Privacy Policy — EDI CSV Parser (edicsvparser.com)

1. Overview

edicsvparser.com ("we," "us," "the Site," "the Tool") provides a browser-based utility that converts ANSI X12 and EDIFACT EDI files into CSV, Excel, and JSON formats. This Privacy Policy explains what data is and is not collected when you use the Site, and applies to all pages of edicsvparser.com.

2. Your EDI Files Are Never Uploaded

The core function of this Tool — reading, parsing, and converting your EDI file — happens entirely inside your web browser using local JavaScript execution (the browser's FileReader API) and in-memory processing. The content of any file you drag, drop, or select is never transmitted to, uploaded to, or stored on any server operated by us or any third party we control. When you close the browser tab, the parsed data is gone — nothing is retained.

This is a factual, technical description of how the Tool is architected. It is not a certification of compliance with HIPAA, GDPR, PCI-DSS, or any other regulatory framework. If you are handling regulated data (e.g., protected health information, payment data, or personal data subject to GDPR/CCPA), you remain solely responsible for determining whether your own use of this Tool satisfies your applicable compliance obligations.

3. Information We Do Collect

While your file content never leaves your browser, we do collect limited, non-file technical and usage data via standard third-party services:

Analytics (Google Analytics 4): We use Google Analytics to understand aggregate usage of the Site — e.g., page views, which buttons are clicked, file extension of rejected uploads (never the file name or file content), approximate file size in bytes, and standard web analytics data (browser type, device type, approximate geographic region, referring site). See Google's own privacy policy for how Google processes this data.
Payment processing (Gumroad): When you purchase the Lifetime Access Pass, checkout is handled entirely by Gumroad, our third-party merchant of record, on Gumroad's own checkout page. We do not see, collect, or store your payment card details. Gumroad collects your email address and billing information directly to process your order and email you a receipt and your licence key; that data is governed by Gumroad's own Privacy Policy.
Local browser storage: A small flag and your license key are stored in your own browser's localStorage so that device remembers you've unlocked full exports. This is not a cookie and is not transmitted to us.
License verification (Gumroad license API): When you unlock by entering your licence key, that key is sent directly from your browser to Gumroad's licence API to verify it, together with the identifier of the product it belongs to. No device label, and nothing about your computer, is sent — the request carries only that key and the product identifier. A cached key is periodically re-verified the same way. This request contains no EDI file content of any kind. It is governed by Gumroad's Privacy Policy.

4. Cookies, Consent & Similar Technologies

Google Analytics and Gumroad's checkout page may set their own cookies or similar identifiers in your browser. We set no first-party tracking cookies of our own.

Consent. The Site implements Google Consent Mode v2 with analytics and advertising storage set to denied by default. If you are visiting from the EEA, the UK or Switzerland, a banner asks you to Accept or Reject analytics cookies before any analytics identifier is stored, and refusing is exactly as easy as accepting. Your choice is remembered in your own browser and you can change it at any time using the button below. Outside those regions, analytics run on the basis of legitimate interest as described here; you can still opt out at any time with the same button.

Strictly necessary storage. Your unlock flag and licence key are stored in your browser's localStorage because they are essential to deliver the paid service you explicitly requested. They are exempt from the consent requirement and are therefore not covered by the banner — declining analytics never removes access you have paid for.

Disabling cookies in your browser settings will not affect the Tool's core parsing or export functionality.

5. Data Retention

We do not operate a database of user files or parsed content — there is nothing for us to retain, because it is never sent to us. Aggregate, anonymized analytics data is retained by Google Analytics per Google's own retention settings. Payment and order records are retained by Gumroad per its own policies and as required for tax/accounting purposes.

6. Legal Basis, Controller & International Transfers

Controller. The data controller for the limited personal data described above is Optimus Global Solutions, Tel Aviv, Israel — Optimusglobalsolutions@gmail.com. We have not appointed an EU representative under GDPR Art. 27; if you believe one is required for your circumstances, contact us.

Legal bases (GDPR Art. 6). Analytics: your consent, Art. 6(1)(a), in the EEA/UK/CH — withdrawable at any time via the button in Section 4. Payment and licence verification: performance of a contract, Art. 6(1)(b). Fraud prevention, security, and defending legal claims: our legitimate interests, Art. 6(1)(f).

International transfers. Analytics and payment data are processed by providers located outside the EEA, including in the United States. Those transfers rely on the providers' own transfer mechanisms, such as Standard Contractual Clauses and the EU–US Data Privacy Framework. Israel, where the operator is established, benefits from a European Commission adequacy decision.

Important: the content of your EDI files is never transmitted anywhere, so it is never subject to any international transfer.

7. Your Rights

Depending on your jurisdiction (e.g., under GDPR, UK GDPR, or CCPA/CPRA), you may have rights to access, correct, delete, port, restrict, or object to processing of personal data about you, and to withdraw consent at any time without affecting the lawfulness of prior processing.

Because we hold no user database of our own, most requests are fastest when directed to the relevant provider: Google (analytics data) or Gumroad (order, payment, and licence records). You may also contact us at Optimusglobalsolutions@gmail.com and we will assist or forward your request. We aim to respond within 30 days.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not engage in cross-context behavioural advertising.

Right to complain. EEA and UK users may lodge a complaint with their national supervisory authority; UK users may contact the Information Commissioner's Office. We would appreciate the chance to resolve your concern first.

8. Children's Privacy

This Site is intended for business and professional use and is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Site after changes are posted constitutes acceptance of the revised policy.

10. Contact

For privacy questions or data requests, contact the site operator, Optimus Global Solutions, at Optimusglobalsolutions@gmail.com. You can also refer to the FAQ sections on the tool pages, or your Gumroad order receipt email for purchase-related support options.