ImportXML.com

Privacy Policy

Last Updated: July 10, 2026

🔒 The Short Version: Your Financial Data Is 100% Private

✅ We DO NOT collect:

  • • Your Excel file contents
  • • The XML files we generate
  • • Your party names / ledger names
  • • Your invoice amounts or dates
  • • Your Tally company name

📊 We MAY collect (anonymised):

  • • Page view counts (analytics)
  • • Which tool was used (not what data)
  • • General browser/country info
  • • Web server access logs (IP, timestamp)

At ImportXML.com ("we", "us", or "our"), your privacy is fundamental to how we built our tools — not an afterthought. This Privacy Policy explains exactly how your data is handled when you visit and use our website.

1. How Our Tools Process Your Financial Data

We do not collect, store, or transmit your financial data. Here is the exact technical mechanism:

When you use any of our converter tools (Purchase XML, Sales XML, Bank Statement):

  1. File reading via FileReader API: When you select an Excel file, the browser's built-in FileReader API reads the file directly into your browser's memory (RAM). The file bytes never leave your device at this step.
  2. In-browser parsing: The SheetJS (xlsx.js) library — loaded once from our server, then running entirely locally — parses the Excel data into JavaScript objects inside your browser tab.
  3. XML generation in JavaScript: Our JavaScript code reads those objects and builds the XML string using string concatenation. No network request is made during this step.
  4. Download via Blob URL: The final XML is converted to a browser Blob object and made available for download via a local URL.createObjectURL() link. The XML file is never uploaded to any server — it goes directly to your Downloads folder.

You can verify this yourself: Open your browser's Developer Tools (F12), go to the Network tab, and use any of our tools. You will see zero network requests containing your Excel file data or the generated XML content during conversion.

We have no technical capability to access your financial data, even if we wanted to. There is no server-side code that touches your data.

2. Website Analytics (Non-Financial Data)

We may use standard web analytics (such as Google Analytics) to understand how visitors use our website. This data is completely separate from your financial data and may include:

  • Aggregated tool usage events: e.g., "Purchase XML tool was used X times today" — no data about what was converted.
  • Page views and navigation paths: Which pages were visited and in what order.
  • General device/browser info: Browser type, screen size, general geographic region (country/state — never precise location).

Analytics data is anonymised and cannot be linked to you personally. It is used solely to understand which features are most useful and to improve the site.

3. Server Log Files

Like all websites, our hosting provider automatically creates server access logs. These logs record: IP address, browser type, referring URL, and date/time of page requests. This information is used for security monitoring and site administration only. Log files are retained for a maximum of 30 days and are not shared with third parties for marketing purposes.

4. Cookies

Our website may use cookies for:

  • Analytics: Google Analytics uses cookies to distinguish users and sessions (anonymised).
  • No marketing/advertising cookies are currently used. If we add display ads in the future, this policy will be updated and a cookie banner will be shown.

You can disable cookies in your browser settings. This may affect analytics tracking but will not affect the functionality of our tools — the conversion tools do not require cookies to operate.

5. Contact Form Data

If you use our contact form, your submitted name, email address, and message are sent to our email via Formspree (a third-party form service). This data is used solely to respond to your inquiry and is not shared with any third party. We strongly advise against including actual financial data (ledger names, amounts, party details) in support messages — describe the issue in general terms instead.

6. Third-Party Links

Our website may contain links to third-party sites (e.g., Tally documentation, blog references). We have no control over and assume no responsibility for the content or privacy practices of those sites. Please review each site's privacy policy independently.

7. Changes to This Policy

We may update this Privacy Policy as our services evolve. Any changes will be posted on this page with an updated "Last Updated" date. Significant changes (e.g., adding advertising cookies) will be communicated via a site notice.

8. Contact Us

For privacy-related questions, contact us at support@importxml.com or use our contact form.