Privacy & data handling

SOV Lens is a static website containing a local spreadsheet analysis app. This page describes the current release's engineering design, not a regulatory certification or guarantee of confidentiality.

What the app does

When you choose a CSV or XLSX file, browser JavaScript reads it into temporary page memory and creates findings on your device. The provided application does not call a file upload service, send schedules to an API, use external analytics, load third-party scripts, or store the files in a cloud database. Pressing Clear all or closing/reloading the page removes the app's references to the files; browser/OS memory lifecycle is controlled by the platform.

What the hosting provider can receive

When you open the website, its hosting provider can receive standard web-request metadata such as your IP address, user-agent and requested pages, and may retain operational logs. The current application does not send spreadsheet contents in those requests. Your browser extensions and corporate network controls may have their own behaviour.

Exports and storage

When you export a report, it is saved to your device in the browser's configured download location. Files and reports may contain sensitive business information; protect and delete them according to your organization's retention rules. This release does not use localStorage, cookies, or a server-side account system.

Who should use it

Do not process confidential third-party information without authorization from the relevant organization. Browser-local processing alone is not equivalent to enterprise approval, SOC 2 certification, a security audit, PIPEDA compliance, or confidentiality guarantees. This release has not undergone an independent penetration test.

Changes and questions

This policy will need a verified operator identity, contact details, and legal review before commercial launch. If you later add hosting analytics, logins, payments, contact forms, or remote processing, update this page and review your obligations before deploying those changes.

Site owner action required: publish verified business and privacy contact details before commercial promotion. Do not imply certification.