Privacy Policy.
Effective July 2, 2026
1. Scope
This Privacy Policy describes how Innmotrix, Inc. ("Innmotrix", "we") handles personal information in connection with ConnXL — the dashboard, the gateway software, the add-in for Microsoft Excel, and connxl.com (the "Service").
For information your organization processes through its own connectors and gateway, your organization is the controller and we act only on its instructions.
2. What we collect
- Account information. Your name, email address, and avatar, received from the identity provider you sign in with (GitLab, Google, Microsoft, or LinkedIn). We never receive or store a password.
- Organization configuration. Functions, connections, member lists, roles, and settings defined in the dashboard. Connection secrets are encrypted and never displayed back in full.
- Operational data. Logs and telemetry about how the Service is used — call counts, latency, error codes — plus basic device and browser information.
- Billing information. Plan, invoices, and payment status. Card details are handled by our payment processor and never touch our servers.
3. What we never collect
Query results served to Excel travel from your connectors through your gateway to your workbooks. They are never sent to, stored by, or readable by ConnXL. The contents of your cells — and of your source systems — stay in your network.
4. How we use information
We use the information above to operate and secure the Service, provide support, process billing, send service notices, and improve the product using aggregate usage patterns.
We do not sell personal information, show advertising, or use your data to train machine-learning models.
5. Legal basis for processing
Where data-protection law requires a legal basis, we process account and configuration information to perform our contract with your organization, operational data and security logs under our legitimate interest in operating and protecting the Service, and billing information to comply with legal and tax obligations. Where we rely on consent for a specific processing activity, you may withdraw it at any time without affecting processing already carried out.
7. Retention
Account and configuration data are kept while your organization's workspace is active, and for 30 days after termination so you can export them. Operational logs and telemetry live in our active systems for about 90 days, after which they move to long-term archival storage rather than being deleted; both the active and archived copies are deleted when your organization's data is purged. You can request earlier deletion at any time.
8. Security
Configuration and secrets are encrypted in transit and at rest, access inside Innmotrix follows least privilege, and connection secrets are released to your gateway only at execution time. See the Security statement for the full picture.
9. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Write to contacto@innmotrix.com and we will respond within 30 days. Members of an organization's workspace should direct requests to their administrator first, since we may act only on the organization's instructions.
10. International transfers
Depending on where you and your organization are located, information may be transferred across borders in the course of operating the Service. Where it is, we rely on appropriate safeguards, including standard contractual clauses.
12. Children
The Service is for business use and is not directed at children under 16. We do not knowingly collect their information.
13. Changes to this policy
We may update this policy from time to time. For material changes we will give at least 30 days' notice by email or in the dashboard.
14. Contact
Questions about privacy can be sent to contacto@innmotrix.com.