Privacy Policy

Last updated: 2026-04-01 (UTC) — v2

        Core privacy promise: We do not store your uploaded CSV data. Your cleaned file is automatically downloaded when processing completes and immediately deleted from our servers. It cannot be re-downloaded. We never use your data to train AI models.
      

About TidyImports

TidyImports is a CSV data preparation service operated by Mind's Eye Technologies Ltd (New Zealand). We provide three tools: Sheet Cleaner (clean and normalise spreadsheet data), CRM Mapper (map CSV columns to CRM fields for HubSpot, Salesforce, Pipedrive, and Zoho), and CSV Validator (validate CSV structure and data quality).

This policy complies with the New Zealand Privacy Act 2020 and applies to all users of tidyimports.com.

Data we process temporarily (not retained)

When you upload a file for processing, we temporarily hold:

Your CSV file contents — processed in a temporary directory, deleted automatically after the cleaned file is downloaded or within 15 minutes, whichever comes first.
Intermediate processing artifacts (cleaned CSV, validation report) — stored in the same temporary directory and deleted on the same schedule.

Zero retention policy: No row-level CSV content is retained after the processing window. We do not build databases of your contacts, companies, or other business data.

Data we retain (account and operational data)

Account information: Name, email address, password hash (stored by better-auth). Required to provide the service.
Job metadata: Job ID, tool type used, processing status, result summary (row/column counts, error counts). No file contents.
Analytics events: Anonymised usage events (e.g. "job completed", "plan upgraded") used to understand product usage. Stored by user ID only — not linked to file contents.
Billing information: Subscription plan, usage count, payment status. Payment card details are held exclusively by Stripe — we never see or store full card numbers.
Session data: Authentication session tokens with expiry, IP address, and user agent for security purposes.
Workspace data: Team workspace names, membership roles, and saved column mapping templates.

AI disclosure

TidyImports uses AI-assisted systems for column mapping suggestions (the CRM Mapper tool). These suggestions are generated based on your column header names — not the data values in your file. Mapping suggestions should be reviewed before use on critical datasets. We do not use your uploaded data to train or fine-tune any AI model.

Subprocessors

Stripe — payment processing. Subject to Stripe's own privacy policy. We share your name and email with Stripe to create a customer record when you start a paid subscription.
No other third-party services receive your personal data.

Data retention periods

Uploaded files and processing artifacts: deleted immediately after download (one-time download), or within 15 minutes as a safety net.
Account data: retained while your account is active. Deleted within 30 days of a deletion request.
Billing records: retained for 7 years as required by NZ financial record-keeping obligations.
Analytics events: retained for 12 months, then deleted.

Your rights (NZ Privacy Act 2020)

You have the right to:

Access the personal information we hold about you.
Correct inaccurate personal information.
Request deletion of your account and personal data.
Lodge a complaint with the NZ Privacy Commissioner.

To exercise any of these rights, contact us at info@tidyimports.com.

Cookies and tracking

We use session cookies only — required for authentication. We do not use advertising cookies, cross-site tracking, or analytics services that set third-party cookies.

Security

Data is encrypted in transit via HTTPS. Passwords are hashed using bcrypt. Database access is restricted to the application server. We conduct periodic security reviews.

Changes to this policy

We will notify registered users of material changes to this policy by email. The "last updated" date at the top of this page reflects the most recent revision.

Data Processing Agreements

For businesses requiring a Data Processing Agreement under GDPR, our Data Processing Agreement is available.

Contact

Privacy questions: info@tidyimports.com
Mind's Eye Technologies Ltd
New Zealand