Privacy policy

Last updated 30 October 2026.

Who we are

SOV17 LLC, Yerevan, Armenia. hello@workbookapi.com.

Browser check

The check runs in your browser. Your file, its values, formulas and names are never sent to us. Running the check does not upload your workbook or mean you agree to upload it to the hosted API.

Anonymous site usage

We record page views (referring site, campaign tags), check results as ranges, which Excel features were found and button clicks. Our host adds the country. The site and browser check use no cookies, and we store no IP addresses or visitor profiles in this usage data.

Early access list

If you join, we store your email, role, how often your model changes, your choice, the time and your country — only to contact you about early access. We do not sell or share it.

Hosted API

Uploading to the hosted API is a separate action. We store your account email, workbook files and versions, calculation snapshots, declared inputs and outputs (the interface), compatibility reports, and usage counters. Only the active and previous version files are kept; version metadata stays while the model exists.

We process scenario input and output values to answer your calls, but do not store those values. Our logs and service metrics contain identifiers, counts and timings, never workbook content or scenario values.

Dashboard

The dashboard at app.workbookapi.com uses one sign-in cookie. We store sessions and hashed API keys, their kind and prefix. A session ends after 7 days without activity or 30 days in total. The cookie is used for sign-in, not advertising.

Retention and deletion

After access ends, we keep models, versions, snapshots, interfaces and reports for 30 days so you can resume with a subscription. We then delete them from primary storage. Account details and usage counters remain until you delete the account. Unverified accounts and their confirmation tokens are deleted 7 days after registration.

When you delete a model or account, its content becomes unavailable immediately. The deletion task erases files from primary storage. If storage finishes an in-flight file write later, that file is never available and is erased no later than 2 days after it appears. Backup copies expire no later than 30 days after each copy was made. These are separate deadlines for each object, not one deadline from your deletion request for every copy.

Logs are retained for no more than 30 days. Service metrics with identifiers and numbers, without content, may remain for up to 3 months. After account deletion, a marker without email or content remains for up to 30 days to prevent old payment events from restoring the account. Payment-event records without email or event bodies may remain for up to 90 days; revenue records retain amount, currency, time and payment identifiers without your email. Paddle keeps payment records as Merchant of Record.

Anonymous site usage and early-access list data are kept until 12 months after early access ends, or deleted sooner on request.

Support and operator access

An operator opens your workbook only when you ask for help with it through support at hello@workbookapi.com. Its content is used only to calculate for you and resolve that request. It is never added to our test collection or usage statistics. Support must obtain your request before opening the file.

Service providers

Cloudflare hosts the site, API and stored data and provides Turnstile for forms. Paddle.com is our Merchant of Record and processes payments. Fastmail sends account and support email. We share the data needed for those services, not workbook content with payment or email providers.

Your rights

Email hello@workbookapi.com to see, correct or delete your data or to leave the list.