Privacy

This page describes what the software actually does today, not what it might do later.

What we store when you upload

• The uploaded file itself, in private storage that is not readable from any browser.
• The corrected file, when one was produced.
• The report: counts, issue categories, row references and the short before/after samples shown to you.
• The file name, size, upload time and a checksum of the corrected file.
• A hash of a random ownership token we set as a cookie on your device.
• A hashed form of your network address, used only to rate-limit uploads.

Where it is stored

CSV Spruce runs on hosted cloud infrastructure: a managed Postgres database and a private file store, both operated by our hosting provider on our behalf. Your file contents are not sent to any other service, are not used to train anything, and are not processed by a language model.

What we do not do

• No accounts, no advertising, and no third-party tracking scripts added by us. We cannot promise the same for our hosting provider, which may record standard request logs or its own visitor measurement.
• No card details reach our server: payment happens on the payment provider's own hosted page.

Who can read your file

Database rules deny all browser-side reads of reports, files and payment records; only our server process and our hosting provider's operators can reach them, and the app only returns a report after checking the ownership token from your device. The report address alone is never enough to open a report or a download.

How long we keep things

Originals and unpaid corrected files are removed 24 hours after upload; paid corrected files are removed 7 days after payment. An hourly cleanup job is scheduled on this deployment and does the deleting; it skips a file while a checkout is genuinely in progress. Access is also cut off by time on its own, so an expired report cannot be opened or downloaded even if a cleanup run is late.

Deleting immediately

Every report page has a "Delete my file and report now" control. It removes the stored original and corrected file and marks the report deleted straight away. A paid download cannot be recovered after that.

Support messages

If you write to us through the support page, your message, any reply address you chose to give, and the report reference are stored in the same private database until we delete them by hand.

Payments

Payment is processed by Stripe on their hosted checkout page. We receive a signed event confirming the amount, currency and status, and store the identifier of that payment session against your report. We never see or store your card number.