Scope and contact
This policy describes information handled by the CSV Review service at csvdifftool.xyz. For questions about privacy, access to your information or deletion, email mysave@qq.com. Include your account email if relevant, but do not send your password, payment-card details or a private API key. We may need to confirm that a request concerns your own account.
Files and comparison results
CSV, TSV, XLS, XLSX and ODS contents are sent over HTTPS to the application server for parsing and comparison. Files are not processed entirely within your browser. Anonymous comparisons run in memory and are not saved to the application database. Inputs and results remain in browser tab memory until you reset them or leave; file contents are not put in browser local storage. File contents are not sent to an AI service.
When you choose Save report, the application stores comparison evidence, including original compared values, rules and input fingerprints, for your account. Report contents are encrypted at rest. Report names, summary counts, creation and expiry dates are separate database fields. Rule profiles contain their names and matching settings. Profiles and report metadata are stored as ordinary database fields, separate from encrypted report contents. Only the signed-in, verified owner can retrieve account reports through the application.
Accounts, security and essential cookies
An account stores your email address, salted password hash, creation time, verification status, saved settings and the work you choose to keep. We use these records to sign you in, isolate your workspace and enforce allowances. A session cookie lasts up to seven days. There are no advertising scripts or third-party analytics.
Verification and password-reset links are sent to your account email. Their tokens are stored as hashes, expire after 60 minutes and 20 minutes respectively, and can be used once. Completing a password reset revokes existing sessions. Expired authentication records are removed by request-time cleanup and a background sweep. If email delivery is unavailable, the service reports that state rather than claiming to have sent a usable link.
Hosting infrastructure processes requests and may retain access metadata, such as an IP address, request time and response status. The application uses request information to enforce resource limits and records safe operational errors; it does not log uploaded request bodies. HTTPS and encryption reduce risk but do not make any internet service risk-free.
Retention and backups
New saved reports expire after seven days on Free or 90 days on Pro when available. Any Pro checkout shown in this environment is a Sandbox test without real charges. Each report keeps its original expiry when your plan changes. Expired reports are removed on requests and by a background sweep every 15 minutes. You can delete a report or rule profile earlier in your workspace. Profiles and account information otherwise remain while the account exists.
Encrypted database backups are created daily on the same VPS and retained for up to seven days. Deleting a live record does not immediately erase older backup copies. The backup files do not include the encryption key; no off-site disaster recovery copy is configured. Download reports you need as permanent records.
Optional feedback and support email
The Feedback button creates a preview image of the current website viewport in tab memory. Password fields and account dialogs are excluded, but visible file values may appear. You can inspect, retake or remove the image before sending.
With your explicit agreement, your description, optional reply address, page path and optional screenshot are emailed to mysave@qq.com through the service's mail infrastructure. Query strings and fragments are excluded. Those message contents are not stored in the application database. A submission identifier, content fingerprint and delivery status are retained for up to 30 days to prevent duplicate sends, with request-time and background cleanup. Mail infrastructure and the recipient mailbox may keep delivered messages independently; deleting an application account does not recall them. Acceptance by a mail server does not prove inbox delivery.
Payments when checkout is available
Any checkout shown in this environment is a Sandbox test. Use test payment details only, never a real card. For a Paddle purchase, you provide payment and billing information directly to Paddle Checkout. CSV Review does not store full payment-card numbers or security codes. The application sends the selected subscription price and an internal account reference so that a confirmed purchase can be linked to the correct workspace. Compared file contents are not sent as part of checkout.
Account-linked records may include Paddle customer, subscription and transaction identifiers, price and subscription status, period and scheduled-change times, refund or credit status, amount and currency, and synchronization times. We use them to deliver paid allowances, show billing status, prevent duplicate purchases and resolve payment problems. Provider event identifiers, entity identifiers, timestamps, processing state and safe error codes are also kept to prevent duplicate processing and keep subscription records up to date. This processing log does not retain complete provider notifications, signatures or card details.
Paddle handles payment information and retains its own transaction records under its Privacy Policy. Its retention and deletion processes are separate from the CSV Review account. Hosting and mail services also process information needed to provide this service. If you have a specific data-residency requirement, contact support before uploading; this beta does not offer a selectable storage region.
Your controls and account deletion
You can use the comparison tool without an account, choose whether to save evidence, download unexpired reports, delete individual reports or profiles, and remove a feedback screenshot before sending. You may contact support to request access, correction or deletion of account information. The rights available to you also depend on applicable law.
Account deletion requires your password and removes account records, sessions, authentication links, saved profiles, reports and account-linked billing records from the live application database. An active or unresolved subscription or payment must be resolved first; see Cancellation and refunds.
Deletion does not automatically remove earlier backups, support messages, Paddle records or independent payment-event records. Payment-event records currently have no automatic expiry; they are used to prevent duplicate processing and investigate synchronization problems. Contact support for a request concerning those records. Deleting your account does not remove every payment-related record.
Appropriate use and policy updates
The beta is intended for people authorized to process their files. Do not upload sensitive production data or send unnecessary personal information in support examples. We do not use uploaded contents for advertising. This page will be updated when the service's processing changes; the date above identifies the current policy.