No dark patterns, no vague assurances. Here's exactly where your data is hosted, what leaves your workspace, and the guarantees we enforce in code.
Compute and storage on Google Cloud in Belgium; your per-organization database on Turso in Ireland. Nothing leaves the EU.
HubSpot & Pipedrive are read-only — enforced by a positive scope allowlist at the provider edge. Columnly cannot write back to your CRM.
Data sent to the model to produce your results is never used to train any model, ours or a sub-processor's.
Each organization's web-app data lives in its own per-organization database, separated from every other workspace.
All communication uses HTTPS/TLS. Access is authenticated per request and rate-limited to prevent abuse.
We process personal data in accordance with the EU GDPR — access, export, and erasure honoured end-to-end.
The add-on reads the sheet you're working in and processes requests synchronously. Spreadsheet contents are not stored at rest; only your account and usage record persist to operate the service.
To keep analyses live, uploaded and ingested CRM data is persisted (as columnar Parquet) in your EU database. It's versioned with 15-day snapshot retention and atomic swaps, and deleted on account closure or on request.
Each acts only on our instructions to deliver the service. We don't sell, rent, or trade your data.
| Sub-processor | Purpose | Location |
|---|---|---|
| Anthropic (Claude) | The AI reasoning behind analyses. Not used to train models. | — |
| Google Cloud | Compute & storage for processing, artifacts, and ingested data. | Belgium (EU) |
| Turso | Per-organization application database. | Ireland (EU) |
| Razorpay | Subscription payment processing (no full card details stored). | — |
| Resend | Transactional email (invites, notifications). | — |
| Cloudflare | Website hosting, CDN, and network security. | — |
Every displayed figure is verified against an independent computation before it ships, and any figure it can't reconcile is flagged or withheld. It's not a policy in a prompt — it's deterministic code that always runs. See how verification works →
We're happy to walk through data handling, sub-processors, retention, and deletion.