Privacy Policy

Carriage Models Excel Add-in

Effective Date: 6/6/2025
Last Updated: 6/6/2025

1. INTRODUCTION AND SCOPE

Carriage Models ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Carriage Models Excel Add-in (the "Add-in") and related services (collectively, the "Services").

This policy applies to all users of our Excel Add-in and covers personal data processed in connection with your use of our Services. By using our Add-in, you consent to the collection and use of information in accordance with this policy.

2. DATA CONTROLLER AND CONTACT INFORMATION

Data Controller: Carriage Models
Contact Email: privacy@carriagemodels.com
Support Email: support@carriagemodels.com

3. INFORMATION WE COLLECT

3.1 Personal Information You Provide

We may collect the following personal information that you voluntarily provide:

Account Information: Name, email address, company name
Contact Information: When you contact support or provide feedback
Authentication Data: Microsoft 365 account information for Single Sign-On (SSO)
Usage Preferences: Settings and preferences within the Add-in

3.2 Document and Workbook Data

Excel Workbook Content: Our Add-in may access and process data from your Excel workbooks to provide modeling and analysis features. This data is processed locally on your device and is not transmitted to our servers unless you explicitly choose to save or share models through our cloud features.

Model Data: When you create and save models using our Add-in, we may store model configurations, parameters, and related metadata to enable synchronization and collaboration features.

3.3 Automatically Collected Information

We automatically collect certain technical information:

Usage Analytics: Feature usage, session duration, error logs
Device Information: Operating system, Excel version, device type
Performance Data: Add-in performance metrics and crash reports
Authentication Logs: Login timestamps and authentication events

4. HOW WE USE YOUR INFORMATION

4.1 Service Provision

We use your information to:

Provide and operate the Carriage Models Excel Add-in
Process and analyze your Excel data as requested
Synchronize your models and settings across devices
Authenticate and authorize access to your account
Provide customer support and respond to inquiries

4.2 Service Improvement

We may use aggregated and anonymized data to:

Improve Add-in functionality and performance
Develop new features and capabilities
Analyze usage patterns and trends
Conduct research and analytics

5. DATA SHARING AND DISCLOSURE

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

Service Providers: With trusted third-party service providers who assist in operating our services (e.g., cloud hosting, analytics)
Microsoft Integration: With Microsoft services for authentication and Office 365 integration as required for Add-in functionality
Legal Requirements: When required by law, court order, or government regulation
Business Transfers: In connection with a merger, acquisition, or sale of business assets
Consent: When you have given explicit consent for specific sharing

6. DATA SECURITY AND PROTECTION

We implement appropriate technical and organizational security measures to protect your personal data:

Encryption: Data in transit and at rest is encrypted using industry-standard protocols
Access Controls: Limited access to personal data on a need-to-know basis
Regular Audits: Regular security assessments and vulnerability testing
Secure Development: Following secure coding practices and regular security updates
Data Minimization: Collecting only necessary data and retaining it only as long as needed

7. DATA RETENTION

Retention Periods

Account Data: Retained for the duration of your account plus 3 years after account closure
Usage Analytics: Aggregated and anonymized data retained for up to 2 years
Support Communications: Retained for 3 years after resolution
Model Data: Retained until you delete it or close your account
Backup Data: May be retained in secure backups for up to 30 days after deletion

8. YOUR RIGHTS AND CHOICES

8.1 GDPR Rights (EU/UK Users)

Under GDPR, you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing: Request limitation of how we process your data
Right to Data Portability: Request your data in a machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for data processing at any time

8.2 CCPA Rights (California Users)

Under the California Consumer Privacy Act (CCPA), California residents have additional rights:

Right to Know: Request information about data collection and use
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
Right to Non-Discrimination: Equal service regardless of privacy choices

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@carriagemodels.com. We will respond to your request within 30 days (or as required by applicable law).

9. INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred to and processed in countries other than your country of residence. When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Certification schemes and codes of conduct
Other appropriate safeguards as required by applicable law

10. CHILDREN'S PRIVACY

Our Add-in is not intended for children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete such information.

11. COOKIES AND TRACKING TECHNOLOGIES

Our Add-in may use cookies and similar tracking technologies to enhance functionality and user experience. These technologies help us:

Remember your preferences and settings
Authenticate your account
Analyze usage patterns and performance
Provide personalized features

You can control cookie preferences through your browser settings, though this may affect Add-in functionality.

12. THIRD-PARTY INTEGRATIONS

Our Add-in integrates with Microsoft Office 365 and may connect to other third-party services. These integrations are governed by the respective privacy policies of those services:

Microsoft Office 365: Microsoft Privacy Statement
Other Integrations: Refer to respective service privacy policies

13. DATA BREACH NOTIFICATION

In the event of a data breach that may affect your personal data, we will:

Notify relevant supervisory authorities within 72 hours (where required by law)
Notify affected users without undue delay if the breach poses a high risk
Take immediate steps to contain and remedy the breach
Conduct a thorough investigation and implement additional safeguards

14. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by:

Posting the updated policy with a new effective date
Sending email notifications for significant changes
Providing in-app notifications where appropriate

Continued use of our Add-in after policy changes constitutes acceptance of the updated policy.

15. CONTACT INFORMATION AND COMPLAINTS

Privacy Contact Information

Privacy Officer: privacy@carriagemodels.com
General Support: support@carriagemodels.com

15.1 Supervisory Authority Contact (EU Users)

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority. Contact information for EU supervisory authorities can be found at https://edpb.europa.eu/about-edpb/board/members_en