Privacy and data handling

A summary of how Excelente handles your data. The privacy policy governs, and where this page and that document disagree, the policy is authoritative.

The honest starting point#

Excelente reads your workbook and sends what it needs to a language model. That is how it works. Nothing here pretends otherwise, and the useful question is which content, to whom, and what is kept.

What leaves your device#

Only what the agent reads for the request in front of it. The context engine loads a workbook outline first, then sheets, then ranges, so a prompt about one sheet does not ship the other nine. See What the agent can see.

Attachments go too: images, rendered PDF pages, and spreadsheet contents when you attach one.

Where it goes#

With your own key#

Excel to OpenRouter to the model provider you selected. Nothing routes through CRE Edge. There is no server of ours in the path.

On the included model#

Excel to the Excelente proxy at excelente.aiedge.ac, then to OpenRouter and the model provider. The proxy exists so A.CRE or CRE Agents can pay for the request and apply your monthly included usage. To do that it confirms your membership with the service you connected, using the credential you connected, and meters spend against a one-way hash of your account identifier there.

The proxy does not store or log workbook content, prompts, responses, or attachments. It keeps a pseudonymous ledger of monthly cost for the current and previous month, an in-memory membership verdict for up to an hour, and rate-limit counters that expire in minutes. Standard web-server access logs record address, timestamp, path, and status, never request content.

What happens at OpenRouter and the model provider#

Out of our hands and worth your attention. OpenRouter's handling is governed by its privacy policy, and each provider's by its own terms. OpenRouter documents provider data-handling and training policies per model.

This is the reason the picker labels one group Free Models (may train on your data). Those endpoints are free because the provider gets your prompts. Your prompts contain your workbook. Do not point them at a live deal.

What is stored, and where#

On your machine:

Your key is held in plaintext, which is what that storage offers. Your device's own security protects it. On a shared machine, use a key with a spend limit, and revoke it if the device is lost.

What we do not do#

• We do not use your workbook content, prompts, attachments, or model outputs to train, fine-tune, or evaluate any model.
• The included-model proxy does not store or log the content of your requests or responses.

Workbook memory travels with the file#

Memory lives in the workbook. Send the .xlsx and your notes go with it. Keep anything confidential out of it for that reason, and read it once when a file arrives with memory already written.

Memory arriving in someone else's file was written by them, so Excelente treats it as untrusted reference data and fences it in the system prompt as information rather than as instructions. A workbook cannot smuggle commands into your agent. See Workbook memory.

Connectors#

A connector's tools run inside your conversation and receive whatever the agent passes them, and the server's own instructions text reaches the system prompt, capped and treated as untrusted.

Connect servers you trust. A write-classified connector tool still stops at your approval card, which bounds the damage without eliminating the consideration. See Connectors overview.

Nothing runs unattended#

Excelente calls a model only in response to something you did. It does not poll, does not run in the background, and spends nothing while the pane sits open. Closing the pane mid-run stops the run.

Removing your data#

For A.CRE-stored data, use the Contact Us form. Verified requests are answered within thirty days.

Also worth reading#

• Privacy policy, the governing document
• Terms of use
• License, Apache 2.0