This Privacy Policy explains how Formula Foundry (“we”, “our”, “us”) collects, uses, discloses and safeguards information when you install or use the Formula Foundry Google Sheets™ and Microsoft Excel™ add-ons, visit https://www.formulafoundry.io (“Site”), or otherwise interact with us.
1. Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account & Profile Information | Google account ID, display name, email address and profile photo URL (via People API) — collected only after you grant access. For Excel installs we receive your Microsoft account email and display name. | Identify your account, personalize the UI and provide support. |
| Spreadsheet Content | Variable values you define via the Add-on are stored only inside a hidden sheet within your own spreadsheet. We do not copy or store your sheet data on our servers. | Core functionality — resolving custom variables in formulas. |
| Usage Data | Add-on feature usage events, crash logs and anonymous analytics (timestamp, feature flag, generic device/browser metadata). | Improve performance, fix bugs and develop new features. |
| Support Communications | Messages you send to support@formulafoundry.io. | Respond to your inquiries and troubleshoot issues. |
We do not knowingly collect sensitive personal data, nor do we sell personal data to third parties.
2. How We Use Information
- Provide, operate and maintain the Service
- Monitor and analyze usage for stability, security and improvements
- Respond to comments, questions and requests
- Send administrative messages (e.g., policy changes, security notices)
- Comply with legal obligations and protect our rights
3. Legal Bases for Processing (GDPR)
Where the EU General Data Protection Regulation applies, we process your data under the following bases: (i) performance of a contract (providing the Service); (ii) legitimate interests (service improvement, fraud prevention); (iii) compliance with legal obligations; (iv) your consent, where required.
4. Sharing of Information
We share information only:
- Service Providers. We use trusted sub-processors (e.g., Google Cloud™, Microsoft Azure, OpenAI) who process data on our behalf under agreements that protect your privacy.
- Legal. If required by law or to protect rights, safety or property.
- Business Transfers. In connection with a merger, acquisition or asset sale, your information may be transferred, subject to confidentiality commitments.
We do not share your spreadsheet content with advertisers.
5. Cookies & Similar Technologies
Our Site uses three categories of cookies and similar technologies:
- Strictly necessary. Session, security and anti-fraud cookies, plus the cookie that stores your consent choice. These are always on because the Site cannot work without them.
- Product analytics. PostHog records how visitors use the Site (for example page views and button clicks) so we can improve it.
- Marketing & advertising. Advertising tags such as Google Ads and LinkedIn Insight, loaded through Google Tag Manager, measure the campaigns that brought you to the Site and may be used to show you relevant ads on those platforms.
Product analytics and marketing cookies stay off until you give consent in the cookie banner. You can change or withdraw your choice at any time with Manage cookies in the Site footer.
6. Data Retention
- Spreadsheet Content. Remains only in your own Google Sheets™ or Microsoft Excel™ files.
- Usage Logs & Analytics. Retained for up to 24 months, then aggregated or deleted.
- Support Emails. Retained for as long as necessary to resolve the inquiry and for 3 years thereafter.
7. Data Security
We follow industry best practices — including encryption in transit (TLS 1.2+), least-privilege access controls and periodic security reviews — to protect your data.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
8. International Transfers
We are headquartered in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US or other countries where we or our providers operate. We rely on Standard Contractual Clauses or equivalent safeguards for cross-border transfers where required.
9. Your Rights
Depending on your location, you may have rights to:
- Access, correct or delete personal data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with a supervisory authority
To exercise rights, email support@formulafoundry.io.
10. Children’s Privacy
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have unintentionally collected such data, contact us to delete it.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Material changes take effect 30 days after posting. We will notify you via the Add-on or email if required by law.
12. Contact Us
For privacy questions, email support@formulafoundry.io.