Privacy Policy

Jev for Excel ("the add-in") is developed by SulfurByte ("we", "us"). This policy explains what the add-in sends when you use it, where that goes, and what is kept. The short version:

This policy also covers the waitlist on our website, which is separate from the add-in and has its own section below.

What the add-in sends

Loading the add-in fetches its files from jev.sulfurbyte.com. The task pane checks whether the service is running and how much of today's usage limit you have used, which sends only the add-in's installation ID. Neither sends any of your text. Your text is only sent when a JEV. formula calculates. Then the add-in sends:

• the text of the cells in the formula's data range (rows that are empty are skipped and never sent);
• the question you wrote in the formula;
• the options, levels or list entries you gave it, including any descriptions next to them;
• the add-in's installation ID, a random code described under Usage limits below.

Excel hands a formula only the values of the cells it names, so the add-in never sees the rest of your workbook. It doesn't send other cells, file names, your name, your Microsoft account or anything about your computer. The task pane's buttons work locally: Retry failed cells recalculates, which sends again, as above, any formula whose answer the add-in doesn't remember (normally just the failed ones), and Freeze selection sends nothing.

Where it goes

1. Our server

Requests go first to our server at jev.sulfurbyte.com, which runs on Cloudflare. It checks the request, adds our OpenRouter key, and forwards it. It doesn't store the text. For each request its logs record the result status, the number of questions, how long it took and what it cost. When something goes wrong they also record the error, such as a usage limit being reached or an error message from OpenRouter about our account. They never record the text of your cells or your questions, or your installation ID. Like any website, Cloudflare also records technical details of each request, which can include your IP address and approximate location, and keeps them for a few days (seven at most). Your IP address is also used to count requests over one minute for the per-address rate limit described in the Terms of Service. We don't keep that count. The daily limits are described under Usage limits below. See the Cloudflare privacy policy.

2. OpenRouter

OpenRouter receives the request from our server, under our account. It doesn't receive your IP address or anything that identifies you, only the text, question and options listed above. Our account has OpenRouter's optional prompt logging switched off, so OpenRouter doesn't store the text of requests or answers. It keeps only request details such as token counts and timing, and it doesn't use requests for model training. See the OpenRouter privacy policy.

3. TypeSafe's Jev model

OpenRouter passes the request to Jev, the decision model made by TypeSafe AI, Inc., which works out the answer. The answer returns the same way to your cell. TypeSafe hosts its services in the United States, states that it does not train or fine-tune any model on the input it receives, and keeps data for as long as reasonably necessary to provide its services. See the TypeSafe privacy policy.

OpenRouter and TypeSafe handle what they receive under their own privacy policies, which can change, and we don't control them. Don't use the add-in on text that must not leave your organisation.

Usage limits

Everyone who uses the add-in shares one account with OpenRouter, so our server gives each installation and each network address a daily budget, measured in what requests cost. To do that, it keeps a running total for the current day, one per installation ID and one per network address. For this it stores:

• the installation ID: a random code the add-in creates the first time it is used (when a formula first sends a request or the task pane first opens) and saves in its own storage on your computer (in your browser's storage if you use Excel on the web). It isn't derived from anything about you, your computer or your Microsoft account;
• a hash of your IP address: a one-way code computed from it with a secret key, so it can't be turned back into the address by trying every possible address. The address itself isn't stored. For an IPv6 address, only its first half is used, which identifies your network rather than your device;
• the day's cost totals.

Nothing else is stored with them: no text, questions, answers or times of individual requests. The totals are kept in Cloudflare's storage and deleted automatically shortly after the day ends at midnight UTC. We use them only to enforce the limits, never to track you or build a profile of you. If you remove the add-in or clear its storage, it creates a new installation ID.

What stays on your computer

While Excel is open, the add-in remembers answers in memory so that asking the same question about the same text again doesn't send it again. That memory is cleared when you close Excel or the add-in reloads. The add-in doesn't save your text or answers anywhere else. Answers in your cells are saved with your workbook, like any other cell value. The only thing the add-in saves on your computer is its installation ID, described above.

Personal and sensitive data

If the cells you point a formula at contain personal data, such as names, email addresses or customer messages, that data is sent as described above. You decide what to send, so only do so when you're allowed to share it with these services. Please don't send special categories of data (health, religion, political opinions and the like) or confidential information you have promised to keep to yourself.

Microsoft

The add-in runs inside Microsoft Excel and loads Microsoft's Office add-in library from Microsoft's servers. What Excel and Microsoft collect is covered by the Microsoft Privacy Statement, not by this policy.

Waitlist

Before the add-in is released, you can join a waitlist on our coming soon page. This is on our website, not in the add-in, and it is optional: nothing happens until you type your email address and submit it.

• What we collect: only the email address you type in. Nothing is pre-filled, and the page doesn't read an address from your browser.
• Why: to email you when Jev for Excel is available. You may also get a short email right after you sign up, confirming that you joined. We don't use the address for anything else.
• Legal basis: your consent, given when you submit the form. You can withdraw it at any time.
• Who processes it: the address passes through our website on Cloudflare to Sender (sender.net, UAB Sender.lt in Lithuania), an email service that stores the list and sends the email for us. We never sell, rent or share the address with anyone else.
• Opens and clicks: like most email services, Sender records whether you open our emails and which links in them you click, and shows us the results. We use them only to check that our emails arrive and are read, and they are deleted along with your address.
• If someone else entered your address: a signup takes effect straight away, so an address can be submitted by someone other than its owner. Every email has a one-click unsubscribe link, and you can also email us and we will delete the address.
• Retention: we keep the address until the launch email has been sent, then delete the whole waitlist. If you unsubscribe before then, Sender keeps your address marked as unsubscribed, so that you aren't emailed again, until the list is deleted. If you ask us to delete your address, we delete it right away.

What we don't do

• No user accounts and no sign-in
• No advertising and no ad networks
• No analytics or tracking, in the add-in or on our server (the installation ID is used only for the daily limits; waitlist emails do record opens and clicks, see Waitlist)
• No storing of your cell text or answers on our server
• No selling or sharing of personal data beyond what is described above

Legal basis and transfers

We send your text on to OpenRouter and TypeSafe because you asked for an answer: it is needed to provide the service under the Terms of Service. The short-lived request logs and the usage limits, including the installation ID and the hashed IP address they store, rely on our legitimate interest in keeping the service working and preventing abuse. Cloudflare and OpenRouter operate worldwide and TypeSafe is hosted in the United States, so your data is processed outside the EU and EEA, including in the United States. The waitlist relies on your consent, as described above. Sender, which holds the waitlist, is based in the EU (Lithuania); the address reaches it through Cloudflare.

Data retention and deletion

Our server keeps no copy of your text or answers, so there is nothing of yours for us to delete. The technical request logs expire on their own within seven days. The daily usage totals, with the installation ID and hashed IP address stored alongside them, are deleted shortly after midnight UTC at the end of each day. The in-memory answers disappear when Excel closes. Answers already in your workbook are deleted like any other cell value. If you joined the waitlist, your email address is kept and deleted as described under Waitlist.

Children

Jev for Excel is not directed at children under 13, and we do not knowingly collect personal data from children.

Your rights

If you are in the EU or EEA, you have rights under the GDPR, including access, correction and erasure of personal data, and the right to complain to your data protection authority. Since we hold no personal data about you beyond the short-lived request logs and daily usage totals described above (and your email address, if you joined the waitlist), most requests can be answered straight away. Either way, contact us and we will help.

Changes to this policy

If we change this policy, the new version will be posted at this address with an updated "last updated" date. If we ever change what the add-in sends or where it goes, we will update this policy before the change takes effect.

Contact

Data controller: SulfurByte, the trading name of David Košnar · Rumunská 789/11, 779 00 Olomouc, Czech Republic · IČO 46784519 · [email protected]