Privacy Policy
The Privacy Policy is identical across all plan types, and is also contained within the Terms of Service.
It is presented here for reference.
Privacy Policy
Data Collected and how we use your information
Whoa Systems does not access or collect the contents of your spreadsheets.
When you use the Whoa Add-In or download it from our website, we may receive the following data:
- Personal API key: used to activate and authorize your access to the Whoa Add-In.
- Machine hash: a short identifier (e.g., e3f23896) that tracks how many unique machines are using your key. It does not contain personal information or reveal details about your devices.
- Whoa Add-in version: used for compatibility and support.
- Public IP address: captured server-side during key verification and downloads.
- Browser user agent: received during file downloads to assist with compatibility diagnostics.
This information is only collected when:
- When you click "Agree" on the Terms of Service
- Each time you download the Excel Add-In from our website.
- Each time the Add-In verifies your API key
No analytics, behavioral tracking, or profiling is performed. We do not use third-party analytics or marketing vendors. Our production servers are hosted on DigitalOcean.
Payment Information
All payment processing is handled by Stripe. Whoa Systems does not collect, process, or store your credit card number or any other payment credentials on our servers.
Device Visibility and User Control
You can view all known machine hashes associated with your API key by visiting your user profile. If you stop using a device, you may remove it from your active machine list to free up access.
You may request a full export of all data collected about you at any time. We will never share your machine data or usage history with any third party — including a Corporate Owner — without your explicit permission.
Corporate Members, including Corporate Ambassadors, have no access to the account data, device information, or activity history of other users under the same Corporate Plan. Users can see the email addresses of all other users under the same Corporate Plan.
Account Communications
Whoa Systems may contact you with essential information about your subscription or account (e.g., billing issues or prolonged inactivity). These messages are non-promotional and sent only when necessary.
You may also choose to opt in to occasional product tips or updates.
Cookies & Local Storage
We place two small, security-focused cookies in your browser:
| Cookie | Purpose | Category |
|---|---|---|
csrftoken |
Prevents cross-site-request-forgery attacks when you submit forms or authenticate. | Strictly necessary |
__cf_bm |
Set by our CDN (Cloudflare) to distinguish humans from bots and shield the site from abuse. | Strictly necessary |
These cookies do not track you across sites, build profiles, or support advertising.They are required for the service to function; blocking them may break login or downloads.
We use no analytics, marketing, or preference-storage cookies, and we do not utilize LocalStorage, SessionStorage, IndexedDB, or similar browser features for tracking.
Under the ePrivacy Directive (Art 5(3)) and GDPR, strictly necessary cookies like these do not require prior consent but must be disclosed. This section fulfills that obligation.
You can view or delete any cookie via your browser settings. For questions, contact [email protected].