Privacy Policy

This Privacy Policy explains how ReportSync ("ReportSync," "we," "us") collects, uses, and shares information when you use our website and application (the "Service"). By using the Service, you agree to the collection and use of information as described here.

1. Information we collect

Account information

When you create an account, we collect your email address and, if you set one, a password. You may optionally provide your name, company name, and a logo image (available on paid plans). If you subscribe to a paid plan, Stripe (our payment processor) collects your payment details directly — we never see or store your full card number.

The files you upload

The core of the Service is turning a spreadsheet you upload (CSV or Excel) into a report. We store the file itself and the data parsed from it, including any business, financial, or personal data it contains. You are responsible for having the right to upload and process that data through our Service.

Content you create

We store the reports, charts, executive summaries, and comments you create or edit, along with basic usage records — such as how many reports you've created, which plan you're on, and AI-generation activity used to enforce plan limits.

Information from people who view your shared reports

When you share a live report link, anyone who opens it is asked for their name and, optionally, their role — no account is required. We store that name/role, the time they viewed the report, and any comments they post, so you can see who's engaged with your report. This information is visible to you as the report's owner.

Cookies & analytics

We use a single functional cookie to keep you signed in. We also use Vercel Web Analytics, a cookieless analytics service that reports aggregate usage (like page views) without setting cookies or using any personal identifiers. We do not use advertising or third-party tracking cookies, and we do not run analytics scripts that follow you across other sites.

2. How we use information

• To operate the Service — parsing your files, detecting charts and trends, and generating executive summaries.
• To process payments and manage your subscription.
• To send transactional email — sign-in links, receipts, and service notices.
• To enforce plan limits and prevent abuse of the Service.
• To fix bugs, improve performance, and understand how features are used in aggregate.

We do not sell your personal information, and we do not use the contents of your uploaded files for advertising.

3. AI-generated summaries

To write your executive summary, ReportSync sends a derived version of your spreadsheet — column names, detected data types, computed statistics, and a sample of rows — to OpenRouter, a third-party AI routing service, which forwards it to an underlying language model to generate the summary text. That data is processed to generate your summary and is not used by us or, to our knowledge, by that provider to train their models. Review OpenRouter's privacy policy for details on how they handle data in transit.

4. Who we share information with

We share information with the service providers ("subprocessors") that help us run ReportSync, each bound to only use it to provide their service to us:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Stripe — payment processing and billing.
• OpenRouter — AI-generated executive summaries.
• Resend — transactional email delivery.

We may also disclose information if required by law, or to protect the rights, property, or safety of ReportSync, our users, or others.

5. Shared report links

A live report link is viewable by anyone who has the URL, until you revoke it or it expires. Only share links with people you intend to see the report's contents — ReportSync doesn't control who a link is forwarded to once it's shared.

6. Data retention

We keep your account and report data for as long as your account is active. If you'd like your account and associated data deleted, contact us at privacy@getreportsync.com and we'll process the request, subject to what we're required to retain for legal, billing, or fraud-prevention purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to certain processing. To exercise any of these rights, email privacy@getreportsync.com.

8. Security

We use industry-standard measures — encryption in transit, access controls scoped to your account, and least-privilege database policies — to protect your information. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

9. International data transfers

Our service providers may process and store information in countries other than your own. Where required, we rely on appropriate safeguards for these transfers.

10. Children's privacy

ReportSync is not directed to individuals under 16, and we do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

12. Contact us

Questions about this policy? Email us at privacy@getreportsync.com. See also our Terms of Service.