Security and Data

What IT reviewers and careful users usually ask about, on one page.

What Whoa Systems collects

  • Your email address, when you register.
  • Your Whoa API key, an anonymous machine hash and the add-in version, when the add-in checks your license.
  • Your IP address and browser user agent, during license checks and downloads.

Details are in the Privacy Policy.

What Whoa Systems never collects

Your workbook contents, your code, your data, or anything you send to an AI service.

AI services

The add-in can connect to AI services you choose, through a browser chat or directly with your own API key. These connections run between your computer and the AI provider and never pass through Whoa Systems' servers. What you share is governed by that provider's terms and your organization's policies.

AI provider keys stored in a workbook

Keys you enter for AI providers are stored in the workbook and lightly obfuscated so they don't show up in screenshots. They are not encrypted, and they travel with the file. Remove them before sharing a workbook.

Files on your computer

Agent tools that read or write files work only in the workbook's own folder and in folders you approve.

Macros and antivirus

The add-in is a standard Excel add-in (.xlam) made of VBA macros. Because it writes VBA code for you, some antivirus products flag it as part of the Donoff family. For the official download from whoa1011.com, these detections are false positives. Setup steps and macro settings are in Install and Setup.

If your antivirus flags the add-in:

  • Don't turn off your antivirus. Confirm the file came from whoa1011.com and check its fingerprint (below).
  • Ask your IT department to review it, and report the file to your antivirus vendor as a false positive.
  • Email [email protected] and say which product flagged it.

Verify your download

New add-in versions have a SHA-256 fingerprint on the downloads page; older versions may show N/A. To check that your file matches, open Command Prompt and run: 

certutil -hashfile "%USERPROFILE%\Downloads\WhoaAddinV8.xlam" SHA256

Change the file name to match yours. If the values match, your file matches the version listed on our downloads page.

Source code review

I'll provide the full add-in source code to any IT department that wants to audit it. Email [email protected] from your company address.