This Privacy Policy describes how Excel Permissions ("we", "our", "app") collects, protects, uses, and handles your information when you use our mobile, web, and desktop applications.
1. Information We Collect
To provide secure spreadsheet management and enterprise access control, we collect and process the following categories of information:
- Account Information: Your email address, full name, encrypted password hash, and designated organizational role.
- Files & Documents: Excel spreadsheets (.xlsx) uploaded, viewed, and modified by users, including granular cell/range permissions and revision history.
- Biometric Authentication: Optional fingerprint or biometric unlock features for fast and secure access. Biometric data is processed exclusively on your device (via SecureStore) and is NEVER transmitted to or stored on our servers.
- Device & Notification Data: Device model, OS version, and Firebase Cloud Messaging (FCM) device push tokens used solely to deliver real-time update notifications.
- Audit & Security Logs: Timestamps of file open/save actions, session durations, and IP addresses to maintain security audits and prevent unauthorized access.
2. How We Use Your Information
- To authenticate users and enforce granular column, row, and sheet permissions;
- To synchronize spreadsheets across authorized mobile, web, and desktop clients in real time;
- To prevent data conflicts and data loss during concurrent multi-user editing;
- To deliver critical notifications about file updates and permission changes;
- To safeguard the integrity of enterprise data through comprehensive audit logging.
3. Data Security & Encryption
- AES-256 Encryption at Rest: All uploaded files and sensitive data are encrypted with unique Data Encryption Keys (AES-256-GCM) on the server.
- Encryption in Transit: All communications between the app and backend are encrypted using industry-standard SSL/TLS (HTTPS & Secure WebSockets).
- No Third-Party Sharing: We do not sell, rent, or trade your personal information or spreadsheets to third parties or advertising networks.
4. Third-Party Services
We utilize Google Firebase Cloud Messaging (FCM) solely for sending real-time push notifications. FCM operates under Google's strict privacy and security standards.
5. User Data Deletion & Rights
You have the right to request deletion of your account and all associated personal data and files. To initiate a data deletion request, please contact our support email below. Requests are processed within 48 hours.