Privacy Policy
Last updated: November 1, 2026. This policy describes the current behavior of the DedupeCSV service; the product is built to match it.
Your files
Files you upload (or CSV text you paste) are transferred to our server and processed there. We store the parsed file and its outputs only so you can review duplicate clusters and download your results.
- Automatic deletion: stored files and outputs are deleted 24 hours after processing.
- Manual deletion: signed-in users can delete a file immediately from the account page; the stored data is removed at the same time.
- No secondary use: we do not sell, share, rent, or mine your list data, and we do not use it to train models.
- Access: your files are tied to your account (or, for anonymous runs, to an unguessable job ID) and are not listed publicly or indexed by search engines.
Your account
We store your email address and a salted password hash (never the plain password), your plan and usage counters, your saved recipes (settings only — recipes never contain your list data), and subscription identifiers provided by our payment processor.
Payments
Payments are processed by Paddle, our merchant of record. We never see or store your card number. Paddle's own privacy policy governs the payment data you give them.
Logs
Server logs record request metadata (time, route, status) for security and debugging. File contents, passwords and payment secrets are not written to logs.
Cookies
We use one essential cookie: a signed session cookie that keeps you signed in. We do not use third-party advertising cookies.
Contact
Privacy questions: support@dedupcsv.xyz.