Privacy policy

Choosing a CSV or .xlsx file reads it in your browser. The cleaner parses the table, profiles the columns, and can clean it there. CSV files of 256 KB or larger are parsed in a background thread in the browser when that thread is available. If it is not, the same work continues in the page. Excel files are read in the page. The file is not posted to a server in either case.

Files larger than 32 MB and empty files are rejected before their contents are parsed. Older .xls workbooks are not opened. A download is a CSV created in the browser from the table on screen. You can also download a summary of counts after you apply a change. That summary does not include cell values. If you prefix formula-like cells, that change is made in the downloaded file only. The table remains in memory until you refresh, leave the page, or choose New file. The application has no account and no database copy of the table.

The email verifier reads a CSV in the browser. Syntax, typo checks, and the disposable-domain list run on that device. If you run a domain check, the page sends the domain names, in batches, to this site. The server asks DNS for mail records and returns the outcome.

Optional advanced mailbox verification runs only when you choose Advanced mailbox check and a server-only ABSTRACT_EMAIL_API_KEY is configured. Then the page sends email addresses, in small batches, to this site, which calls Abstract Email Validation. Other CSV columns are not included. The API key is never published as a NEXT_PUBLIC value. Without that key, local syntax and domain checks still run and no addresses are sent to Abstract.

A host can still record an ordinary log of those requests. That log can include the domain names or email addresses that were sent for the check. It does not include the rest of the row.

The lead generator keeps the wizard answers in the browser until you run discovery. Then this site sends the country, optional city or region, industries, keywords, and result limit to its own search API. The server queries allowlisted OpenStreetMap Overpass and Wikidata endpoints. It does not accept arbitrary user-supplied data-source URLs.

Returned listings keep source URLs and licence attribution. Missing contact fields stay unknown. Public Overpass and Wikidata services are rate-limited community infrastructure; they are not presented as unlimited commercial access.

When website analysis runs, this site fetches only allowlisted public http(s) pages after SSRF checks, robots.txt evaluation, timeouts, and size limits. Private or metadata destinations are blocked. Page HTML and contact details are not sent to AI providers. The analyzer does not submit forms, send messages, or bypass login or bot protection.

Opening a page, or following a link, requests that page and its scripts from the server that hosts NovaToolora. The application does not add your CSV to that request.

The application code does not write its own access log. A host can still record an ordinary server log of a page request, such as the path, the time, and the network address. Those logs are a property of the host, and this application does not set a retention period for them. They do not contain the CSV, because the CSV was not sent.

The application does not set cookies. It does not read a cookie to remember your file, your cleaning plan, or a login, because it has none of those accounts. A browser can still keep its own cache of pages and scripts. That cache is not a NovaToolora cookie.

This application does not load a third-party analytics script, an advertising tag, or a measurement cookie. It does not send a cleaning event to a server.

While the page is open, it can keep a short list of event names in memory, such as the tool path, a file-size bucket, and a row-count bucket. That list is discarded when you refresh or leave the page. It does not include the file name or cell values, and it is not transmitted.

Browser extensions, an employer network, or the email program you use from the contact page can handle data outside this application. This policy does not claim a legal certification, a registered office, or a guarantee about logs kept by a hosting provider.

The terms of service describe how to use the cleaner. The about page describes the processing steps.