Trust center

Privacy Policy

This page explains what the public XLS-SQL beta processes when you upload a workbook, run a query, use the AI assistant, or visit the website.

Draft placeholders remain for the legal operator and privacy email. Replace [LEGAL OPERATOR NAME], [JURISDICTION], and [PRIVACY EMAIL] before production publication.

Who operates XLS-SQL

XLS-SQL is operated by [LEGAL OPERATOR NAME], established in [JURISDICTION]. Privacy questions can be sent to [PRIVACY EMAIL].

File processing

When you upload an XLSX, XLS, CSV, TSV, ODS, JSON, HTML, or Parquet file, it is sent to the XLS-SQL server. One table (the first worksheet for spreadsheet formats) is parsed and stored in a temporary PostgreSQL table so previews, SQL queries, and exports can be produced.

File processing happens on the XLS-SQL server rather than only on your device.

Temporary sessions and deletion

A random session identifier links the browser to its temporary table. Server retention is configurable by the deployment; the current production configuration should be confirmed before publication. Local development defaults may differ.

Choosing New upload requests immediate deletion of the active server session. Expired sessions are removed by a background cleanup process. XLS-SQL currently has no accounts or saved projects.

Browser storage

xls-sql-session-id stores the temporary session identifier and client-side expiry.
xls-sql-ai-hint-last-shown limits how often an AI hint is displayed.
xls-sql-cookie-notice-seen remembers that the analytics notice was dismissed.

Analytics and cookies

Google Analytics and Yandex Metrica load when the site opens. These services may use cookies and receive technical usage information such as page URL, browser details, approximate location, link interactions, and visit timing. Yandex Webvisor is disabled so workbook previews, SQL editor contents, and AI responses are not recorded from the page.

XLS-SQL should not send workbook cell values, uploaded filenames, session identifiers, full SQL, or AI prompts as custom analytics events. Provider processing is governed by their own terms.

AI assistant

If you choose Ask AI, your prompt, the generated table schema, the total row count, and up to the first 20 rows are sent to DeepSeek to draft SQL. The draft is returned to the editor and is not executed automatically.

Your choices

Use the synthetic files on the Examples page instead of your data.
Avoid the AI assistant if you do not want sample rows sent to DeepSeek.
Choose New upload to request deletion of the current session.
Use browser controls to clear local storage and analytics cookies.
Contact [PRIVACY EMAIL] with a privacy request.

Policy updates

This draft was prepared for the public beta on July 19, 2026. Material changes should be published here with an updated date.