Skip to main content

Privacy Policy

Updated on June 20, 2025

Introduction​

This Privacy Policy describes the types of information, including personal data, that we collect from you when you use our products—particularly our AI products such as AI-aided Formula Editor, Spreadsheet AI, and AI Agent for Excel. It also explains how we process that data and your options for accessing or updating your information.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, do not use our products. By accessing or using our products, you agree to this Privacy Policy. This Privacy Policy may change from time to time (see Changes to our Privacy Policy). Your continued use of our products after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.

Data controller​

Matrix Lead is the data controller of your personal data. Matrix Lead may be contacted in any manner set forth in the Contact information section of this Privacy Policy.

Data flow​

The general data flow of our AI products is as follows:

  1. Users enter their request in the software's user interface, opened within their Excel workbook.
  2. If needed and permitted, relevant data from the current workbook is collected and sent, along with the user's request, to our backend server.
  3. The backend server processes the request by calling OpenAI's API and retrieves the AI-generated result.
  4. The result is interpreted and displayed on the user interface for the user.

Workbook content access​

  • Our AI products assess the necessity of using workbook content. If required, it transmits relevant data along with the user's request to the backend server.
  • Users can opt to restrict access to workbook content (excluding any prompt text you manually type into the user interface of our products). While this limits contextual information and may impact results, it provides full user control.

Data transmission​

All data transfers are secured using HTTPS encryption. This ensures protection against interception or tampering during transmission, meeting the mandatory security requirements for add-ins listed in the Microsoft Office Store.

Data storage​

  • The backend server is hosted on DigitalOcean in London.
  • For a user request, we do NOT store the request content, any data from the workbook, or the response on our backend server.
  • Only minimal usage logging data is stored, including
    • The request timestamp
    • The tool and feature from which the request originated
    • The OpenAI model used, along with temperature and max_tokens settings
    • The number of consumed tokens
    • Whether the request resulted in an error
    • The duration of the request

AI model training​

  • We rely solely on OpenAI’s models and do not train any data ourselves.
  • OpenAI does NOT use the data from their API to train their models (see here). OpenAI is a well-known, trusted provider.

Collection of personal data​

We collect minimal personal data for account management and operational needs:

  • Email Address: Used for account authentication and communication
  • Encrypted Password: Stored securely with standard salted hashing
  • The date the user signed up
  • IP Address: Logged for security auditing and rate-limiting
  • User settings: Such as preferred language for the tool interface, font size for the editor, and selected models used within the tools

Special categories of information. Matrix Lead does not ask you to provide, and we do not knowingly collect, any special categories of Personal Data from you, such as personal data that reveals your racial or ethnic origin, political opinions, religious, philosophical beliefs, or trade unions membership, or the processing of data concerning your health or data concerning your sex life or sexual orientation or history of criminal convictions.

Newsletters​

Users must consent to subscribe to our newsletters during sign-up and prior to using our products. We use these newsletters to share information related to the spreadsheet domain, including our products, services, events, and other relevant activities that may be of interest to you. You may opt out of receiving these communications at any time by following the unsubscribe link included in every email or by contacting us using the information provided below.

Sub-processors​

Sub-processors provide infrastructure and services that support the processing of customer data.

  • OpenAI (see https://openai.com/) provides the AI API and is headquartered in the United States. OpenAI has successfully completed a SOC 2 audit. For full details, please see here.
  • DigitalOcean (see https://www.digitalocean.com/) is also headquartered in the United States. The DigitalOcean server hosting Matrix Lead’s services is located in London, United Kingdom. DigitalOcean holds certifications including ISO/IEC 27001:2013 and SOC 2 Type II. For full details, please see here.

Data retention​

A user's personal data and usage logging data are retained only for as long as their account remains active. Users may request the deletion of their data at any time.

Your rights​

You have the following rights regarding your personal data, subject to applicable laws and certain limitations. To exercise any of these rights, please contact us using the information provided in the Contact information section.

  • Access. You have the right to request access to the personal data we hold about you, including details about how we use and share it.
  • Rectification. You may request corrections to any inaccurate or incomplete personal data we hold about you.
  • Erasure. You can ask us to delete your personal data, for example when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
  • Restriction of processing. You may request that we limit the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to its processing.
  • Data portability. You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format and to transmit it to another service provider, where technically feasible.
  • Object. You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Lodge a complaint. If you believe that we have violated your data protection rights, you have the right to lodge a complaint with your local data protection authority.

Case of Spreadsheet AI for Sheets™​

Compliance with Google's Limited Use Policy. Spreadsheet AI for Sheets™ will use and transfer information received from Google APIs to any other app in accordance with Google API Services User Data Policy, including adherence to the Limited Use requirements.

Data Sharing by Spreadsheet AI for Sheets™ with Third-Party Tools. When using Spreadsheet AI for Sheets™, users can import data from their Google Sheets™ workbook into the chat copilot or directly enter data in the chat. This data, not saved on our server, is shared with the underlying AI models from OpenAI to generate a response. This shared data will not be used to train OpenAI's models. Users must sign up to use Spreadsheet AI for Sheets™. When signing up, users need to check a box and give explicit consent for their data to be shared in this manner:

Data consent

Changes to our Privacy Policy​

This Privacy Policy is effective as of June 20, 2025 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We may change this Privacy Policy at any time. It is our policy to post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat our users' personal data, we may also notify you by email to the email address specified in your account and through a notice on the website. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our website and this Privacy Policy to check for any changes.

Contact information​

If you have any questions, concerns, complaints or suggestions regarding our Privacy Policy, have any requests related to your personal data pursuant to applicable laws, or otherwise need to contact us, you can reach us using the contact information below or through the Contact page on our website.

contact@matrixlead.com
Tel: (+33) 6 31 92 16 35
21 Rue Basly, 92230 Gennevilliers, France