Privacy policy: divdio Sheets for Excel

Last updated 2026-10-27.

This policy covers the divdio Sheets for Excel add-in and the pages at https://addin.divdio.com. The add-in is published by TBD: the Australian Pty Ltd's registered name (chapter 4 §5.10) ("divdio", "we"), Australia. Questions go to privacy@divdio.com.

The short version

• The add-in reads the workbook you have open, in Excel, on your computer. It never uploads, copies or converts the file.
• Scan, Lint and Assertions run entirely in the add-in's pane. Nothing they read leaves your computer.
• Only if you sign in to your organisation's divdio workspace does History send snapshots of cell contents to that workspace.
• No cookies, no analytics, no advertising, and we never sell data.

What the add-in reads

Through Excel's JavaScript API, while its pane is open, the add-in reads: the workbook's sheets, cell values and formulas, hidden rows, columns and sheets, comments, defined names, document properties, pivot tables, links to other workbooks, the active cell, whether the workbook has unsaved changes, and the file's address (for example its SharePoint or OneDrive URL). It uses them to show history, differences, scan findings, lint results and assertion results in the pane.

What it writes

Only what you ask for: a fix you choose in Scan (an ordinary Excel edit) and the assertions you define, which are kept in the workbook itself, in a custom XML part, and travel with the file.

What leaves your computer

• Without a divdio sign-in: nothing the add-in reads from the workbook. History snapshots are kept in the pane's memory and are gone when the pane closes.
• With a divdio sign-in: each time the workbook is saved, the add-in sends a snapshot to your organisation's divdio workspace: the cell values and formulas of the bands that changed, the file's address, the time and your display name. History, blame and diff then read these snapshots back. Your organisation's workspace is provided under its agreement with divdio; for that data your organisation is the controller and divdio processes it on its behalf, as that agreement sets out.

What is stored on your device

When you sign in, the add-in keeps your divdio session token and display name in the browser storage of its pane, so you stay signed in. Signing out removes them. The add-in sets no cookies.

The pages and the hosting

The add-in's pages are served from https://addin.divdio.com by our hosting provider, Cloudflare, which keeps standard request logs (IP address, time, page requested and browser) for security and reliability. We do not use them to track you. Excel loads Microsoft's Office JavaScript library from Microsoft; Microsoft's own privacy statement covers Excel and that library.

Your rights

You can ask us what personal information we hold about you, and ask us to correct or delete it, by writing to privacy@divdio.com. Snapshots in your organisation's workspace are managed by your organisation: ask its administrator first. We answer within 30 days. We handle personal information under the Australian Privacy Principles and, for people in the European Union or the United Kingdom, under the GDPR. If you are not satisfied with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or your local data-protection authority.

Changes

We change this policy only to describe a change in what the add-in does, and we update the date at the top when we do. A change that sends more data anywhere comes only with a new version of the add-in, announced on this page first.