Privacy Policy

1. Introduction & Overview

Welcome to FilesToSheet ("we", "our", "us"), an AI-powered document data extraction platform operated by Farvision Digital Media. We respect your privacy and are committed to protecting your personal data and confidential document content.

This Privacy Policy explains how we collect, use, store, process, and protect your information when you visit our website or use our web application to extract tables, bank statements, invoices, and documents into Excel and CSV files.

2. Information We Collect

We collect the following categories of information to provide and improve our service:

• Account & Profile Data: Email address, display name, and authentication tokens provided when registering or signing in via Firebase Authentication.
• Uploaded Document Data: PDF documents, image files (PNG, JPG, WEBP), bank statements, and invoices submitted for automated AI table extraction.
• Transaction & Payment Records: PayPal Order IDs, purchase timestamps, credit top-up amounts, and credit activity history ledger. (Note: We do not collect or store raw credit card numbers or financial account credentials.)
• Technical & Usage Logs: IP address, browser type, device identifiers, and system access logs recorded for security and rate-limiting purposes.

3. Document Privacy & AI Model Isolation

We enforce strict confidentiality on all customer files:

• No Public Model Training: Your uploaded documents, bank statement entries, and extracted financial data are NEVER used to train public AI or LLM models.
• Strict Purpose Limitation: Document content is processed exclusively for executing the extraction job requested by your workspace user.
• Isolated Sandboxing: Extractions are performed in isolated compute environments with automated memory cleanup after processing.

4. Security & Encryption Standards

We implement industry-standard technical and organizational security controls to prevent unauthorized access, alteration, or disclosure of data:

• Data in Transit: All HTTP communications are encrypted using 256-bit SSL/TLS encryption.
• Data at Rest: Storage buckets (Cloudflare R2) and databases (MongoDB Atlas) utilize AES-256 server-side encryption.
• Access Controls: Workspace access is restricted using strict role-based access token verification.

5. Data Retention & Automated Purge Policy

We operate under a strict zero-knowledge, automated deletion architecture:

• Immediate Source File Deletion: Uploaded source documents (PDFs, scanned documents, and image files) are deleted immediately and permanently from cloud storage as soon as table extraction completes.
• 24-Hour Extracted Data Purge & Manual Deletion: All extracted tabular columns, line items, and spreadsheet row records are automatically and permanently purged from our databases within 24 hours via automated maintenance schedules. Users can also manually delete their extracted data at any time immediately from their dashboard.
• Workspace Profile Data: Workspace account records (email, workspace membership, and credit transaction ledger) remain active until account deletion is requested by the user.
• You may request complete erasure of your workspace account and associated records at any time by contacting our support team.

6. Payment Processing (PayPal)

All credit pack payments are executed securely through PayPal using official PCI-DSS compliant checkout APIs. Your payment information is subject to PayPal's Privacy Statement. We receive only transaction completion confirmations, Order IDs, and credited amounts.

7. Your Rights & Contact Information

Depending on your location, you may have rights under applicable privacy laws (such as GDPR, CCPA, or DPDP) to access, correct, or request deletion of your personal data.

For privacy inquiries, data access requests, or deletion requests, please contact us at: