Privacy Policy
How we use information
Excelsius uses account details, setup answers, workspace records and the connections you authorize to provide the features you choose. Account, session, workspace, run and support records may be stored in our hosted database. A connected Notion workspace is another place your records may live; using Notion does not mean Excelsius stores no related account or operating records.
Connected services
The permission request shown when you connect a service identifies the access you are granting. Features use the connected service under the permissions and controls for that feature. Gmail draft preparation and a separately authorized send are different actions; the entire Gmail connection is not described as draft-only. Google Calendar features may read calendar information and manage supported solo work blocks. See the connection and authority controls before enabling a feature. You may revoke a grant through the provider's settings.
Connection credentials
Connection tokens are encrypted at rest using AES-256-GCM. Server-side features decrypt tokens when they need to call a connected provider. This includes connection checks and revocation as well as managed work.
Service providers and sharing
Providing the service involves third-party providers for hosting, database storage, model processing, subscription payments, communications and analytics. Information is processed by those providers as needed for the features you use and their configured roles. The Security page describes providers used in the service. Excelsius does not sell or share your personal information.
Analytics and screen recordings
We use two analytics tools on excelsius.co; a third, Microsoft Clarity, is paused. Site analytics uses Vercel Web Analytics and Speed Insights, and Plausible. Clarity is paused: it loads on no page, records nothing and sets no cookie. If it resumes, this page will say so first. A resumed recording can contain workspace or other business information displayed on screen.
The following Clarity masking and retention description applies only if recording resumes. Microsoft documents that input fields are masked in all Clarity masking modes. Displayed content depends on the selected masking mode and page configuration. Clarity also collects interaction, page and diagnostic data. Consult Microsoft's documentation for its current retention practices. See Clarity masking, Clarity retention and the Microsoft Privacy Statement.
Plausible and Vercel describe their collection practices in the Plausible Data Policy and Vercel Web Analytics privacy documentation. Their descriptions do not establish that a particular session contained no personal information.
Google user data
Excelsius's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. Google data may be processed by service providers needed to provide those features. It is not used for advertising or to train generalized AI or machine-learning models. Human access is limited to the purposes allowed by that policy, including your request, security investigation or applicable law.
Export, cancellation and deletion
Workspace export in Settings produces Markdown and CSV for supported workspace content, including available Record and Memory data. The export has traversal and page limits, so it does not promise every possible item with complete fidelity. Cancellation and revoking a provider grant are separate actions. We keep your data while your account is active, export it on request, and delete it on request. Contact support with account deletion, retention or export requests.
Cookies
The product uses session cookies for sign-in. Microsoft Clarity sets two first-party cookies (paused since 9 October 2026; it sets none while paused), _clck and _clsk. Analytics cookies and identifiers depend on the provider and its configured consent behavior. Consult the linked provider policies for their current practices.
Contact
Send privacy and deletion requests to support@excelsius.co.