlsx) directly in Chrome. You can print, download the file, and (after sign-in) edit and locally save changes. Optionally, you can export a file to Google Sheets for editing in your Google account. We are committed to protecting your privacy and ensuring transparency in how data is handled.

Data Processing

By default, Excel files are processed locally in your browser (local-first). File content is uploaded only when you explicitly choose a feature that requires it:

• Cloud Save & Sync (Pro): uploads the workbook to your Open Excel account storage so you can access it across devices.
• AI tools (Pro): send only the selected cells/content (and optional column headers, if you choose to include them) needed to generate results.
• Google Sheets export (optional): uploads the workbook to your own Google Drive and opens it in Google Sheets.

We never upload your files in the background without an explicit action from you.

Local storage on your device

To provide core features, Open Excel stores some data locally in your browser:

• Excel file bytes are stored in the browser’s IndexedDB to support “Recent files” and local saving.
• Recent files list (metadata like file name and internal file id) and settings (e.g., open as tab/popup) are stored in chrome.storage.local.
• Session state (to keep you signed in for editing) is stored in chrome.storage.local.

You can remove individual recent items or clear the recent list, which also removes associated cached file data.

Account & Authentication (api.openexcel.org)

To enable editing (and local saving), Open Excel offers sign-in methods:

• Google sign-in (via Chrome Identity / OAuth)
• Email OTP (a one-time code sent to your email)

When you sign in, we process minimal data needed for authentication and security:

• Email address (identifier)
• Auth provider (Google or Email)
• Optional marketing consent (only if you choose it)
• Privacy policy version (to record which version you accepted)
• UI language (to improve your experience)
• Basic security signals such as IP address and user agent (used for abuse prevention like OTP rate-limiting)

We do not upload Excel file contents to our servers as part of sign-in. Files are uploaded only when you use Cloud Save & Sync, AI tools, or Google Sheets export.

Google Sheets (optional)

If you click “Edit in Google Sheets”, the extension exports the current workbook and uploads it to your Google Drive, converts it to a Google Sheets file (in your account), and opens it on docs.google.com. This upload happens only when you explicitly use this feature.

Permissions

The extension requests the following Chrome permissions:

• storage — store local settings, session state, and recent file metadata; and support local saving via cached workbook bytes in IndexedDB.
• identity — authenticate with Google when you sign in with Google and/or export to Google Sheets.

The extension also uses host permissions to access:

• https://accounts.google.com/* — Google OAuth sign-in flow
• https://www.googleapis.com/* — Google APIs (email/user info for sign-in; Drive API for upload when using Google Sheets export)
• https://docs.google.com/* — open the exported spreadsheet in Google Sheets
• https://api.openexcel.org/* — authentication backend (Email OTP and session)

Google OAuth scopes

• userinfo.email — used for Google sign-in to retrieve your email address.
• drive.file — requested only when you click “Edit in Google Sheets”. This scope is limited to files you create or select with the app and does not provide access to your entire Google Drive.

Data Retention

• Local cached files / recent list: stored locally to support Recent and local save; you can remove items or clear the list at any time.
• OTP codes: expire after a short time and are used only to complete sign-in.
• Sessions: expire after a limited period; you can log out to clear local session data.

Remote Code

The extension ships with all required assets and does not execute remote code.

Payments

If you purchase Open Excel Pro, payments are processed by Paddle, our Merchant of Record. Paddle may collect billing information such as your name, email address, country, tax or VAT details, and payment method information to process transactions, calculate taxes, prevent fraud, and provide receipts. We do not store your full card number on our servers.

Changes

We may update this Privacy Policy in the future. Updates will be posted here with a revised effective date.

Contact

For questions about this policy, email us at valmislab.studio@gmail.com.