The short version

There is no account, so we do not know who you are. Your spreadsheet is read and charted on your own device and is never uploaded. There is no advertising and no tracking; page views are counted anonymously, as described below.

One feature sends data onward — the AI analyst — and it is described below rather than buried.

Who the data fiduciary is

For the purposes of India's Digital Personal Data Protection Act 2023 the data fiduciary — and the data controller under UK and EU GDPR — is Mrinal Singh Raja, an individual publishing under the name "MSRX".

What leaves your machine, and what does not

Two things happen in this app and they have completely different privacy properties.

Loading a spreadsheet, profiling it, editing cells and drawing every chart happens entirely inside your browser. The file is read by JavaScript on your own device. It is not uploaded, so there is no copy of it anywhere for us to keep, lose, or be compelled to hand over. You can disconnect from the network and the studio still works.

The AI analyst is the exception. When you ask it a question, we send the shape of your data — column names, their types, summary statistics, the data health report, correlation pairs — together with a small sample of rows, to our server, which forwards it to Groq to produce the answer. Column names and sample rows can contain real values from your file.

If your data is confidential, that matters. Everything except the AI analyst works without sending anything anywhere, so the studio remains fully usable if you never open the analyst.

What we do not collect

• No account, name, email address or password — there is nothing to sign up for.
• No tracking pixels, advertising network or fingerprinting, and no count that could identify you.
• No copy of your spreadsheet, your charts or your .graphiq projects.

Anonymous visit counts

We count visits with Vercel Web Analytics, which is part of the service that hosts this site. It sets no cookies and stores nothing on your device. For each page view it records the page address, the site that linked you here, an approximate location (country, region and city) worked out from the request, and your browser, operating system and type of device. Anything after a ? or # in the address is removed before the count is sent, because that part can hold something you typed.

It does not store your IP address. Visitors are told apart only by a hash of the request that Vercel discards after 24 hours, so a page view cannot be tied to you, to your other visits, or to what you do on other websites. What we see is totals: how many people opened which page.

On this plan Vercel shows the figures for a month and may keep them longer, and we copy the daily total for each app into a private dashboard. Neither describes any individual. We count visits because knowing whether an app is used is in our legitimate interest, and the count is built so that it cannot identify you. A content blocker, or turning JavaScript off, stops the count and changes nothing else about the site.

Who receives what

• Groq — receives the data profile and sample rows when, and only when, you ask the AI analyst a question.
• Vercel — hosts the site, records ordinary request logs (time, path, status code and IP address) to keep the service running and stop abuse, and counts page views anonymously as described above.
• Nobody else. There is no advertising network and no data broker.

Retention

We keep nothing about you. There is no database. An analyst answer is generated and returned; it is not stored afterwards. The only figures kept are the anonymous daily visit totals described above.

Your projects and exports are on your own device and are yours to manage.

Children

This is a tool for working with data and is not directed at children. Do not use it if you are under 13.

Your rights, and complaints

You may ask what personal data of yours we hold, have it corrected, or have it erased. In practice we hold none, so the honest answer is that there is nothing to give you — and we will say that plainly rather than pretend a process exists.

Requests and complaints go to Mrinal Singh Raja at mrinalsinghraja@gmail.com. That address is also the grievance contact for the purposes of India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. We aim to acknowledge within 24 hours and resolve within 15 days.

If you are in India you may also complain to the Data Protection Board; in the EU or UK, to your national data protection authority.

Changes

Material changes move the date at the top of this page.