Privacy Policy

Effective August 2, 2026

This Privacy Policy explains how CSV dog collects, uses, discloses, and protects personal information when you use our websites, hosted application, application programming interfaces, desktop software, and related services (collectively, the Service).

For personal information contained in files or other Customer Content, the customer that submitted the content generally decides why and how it is processed. CSV dog processes that information on the customer's behalf to provide the Service. If your information appears in a CSV dog customer's content, please direct your request to that customer first.

1. Information we collect

We collect information in the following categories.

Account and profile information

When you create or use an account, we may collect your name, email address, password credential, account identifiers, organization and project memberships, roles, preferences, and account status. Passwords are stored in hashed form rather than as readable text.

Customer Content and service activity

We process the files, source locations, schemas, questions, SQL text, workflows, instructions, corrections, results, visualizations, and other content you submit to or create with the Service. Customer Content may contain personal information about you or other people.

We also collect information about how you configure and use the Service, such as projects, collaborators, permissions, upload and processing status, storage and query usage, feature interactions, and timestamps.

Billing information

When you purchase credit or use a paid feature, our payment provider processes your payment-card and billing details. CSV dog receives limited billing information such as payment status, transaction identifiers, purchased credit, usage charges, and account balances. We do not receive your full payment-card number from the payment provider.

Collaboration information

If you invite someone to an organization or project, we collect the invitee's email address, assigned role, invitation status, and related account activity. Other members of an organization may see your name, email address, role, and work you share with them.

Device, network, and operational information

When you connect to the Service, we and our infrastructure providers may process information such as your IP address, browser or device type, operating system, referring page, request route, request identifier, response status, and access time. We use session cookies, security tokens, and similar technologies to authenticate users, prevent request forgery, remember preferences, and operate the Service.

Operational and security logs are designed to record request metadata rather than the contents of uploaded files, SQL text, credentials, or query results.

Communications

We collect information you send when you ask for support, report a problem, respond to a survey, or otherwise communicate with us.

Marketing-site preview and preferences

The CSV picker on the public marketing site reads a limited portion of the selected file in your browser to produce a local preview. That preview action does not upload the selected file to CSV dog. The marketing site stores your light or dark theme preference on your device. We do not use advertising cookies or behavioral-advertising trackers on the marketing site.

2. Where information comes from

We receive personal information:

• directly from you when you create an account, submit content, make a purchase, or contact us;
• from an organization owner, administrator, or collaborator who invites you or shares content with you;
• automatically from your browser, device, and interactions with the Service; and
• from service providers, such as payment providers, that confirm a transaction or help us prevent fraud.

3. How we use information

We use personal information to:

• provide, operate, maintain, and improve the Service;
• create and secure accounts, sessions, projects, and organizations;
• process Customer Content and return the transformations, answers, and results you request;
• enable collaboration and permissions selected by customers;
• calculate usage, process payments, maintain billing records, and prevent fraud;
• communicate about the Service, security, support, and important changes;
• diagnose errors, monitor reliability, and protect users and the Service;
• enforce our Terms of Service and other agreements; and
• comply with law and respond to lawful requests.

Where data-protection law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where we ask for it. You may withdraw consent at any time, but withdrawal does not affect processing that already occurred lawfully.

4. How we disclose information

We may disclose personal information in these circumstances.

Service providers

We use companies that help us host, store, secure, support, and bill for the Service. These providers process information under contracts and only for the services they provide to us. Our current providers include Amazon Web Services for cloud infrastructure and Stripe for payment processing. Providers may change as the Service evolves.

People you authorize

We disclose Customer Content and account information to organization members, project collaborators, and other recipients as directed by you or an authorized administrator. Check recipients and permissions before sharing.

Legal and safety reasons

We may disclose information when we reasonably believe disclosure is required by law, legal process, or a valid government request; is necessary to enforce an agreement; or will protect the rights, safety, and security of CSV dog, our users, or others.

Business transfers

We may disclose information in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of all or part of our business. A recipient may use the information only as allowed by this Policy unless it gives you notice of a different policy.

With your direction or consent

We may disclose information for another purpose when you direct us to do so or consent to it.

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising.

5. Data retention

We keep personal information for as long as reasonably necessary to provide the Service, maintain the account or organization, complete requested processing, comply with legal and accounting obligations, resolve disputes, enforce agreements, and protect the Service.

Retention varies by data type and context. Temporary uploads, generated query results, session records, and operational logs may follow shorter technical lifecycles. Active Customer Content, account records, workflow metadata, billing ledgers, security records, and backups may be kept longer while an account is active or when needed for the purposes above.

When information is no longer needed, we delete it, anonymize it, or isolate it until deletion is practical. A deletion request may not remove information we must keep for legal, security, fraud-prevention, billing, backup, or dispute-resolution purposes.

6. Security

We use administrative, technical, and physical safeguards designed to protect personal information. These include access controls, credential hashing, encrypted network connections, storage encryption, tenant and project permissions, and security logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You are responsible for using appropriate permissions, protecting credentials, and deciding whether the Service is suitable for the sensitivity of your Customer Content.

7. International processing

CSV dog and its providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. Where required, we use recognized safeguards for international transfers.

8. Your choices and privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information. You may also have the right to object to or restrict certain processing, withdraw consent, appeal a denied request, or opt out of certain disclosures.

To make a request, email legal@csv.dog. Tell us the right you want to exercise and provide enough information for us to identify the relevant account or interaction. We may need to verify your identity and authority before completing a request. You may use an authorized agent where applicable law allows. We will not discriminate against you for exercising a privacy right.

If CSV dog processes your information only on behalf of a customer, we may direct your request to that customer. We may deny or limit a request when an exception applies, and we will explain the decision where required.

California and other US states

In the preceding 12 months, we may have collected the categories described in Section 1 and disclosed them for business purposes to the recipients described in Section 4. These categories include identifiers, commercial and billing information, internet or network activity, account and collaboration information, and Customer Content you choose to provide. We do not sell personal information or share it for cross-context behavioral advertising.

Residents of states with applicable privacy laws may request to know, access, correct, delete, or obtain a portable copy of covered personal information and may appeal a denied request. We do not use sensitive personal information to infer characteristics about people.

European Economic Area, United Kingdom, and Switzerland

Where applicable, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent and may lodge a complaint with your local data-protection authority. CSV dog may act as a controller for account, billing, security, and direct relationship information and as a processor for personal information in Customer Content.

9. Cookies and similar technologies

The hosted Service uses cookies or similar tokens that are necessary for authentication, security, and session operation. We also use browser storage for device-local preferences such as theme and selected project context. You can clear these through your browser, but clearing essential session data may sign you out or reset preferences.

We do not currently use cookies for targeted advertising.

10. Children's privacy

The Service is not directed to children, and you must be at least 18 years old to create or use an account. We do not knowingly collect personal information directly from children. If you believe a child has provided personal information to us, contact legal@csv.dog.

11. Third-party links and services

The Service may link to or interoperate with third-party sites and services. Their privacy practices are governed by their own policies, not this one.

12. Changes to this Policy

We may update this Privacy Policy as the Service or law changes. We will post the updated Policy and revise the effective date. If a change materially affects how we use personal information, we will provide additional notice when reasonably possible.

13. Contact

Questions and privacy requests may be sent to legal@csv.dog.