Your spreadsheet stays in your browser.
We analyze your file on your device and only work with the summary it produces. Here is exactly what that means, what we keep, and who helps us run the service. Last updated: October 2026.
Your file is processed in your browser
When you upload a CSV or Excel file, it is read, cleaned and analyzed inside your browser. The file itself and its full set of rows are never uploaded to our servers. The one exception is Google Sheets import: if you paste a link to a shared sheet, our server downloads that sheet's CSV export from Google and passes it straight to your browser. It is not stored or logged.
What is sent to the AI
To write your report, we send Anthropic (USA) a computed summary of your file through their Claude API: column names, row counts, totals, averages, ranges, trends, correlations, and the most common values in category columns (for example your top products or, if your file has one, your top customers). Your answers to the intake questions and any follow-up questions you ask the analyst are sent too. The full file is not. Anthropic does not use API data to train its models; its own privacy policy governs how it handles these inputs.
What we store, and why
When you have an account, we store: your email address and account ID; your plan, usage counts and payment status; and each report you run, which includes the file name, the computed summary described above (with the data points behind the charts), the written analysis, your intake answers, any client label you add, a list of cleaning changes, and a share link if you create one. Reports are kept so you can reopen them, compare against them later, and download them again. We also keep any thumbs up or down you give an insight, so we can improve the analysis. The cleaned spreadsheet you download is generated in your browser and is not stored by us. On Pro and Premium, each saved report is also split into short text passages (its findings and the computed totals, never your raw rows) and stored with a search index, so you can ask questions across all your reports. These passages are deleted along with the report.
Shared links
If you create a share link for a report, anyone with that link can view a read-only copy of it. Only share links with people you intend to see the report.
Who processes data for us
Clerk (USA) handles sign-in and accounts. Supabase stores account and report data. Stripe (USA) processes payments; we never see your full card number. Resend (USA) sends our emails, such as welcome emails and report summaries. Anthropic (USA) generates the written analysis. Voyage AI (USA) turns report passages and the questions you ask across your reports into search vectors (Pro and Premium only). Langfuse (EU) records performance data for that search feature, such as response time and cost; it does not receive the text of your questions, reports or answers. Vercel (USA) hosts the site. Some of these providers store data outside Canada, mainly in the United States and the European Union. We do not sell your data or share it with anyone else, and we do not use it for advertising.
Emails you give us
If you request a demo, or enter your email to receive a preview, we use that address to reply to you and send what you asked for. We don't add you to a marketing list without asking.
Cookies and analytics
We use the cookies needed to keep you signed in. We use Vercel Web Analytics to count page views, which works without cookies and without identifying you. We run no advertising pixels or cross-site trackers. While you are working, your browser temporarily keeps your analysis in session storage so it survives sign-up and checkout; it is cleared when you close the tab.
Deleting your data
You can ask us to delete any report, or your whole account and everything attached to it, at any time. Email us at the address below and we will confirm once it's done. Payment records Stripe must keep for tax and legal reasons are retained by Stripe as the law requires.
Governing law, PIPEDA (Canada)
CalGrid AI is a Canadian product. This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA). You can ask us what personal information we hold about you and have it corrected. If you have a privacy concern we haven't resolved, you have the right to contact the Office of the Privacy Commissioner of Canada.
Questions
We're a small team. If you have any questions about how your data is handled, email us at hello@calgridai.com and we'll reply.