SSC SpreadsheetConverter

Privacy Policy

Last updated: 27 September 2026

Where are you? This policy applies to users worldwide. If you are in the European Union, EEA, or United Kingdom, the GDPR / UK GDPR EU & UK Privacy Notice applies to you in addition to this page.

SpreadsheetConverter is operated by Framtidsforum I&M AB (Sweden). This policy explains what personal data we collect when you use the SpreadsheetConverter Microsoft Excel add-in and our online conversion, testing, and hosting services, and what we do with it.

What we collect

Microsoft 365 sign-in

You sign in with your Microsoft 365 account using Office.js single-sign-on. We capture your email / user principal name and your Microsoft Entra object identifier (oid) to identify your account, look up your plan (trial or paid), and keep an audit log of conversions. We never receive your Microsoft password.

Workbooks you convert

When you convert, test/preview, or publish a workbook, its contents (cells, formulas, charts, images, layout) are sent to our online services so we can produce, render, and — if you choose — host the resulting web page.

Telemetry

The add-in sends operational telemetry (error events, build version, browser type, your oid if signed in, and your IP truncated to a /24 subnet) so we can detect and fix bugs. Duplicate-widget and unreadable-widget reports include the affected widgets' stored settings and read errors. Those settings may contain workbook text, formulas and URLs. You can disable these reports by selecting Off in the task pane; Verbose also sends interaction logs. Anonymous timing beacons and a note when a new version is offered are sent regardless of this setting. Restricted telemetry logs are retained for 30 days.

Sign-in failure events additionally carry your organisation's Microsoft Entra tenant identifier and account type (work/school or personal), plus a random identifier stored in this browser so we can tell repeated failures apart from unrelated ones. Neither identifies you personally: we do not record your name, sign-in address, or user identifier on these events.

Where your data is processed

Our servers are located in the United States (Hetzner). We hold your account email and Microsoft Entra object identifier (oid). Enabled duplicate-widget and unreadable-widget diagnostics can also retain affected widget settings and read errors in restricted telemetry logs for 30 days. Workbook content is processed transiently during conversion, and published pages are stored at our hosting upstream.

We do not collect or store your payment or card details. Those are held by the Merchant of Record that processes your purchase (see Who we share with), not by us.

Cookies

We use one strictly necessary cookie, SscAuth, to keep you signed in (7-day expiry). We do not use analytics, advertising, or third-party tracking cookies.

Who we share with

We do not sell your personal information.

Your privacy rights

Wherever you are, you can ask us what personal information we hold about you, ask us to correct or delete it, and object to certain processing. Email privacy@spreadsheetconverter.com and we will respond as required by your local law.

Retention

Changes

Material changes bump the "Last updated" date above.

Contact

Questions: privacy@spreadsheetconverter.com.