Privacy policy
1. Overview
Formula Genius is operated by DEXIUM LABS LLC ("DEXIUM LABS LLC", "we", "us", "our"). This Privacy Policy explains what data we collect, how we use it, and your rights when you use the Formula Genius website, share pages, ChatGPT integration, the Formula Genius add-on for Google Sheets™ and the Formula Genius add-in for Microsoft Excel.
2. Information we collect
- Inputs and Outputs: The prompts you submit and the generated outputs (formulas, scripts, SQL, explanations) needed to deliver the service.
- Statement Vision Beta: If you explicitly choose AI vision and confirm processing, your selected statement PDF is transmitted through Formula Genius to OpenAI to extract transaction rows. Local text mode does not upload the PDF. Review every extracted transaction before exporting; the beta does not verify statement authenticity.
- Workbook health check: If you choose Fix & check on the website or attach an .xlsx or UTF-8 .csv file in ChatGPT, the file is read once to run a static scan (no AI model reads it). Formula Genius keeps the resulting report, which lists locations, categories and counts but not cell values or formula text, and the workbook you may download: a report-only workbook or, if you ask for cleaning, a cleaned copy of your data with a sheet listing each change (the old and the new value). It does not keep the file you uploaded.
- Google Sheets add-on: The add-on works only in the spreadsheet you have open, and only when you run a tool. Fix formula sends the selected cell's formula and the rows you choose to check. Check sheet sends the formulas and values of the sheet you check. Convert statement sends the PDF you pick in the sidebar. The add-on writes to your spreadsheet only when you click Apply or Insert. To sign you in, we receive your Google account's email address and account ID. The add-on cannot open your other files.
- Excel add-in: The add-in works only in the workbook you have open, and only when you run a tool. Fix formula sends the selected cell's formula and the rows you choose to check. Check sheet sends the formulas and values of the sheet you check. Convert statement sends the PDF you pick in the panel. The add-in writes to your workbook only when you click Apply or Insert. To sign in, you approve a one-time code on formulagenius.co while signed in to Formula Genius; we do not receive your Microsoft account details. The add-in keeps its sign-in token in the panel's browser storage on your device. The add-in cannot open your other files.
- Account Data: Email address and authentication data when you sign in or subscribe.
- Optional Marketing Consent: If you choose to opt in on the ChatGPT OAuth sign-in page, we store your email address, consent timestamp, consent text/version, and email-list sync status.
- Usage Data: Feature usage, timestamps, and request volume to manage quotas and improve reliability.
- Device and Log Data: IP address, browser type, and error logs for security and troubleshooting.
Please do not submit restricted or highly sensitive data, including payment card details, protected health information, government identifiers, passwords, API keys, or MFA codes. We may block or discard requests that include this data.
3. How we use information
- Provide and maintain the service, including validations, exports, and share pages.
- Authenticate users and manage subscriptions.
- Monitor performance, prevent abuse, and improve product quality.
- Communicate service updates, account notices, and support responses.
- Send formula tips, product updates, onboarding sequences, and occasional Pro offers only when you explicitly opt in.
Google user data
Formula Genius's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data only to run the tool you asked for and to sign you in. We do not use Google Workspace data to develop, improve or train generalized or non-personalized AI or machine-learning models. We do not sell it, use it for advertising, or let people read it, except with your permission, for security or abuse investigations, or where the law requires.
4. Legal bases for processing
We process data to perform the contract with you (deliver the service), to comply with legal obligations, and to pursue legitimate interests such as security, fraud prevention, and service improvement.
5. Cookies and analytics
We use cookies and similar technologies to keep you signed in, remember preferences, and measure site performance. You can control cookies through your browser settings, but some features may not work correctly if cookies are disabled.
When you arrive from a link in our ChatGPT app or emails, a first-party fg_attr_source cookie records which link brought you (for example, the ChatGPT app's limit card), so we can tell which links lead to sign-ups and purchases. It holds only that link label, not your identity.
A first-party fg_attr_touch cookie keeps, for 30 days, the first page you landed on (the path only), the domain of the site that linked you (for example google.com) and any campaign tags in the link. It never stores the full web address, your search terms or your identity, and it is not set when your browser sends Do Not Track or Global Privacy Control.
We use PostHog (EU-hosted) to understand how people move through the product, for example which steps lead to a purchase. Events are tied to a pseudonymous ID derived from your account, never to your email address, and never include the formulas, requests, files, cell values or file names you work with. On our public website pages PostHog runs without cookies, through our own domain, and respects Do Not Track and Global Privacy Control signals. Client IP addresses are discarded. We send the browser family, operating system and a coarse device type, but not your full user-agent string, screen size, page titles or the part of a web address after a question mark or hash. PostHog is not loaded inside the ChatGPT app.
6. Sharing and third parties
We do not sell your data. We may share limited data with:
- Infrastructure providers (hosting, storage, monitoring) to operate the service.
- Product analytics (PostHog, EU region) receives pseudonymous usage events as described in section 5.
- Authentication and payment processors to manage sign-in and billing.
- Email service providers to maintain an opted-in marketing contact list, send onboarding or upgrade emails only to consented users, and manage unsubscribe preferences.
- OpenAI when requests are processed through their API to generate outputs.
- Statement processing: AI vision sends the selected PDF to OpenAI only after your explicit extraction action. Avoid uploading documents containing credentials, full payment-card details or unrelated sensitive information. You can choose local text processing instead.
When you use the Google Sheets add-on or the Excel add-in, Fix formula sends the formula and checked rows to our AI provider to propose a fix, and Convert statement follows the statement processing described above. Check sheet runs a static scan on our servers; no AI model reads it.
If you use Formula Genius inside ChatGPT, your inputs may be subject to OpenAI policies as well. Please review their privacy terms for additional details.
7. Data retention
- Active accounts: We keep account, usage, library, and generation data while your account is active so core features work correctly.
- Statement Vision Beta: Formula Genius processes the PDF for the extraction request and keeps the editable review in your open page; it does not save statement files or transaction rows to your account library, history or analytics. Clearing the workspace or leaving the page discards this working copy. Requests use OpenAI's API with response storage disabled; this does not guarantee zero provider retention. OpenAI's applicable API policies and ChatGPT's file handling govern provider-side retention. Downloaded Excel files remain wherever you save them.
- Workbook health check: The file you upload is processed in memory for the scan and discarded afterwards; it is not written to storage or sent to an AI provider. The redacted report and the report or cleaned workbook are kept for 24 hours and then deleted automatically. File names, sheet names, cell values and formula text are not written to logs or analytics.
- Google Sheets add-on and Excel add-in: Formulas, cell values and PDFs sent from either add-in are processed for that request and not saved to your library, history or analytics. Statement rows are not stored on our servers: they come back to your open sidebar or panel, and the encrypted copy it holds for retries stops working after 24 hours. We keep only usage records (which tool ran, page count, credits used). The rows you insert stay in your spreadsheet.
- Account deletion: When you delete your account, we delete account-linked app data from our active systems. Workbook previews, health reports and credit records are closed after the rest of your account data is deleted. If that step cannot complete at the moment of deletion, the deletion still goes ahead, the failure is logged for follow-up, and any remaining workbook or health report content is removed by the 24-hour expiry.
- Affiliate commission: If you delete your account, unpaid commission under the $20 payout minimum is forfeited and its referral records are deleted. If $20 or more is unpaid, we keep your email address and the referral records for that balance until it is paid, then remove your address from them. Records of payouts already made to you, including the email address they were paid to, are kept as billing records for accounting. If you were referred and delete your account, we keep the record that you signed up through that referral, without your email address, so the person who referred you is still credited.
- Marketing consent: We keep opt-in consent records until you unsubscribe, revoke consent, or request deletion, except where retention is needed for legal or compliance records.
- Backups and logs: Operational backups and log systems may retain data for up to 30 days before automated deletion.
- Billing records: Payment and invoice records may be retained longer when required by tax, accounting, anti-fraud, or legal obligations.
8. Security
We use industry-standard safeguards to protect data, including access controls and encryption where appropriate. No system is 100% secure; please use the service at your own risk.
9. International transfers
Your data may be processed in countries outside of your own. We take steps to ensure adequate protections are in place.
10. Your rights and choices
You may request access, correction, or deletion of your personal data. Depending on your location, you may have additional rights such as data portability, restriction, or objection to processing. You can unsubscribe from marketing emails at any time, and every marketing email will include an unsubscribe option. We may request verification before fulfilling requests.
11. Do Not Track
Some browsers send a Do Not Track or Global Privacy Control signal. When they do, our website analytics and the fg_attr_touch cookie described in section 5 respect it. There is no common standard for other uses of these signals, so the rest of the service works the same either way.
12. Children's privacy
Formula Genius is not intended for children under 13 (or the minimum age required by your jurisdiction). DEXIUM LABS LLC does not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy from time to time. If changes are material, we will provide notice on our website.
14. Contact
Questions or requests can be sent to privacy@formulagenius.co.