Privacy Policy

1. Introduction

Flexel ("we," "us," or "our") is a privacy-focused platform operated from Bulgaria (EU). Unlike traditional cloud tools, Flexel is built on a Local-First architecture. This means your spreadsheet data is processed primarily within your web browser and is not uploaded to our backend servers for storage.

We operate in strict compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. How We Handle Your Data

2.1 Spreadsheet Files (Local Processing)

When you attach an Excel file or connect a Google Sheet:

• No Server Uploads: Your spreadsheet data remains in your browser's memory. It is NOT uploaded to, stored on, or archived in Flexel's database.
• Google Drive Integration: If you connect via Google, we use the API strictly to fetch the file contents into your browser session. We do not retain a copy of your files on our servers.
• Ephemeral Data: Once you close the browser tab, the spreadsheet data is cleared from the application memory unless explicitly saved to your browser's local storage.

2.2 Account & Meta Data

To maintain your subscription and settings, we collect and store only necessary metadata on our servers:

• Identity: Email address and encrypted authentication tokens.
• Settings: Configuration preferences (e.g., column mapping rules), but not the data values themselves.
• Billing: Payment history processed securely via Stripe.

3. AI Features & Data Privacy

Our AI functionalities (e.g., formula generation, data analysis) are designed with strict privacy boundaries:

• Stateless Processing: When you invoke an AI feature, only the specific context required is sent to the AI provider. The data is not retained after the request is completed.
• No Training: Your data is NEVER used to train our models or third-party models.
• Opt-in: AI features are only triggered by explicit user action.

4. Subprocessors

We minimize data sharing. We use the following trusted third-party services:

5. Your Rights (GDPR)

Under the GDPR, you have the right to access, rectify, download, or erase your account data. Since we do not store your spreadsheet files, "deletion" of account data is comprehensive.

Supervisory Authority: If you believe your data has been compromised, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP / КЗЛД).

6. Contact Us

Flexel is based in Bulgaria. For any privacy-related questions, please contact us at:

Email: privacy@flexel.app