Privacy policy

Last updated 2 November 2026. This page describes the TidyRecon website and browser app at tidyrecon.io.vn.

Summary

Reconciliation runs in your browser. We do not upload the contents of your CSV, Excel, or JSON files to TidyRecon servers. The main exception is license activation: when you enter a key on /license, the key is sent to Lemon Squeezy so we can unlock your plan.

Files you reconcile

When you open /app, drop files, clean columns, match rows, or export results, those files are read and processed in your browser tab. File contents are not sent to our servers. You can verify this yourself on the privacy check page.

The app Content Security Policy for /app is intended to block unexpected network connections while you work. The separate /license page may connect to Lemon Squeezy’s license API only.

Data stored on your device

Recipes, run history, open items, theme preference, license status, and related settings are stored locally in your browser (including IndexedDB). Clearing site data in the browser, or using Delete all local data in Settings, removes that information from that browser. Your original files on disk are never modified by that action.

License activation

To unlock Solo, Pro, or Team you paste a license key on /license. The app sends the license key and a short instance name (for example “TidyRecon browser”) to https://api.lemonsqueezy.com. Cell values and file contents are not included in that request.

Payments

Paid plans are sold through Lemon Squeezy, which acts as merchant of record. Checkout, invoices, taxes on the sale, and payment data are handled by Lemon Squeezy under their policies. See Lemon Squeezy’s privacy policy.

Usage analytics

We do not currently collect anonymous usage counts. There is no analytics toggle in the app and no third-party tracker in /app. If we add optional event-name-only analytics later, this policy will be updated first.

Third-party trackers in the app

The reconciliation app is built not to embed third-party advertising or analytics scripts in /app. Marketing pages on this site are also served without third-party tracker scripts as of the date above.

Server logs

Our static host (Vercel) may keep standard request logs (such as IP address, user agent, and URL) for security and operations. Those logs are not used to read your spreadsheet contents, because those contents are not uploaded.

Children

TidyRecon is aimed at adults using business or operations data. It is not directed at children under 16.

Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy: support@tidyrecon.io.vn.