Privacy notice
Last updated: 9 October 2026
ImgToSheet.app is run from England. This notice explains what happens to your data when you use it, in plain English. You can reach us at [email protected].
Your image, step by step
ImgToSheet.app does not store your image. To read the table, though, ImgToSheet.app sends your image to an AI provider, Anthropic, which keeps API data for up to 30 days. This table shows every place your image goes and what each one keeps. If you choose a PDF, your browser opens it and only the page you pick is sent, as an image; the rest of the PDF never leaves your device.
| Step | Who handles your image | What they keep |
|---|---|---|
| 1. Your browser shrinks the image (to at most 2,000 pixels) and re-saves it | Your device | Nothing leaves your device yet |
| 2. The image is uploaded over an encrypted (HTTPS) connection | Cloudflare, which runs our network | Not stored: the upload passes through |
| 3. Our server checks which way the image faces and turns it upright if needed | ImgToSheet.app, on Oracle Cloud in London | Held in memory only while the conversion runs; never written to disk, a database or our logs |
| 4. The image is sent to Anthropic's Claude API, in two or three requests, to check its orientation and read the table | Anthropic (based in the United States) | Deleted within 30 days and not used to train AI models. Kept for up to 2 years only if Anthropic's safety systems flag it, or for longer if the law requires |
| 5. The table comes back to your browser, which makes any Excel or CSV file | Your device | ImgToSheet.app keeps no copy of the table |
Anthropic's commitments come from its own published policies, checked on 9 October 2026: how long Anthropic stores data (updated 1 July 2026), which says API inputs and outputs are deleted within 30 days, and API and data retention, which says retained data "is never used for model training without your express permission".
The table data
The extracted table is sent back to your browser. Excel and CSV files are created in your browser — we don't store them or the values in them.
If you join the waitlist
Joining the paid plan waitlist is optional. If you join, ImgToSheet.app keeps the following, only for emailing you about a paid plan and occasionally other major updates:
| Step | Who handles it | What's kept |
|---|---|---|
| 1. You enter your email, and optionally tick what you'd want from a paid plan | ImgToSheet.app, on Oracle Cloud in London | Your email address, your ticks, the date, which page you joined from, and the version of the wording you agreed to. Not your IP address (sign-up attempts are limited as described under Usage limits) |
| 2. We email you a link to confirm | Resend, the email service (a US company, sending from Ireland) | Your address and the email, to deliver it, under Resend's privacy policy |
| 3. Once you confirm | ImgToSheet.app | Your address and ticks are kept until you unsubscribe or we close the waitlist, then deleted |
| 4. If you don't confirm within 7 days | ImgToSheet.app | Your sign-up is deleted |
| 5. If you unsubscribe (a link in every email, or email [email protected]) | ImgToSheet.app | Your address and ticks are deleted straight away; only a daily count of unsubscribes remains |
The legal basis is your consent, which you give by confirming your email. You can withdraw it at any time by unsubscribing. The emails contain no tracking pixels or tracked links.
Usage limits
To enforce the free daily limit, and to limit waitlist sign-up attempts, we store a one-way, keyed hash of your IP address combined with the date, plus a count. We don't store your IP address itself. These records are deleted within three days.
Bot protection
We use Cloudflare Turnstile to block automated abuse. Cloudflare processes limited technical data to do this.
Analytics
We use Cloudflare Web Analytics to count visits and see which sites refer visitors to us. It doesn't use cookies or fingerprinting, doesn't track you across sites, and only gives us aggregate numbers.
Our own server also keeps a daily count of visits by where they came from (the referring website, such as google or chatgpt.com, or the source tag in the link you followed) and which page they arrived on. It also counts, per day and page, how often the converter is shown, a file is chosen, the example is tried, and a table is downloaded or copied. These are totals only: nothing in them identifies you, your device or your IP address.
Server logs
Our server logs which page or feature was requested, the response status and how long it took. For each conversion it also records the outcome, the image's file size, the number of tables and cells found, and how much AI processing it used. These logs contain no IP addresses, images or table contents.
Cookies
We don't use advertising or tracking cookies, so there's no cookie banner. Cloudflare Turnstile may set a strictly necessary cookie to protect the service from bots.
Why we process data
We process your images to provide the conversion you ask for, and we process the limited technical data above because we have a legitimate interest in keeping the service secure, preventing abuse and understanding how it's used.
Who else handles data
- Anthropic — reads tables from your images (based in the United States).
- Cloudflare — network delivery, security, bot protection, analytics and our email.
- Oracle Cloud — hosts our server in London.
- Resend — sends waitlist emails, only if you join the waitlist (a US company, sending from Ireland).
Some of these providers may process data outside the UK, including in the United States. They do so under their data protection terms, which include safeguards for international transfers.
Your rights
You have rights to access, correct, delete or object to the processing of your personal data. We don't keep your images, and unless you've joined the waitlist we keep nothing that identifies you, so there's usually nothing for us to retrieve. If you have joined, we hold only what's listed under If you join the waitlist, and you can unsubscribe at any time. You can always contact us. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change how we handle data, we'll update this notice and the date at the top.