Oda in Excel privacy policy

Last updated October 22, 2026

01 What this policy covers

This policy explains how personal data is handled when you install and use DataMind Oda: AI Data Agent, the add-in for Microsoft Excel that we call Oda in Excel (the “add-in”). It covers the add-in in every place it runs: Excel on Windows, Excel for Mac and Excel on the web, whether you get it from Microsoft Marketplace or from your organization.

The add-in is part of DataMind OS, a data platform that organizations license from DataMind. “DataMind,” “we” and “us” mean the publisher of the add-in:

DataMind Oda is published by Datamind, registered in Georgia under identification code 405458393, Tbilisi, Georgia.

This policy also covers this website, datamind-oda.com, which delivers the add-in’s files. The website sets no cookies, runs no analytics and keeps no access logs.

This policy does not cover:

other DataMind websites, such as datamind.com;
how your organization uses DataMind OS outside the add-in, which is set by your organization and its agreement with DataMind;
Microsoft’s handling of data in Excel and Microsoft 365, which is covered by the Microsoft Privacy Statement.

02 Who is responsible for your data

To use the add-in, you sign in to your organization’s DataMind workspace: the DataMind OS installation your organization runs on its own servers, or one DataMind hosts for it.

Your organization decides who can use the add-in, which data and AI features they can reach, and how long its workspace keeps records. For the content you work with through the add-in, your organization is the controller (the party responsible for it under data protection law).
DataMind processes that content on your organization’s instructions when it hosts your organization’s workspace and when it runs the AI gateway described in section 4. In those roles we act as a processor or service provider, under our agreement with your organization.
DataMind is responsible as a controller only for the limited data in section 8: support requests and keeping the service secure.

If you have a question about data in your organization’s workspace, start with your organization’s administrator. You can always write to us at privacy@datamind.com.

03 What the add-in reads

The add-in reads data only while you use it, and only what it needs for what you ask:

Your messages and the answers to questions Oda asks you.
Workbook context sent with each message: the workbook’s file name, the sheet you are on, the cells or chart you selected, the sheets and tables in the workbook, and a short list of what you changed since Oda’s last reply.
Workbook content Oda reads for a task: cell values, formulas, formatting, notes and comments, chart and pivot table settings, and, when a task needs it, a picture of a range, chart or shape.
Files you attach: the text and images Oda extracts from PDF, Word, PowerPoint, Excel, CSV and image files you attach to a message.
Memory notes and instructions, if you turn them on: Oda sends them with your messages so it can follow them.
Your account: your name, email address and permissions as your DataMind workspace knows them.
Technical data: the add-in version, the type of client, a random chat id, and the address of your DataMind workspace.

The add-in does not read other workbooks, other files on your computer, or your Microsoft 365 account data. It cannot run commands on your computer.

04 Where your data goes

Where	What goes there	Why
Your computer (the add-in’s storage in Excel or your browser)	Your chats, Oda’s record of the Minds and queries in each chat, files you attach, your settings and, in the Microsoft Marketplace version, the DataMind address you entered and up to 5 recent addresses. Memory notes and instructions, if you turn them on. Python’s program files are cached by the browser.	So chats and files are there when you reopen the workbook. Attached files are not uploaded to any server.
The workbook	What Oda writes into it, plus a few add-in settings saved inside the file: a random workbook id, a record of each data pull (the source, the query and when it ran) so it can be refreshed, the Mind chosen for the workbook, and which helper sheets Oda created. The version your organization installs from its own DataMind can also save whether the add-in opens with the file; the Microsoft Marketplace version never does.	So pulls can be refreshed. These travel with the file to anyone you share it with.
Your organization’s DataMind workspace	Your sign-in; every request the add-in makes, including your messages and the workbook content and attachment text that go to the AI model; questions you send to Minds and the queries they run; and, where your administrator allows it, web searches and connector requests.	To sign you in, answer your requests, apply your organization’s access rules, and keep the records your organization chooses to keep (section 6).
Ratings and reports, in your organization’s DataMind workspace	When you rate an answer or use Report this answer: your rating or the reason for the report, an optional comment of up to 2,000 characters, the model, the chat and answer ids, the add-in version and the type of client, and your account. The answer and your message are included only when you tick the box.	So your organization’s administrators can review answers. DataMind does not review ratings or reports; where DataMind hosts your workspace, it stores them for your organization. To tell DataMind about an answer, email support@datamind.com.
DataMind’s AI gateway (operated by DataMind)	The AI request your workspace forwards: your messages, the workbook content and attachment text and images Oda read, and the results of its steps; and, when web access is on, the search text Oda writes and the addresses of public web pages it reads. It carries your organization’s installation key, the model id, a pseudonymous user number (`oda:` followed by a number) and a chat session id, not your name or email. The gateway records the user number with the usage of each request (section 6).	To route the request to an AI model or to the web search and page reading providers, apply your organization’s AI policies, and record usage for billing.
OpenRouter, the model router (a subprocessor, section 9)	The same AI request. The gateway forwards the pseudonymous user number and the chat session id with it, which OpenRouter uses to keep a chat on the same model endpoint.	To send the request to a zero-data-retention model endpoint, with provider data collection denied.
AI model providers (subprocessors, section 9)	The same AI request, sent only to zero-data-retention model endpoints, with provider data collection denied.	To generate Oda’s answers and next steps.
Web search and page reading providers (only if your administrator turns web access on)	The search text Oda writes, or the address of a public web page it reads, sent through DataMind’s AI gateway.	To answer questions that need public web information.
Connectors your administrator adds (only if used)	The requests Oda sends to that service and the data in them. That service handles the data under its own terms.	To work with the tools your organization connects.
Microsoft	Excel hosts the add-in and loads Office.js from `appsforoffice.microsoft.com`, and the add-in loads Microsoft’s Ajax library from `ajax.aspnetcdn.com`. These Microsoft services see your IP address and handle data under the Microsoft Privacy Statement.	To run Excel and the add-in.
datamind-oda.com (the Microsoft Marketplace version)	Requests for the add-in’s files. The address of the add-in’s page includes the DataMind address you entered. datamind-oda.com does not log either.	To deliver the add-in to Excel.

Code that Oda writes, in Python or in Office.js, runs on your computer in a sandbox inside the add-in that has no network access and cannot read your sign-in or chats. Only its results go to the AI model, like any other step.

05 What we do not do

We do not sell your personal data and do not use it for advertising.
We do not use your messages, workbook content or files to train AI models. We route requests only to model endpoints that do not keep them, with provider data collection denied.
The add-in contains no advertising cookies, analytics or third-party trackers.
The add-in does not load images from the web inside its answers; they show as links.

06 How long data is kept

Data	Where	How long
Chats and Oda’s record of them	Your computer	Until you delete the chat, until it drops off the list when a workbook passes 50 chats or the computer passes 500, until you sign out, or until a different account signs in on that computer.
Attached files	Your computer	Up to 25 MB per file, 200 MB per workbook and 1 GB in all. Deleted with the last chat they belong to, when you remove them to free space, when you sign out, or when a different account signs in.
A message you have not sent yet	Your computer (the browser’s session storage)	Kept when you reload the pane so the reloaded pane can give it back, to the same account only. Removed as soon as the reloaded pane takes it back or you sign out, and gone when that window closes.
Large step results	Your computer	At most 100 MB in all, oldest removed first. Deleted with their chat, when you sign out, or when a different account signs in.
Memory notes and instructions	Your computer	Off until you turn them on. Deleted when you delete them, when you sign out, or when a different account signs in.
Settings	Your computer	Kept when you sign out, until you clear the add-in’s storage in Excel or your browser or, in the Microsoft Marketplace version, choose Forget for that DataMind address.
Your DataMind address	Your computer	The Microsoft Marketplace version remembers the address you entered and up to 5 recent addresses until you remove one with Forget, which also deletes that workspace’s chats, attached files, step results, notes, instructions and settings on this computer.
Add-in settings inside the workbook	The workbook	As long as the file keeps them. You can remove helper sheets and pulled data like any other content.
Sign-in	Your computer and your workspace	The short-lived pass stays only in memory, for up to 8 hours. The sign-in that renews it is kept in a secure, partitioned cookie your workspace sets, which the add-in’s own code cannot read, for up to 30 days, until you sign out or your organization revokes it.
Request and AI logs	Your organization’s workspace	Set by your organization. DataMind OS keeps them until your organization deletes them. If your administrator lets you, you can turn off content logging in your DataMind OS profile; your requests are then recorded without their content, keeping only who made them, when, the model and token use. Images are never stored in the AI log, only a short marker.
Ratings and reports	Your organization’s workspace	A rating until you or an administrator removes it, or your account is deleted. A report until an administrator deletes it or your account is deleted.
AI gateway records	DataMind	Usage records (organization, time, model, token counts, cost, the pseudonymous user number and the version of the DataMind workspace that sent the request). Kept as long as needed for billing, accounting and tax obligations, then deleted. The gateway does not keep the content of Oda’s requests.
Model providers	Subprocessors	Not kept after the response is returned (zero-data-retention model endpoints).
datamind-oda.com	DataMind	No access logs. Its error log leaves out your IP address and the request.
Support requests	DataMind	While the request is open, then up to 24 months, or as your organization’s agreement sets.

In the Microsoft Marketplace version, each DataMind workspace you connect to keeps its data on your computer separately. Signing out, or Switch in Settings, deletes the chats, attached files, notes, instructions and step results of the workspace you were signed in to, and the data of other workspaces stays until you sign out of them or choose Forget for their address.

07 Sign-in, cookies and local storage

You sign in with your organization’s DataMind account, in a sign-in window opened by your click. If your organization signs in with Microsoft, Google or another provider, that window goes to the provider’s own sign-in page; the add-in never sees your password.
After sign-in, your workspace sets one cookie that keeps you signed in. It is HttpOnly (page code cannot read it), Secure, limited to the add-in’s sign-in address and partitioned so it is not shared with other sites. If Excel or your browser does not keep your DataMind sign-in, DataMind Oda asks you to sign in each time you open a workbook. Your chats stay on this computer.
The add-in uses the storage Excel or your browser gives it (IndexedDB, local storage and, for a message you have not sent yet, session storage) for chats, files and settings, as described in sections 4 and 6.
The add-in sets no advertising or analytics cookies, and datamind-oda.com sets no cookies at all.

08 Data DataMind is responsible for

Data	Why	Legal basis, where the law asks for one
Support requests: what you send when you contact support, such as your name, email, organization, the problem and anything you attach.	To help you.	Our agreement with your organization; our legitimate interest in supporting users.
Security events: records of suspected abuse or attacks on DataMind services.	To protect users and the service.	Our legitimate interest; legal obligations.

09 Subprocessors

DataMind uses these subprocessors for the add-in, datamind-oda.com and the AI gateway.

Subprocessor	Service	Data
Microsoft Corporation	Microsoft Azure: hosting of datamind-oda.com and the AI gateway in Italy, and of DataMind-hosted workspaces in the region agreed with your organization. Microsoft 365: support email.	Everything that passes through those services, and support requests.
OpenRouter, Inc. (United States)	Routing AI requests to model endpoints, with zero-data-retention routing forced and provider data collection denied.	AI requests, the pseudonymous user number and the chat session id.
AI model providers	Generating answers, reached only through zero-data-retention model endpoints. For example Anthropic, Google and Amazon Web Services.	AI requests.
Brave Software, Inc.	Brave Search API, when your administrator turns web search on.	The search text Oda writes.
Firecrawl	Reading public web pages, when your administrator turns web pages on.	The addresses of the pages Oda reads.

We announce changes to this list on this page 30 days before they take effect.

10 Security

All traffic between the add-in, your workspace and DataMind’s services uses HTTPS.
The add-in may connect only to the address that serves it and the DataMind workspace you entered. Its content security policy blocks other destinations, and it does not load remote images in answers.
Code Oda writes runs in a separate sandbox without network access, and every change it makes to the workbook goes through the same approvals as Oda’s other changes.
The add-in keeps no sign-in secret in its storage; the pass it uses lives only in memory.
Your organization’s access rules for tables, columns and rows apply to everything Oda reads from DataMind OS.
Sign-ins for connectors are stored encrypted on your workspace.

No system is perfectly secure. Report suspected vulnerabilities to support@datamind.com.

11 AI and automated processing

Oda uses AI models to understand requests and decide which steps to take in your workbook. It does not make decisions that have legal or similarly significant effects on you. AI output can be wrong or incomplete: check answers and changes before you rely on them. Content in a workbook or file you did not create can contain instructions meant to mislead an AI; by default, Oda asks before it overwrites or removes data, and you can require approval for every change.

12 Your rights

Depending on where you live, you may have the right to:

get a copy of your personal data;
correct it;
delete it;
restrict or object to how it is used;
receive it in a portable format;
withdraw consent where we rely on it.

Data in your organization’s workspace: ask your organization’s administrator, who controls it. We will help your organization respond.

Data on your computer: delete a chat in the add-in, or choose Sign out, which deletes your chats and attached files for that DataMind workspace on that computer. In the Microsoft Marketplace version, Forget next to a remembered DataMind address removes the data of a workspace you no longer use.

Data DataMind is responsible for (section 8): write to privacy@datamind.com. We reply within the time the law sets. We will not discriminate against you for using your rights.

You can also complain to the data protection supervisory authority where you live or work.

13 International transfers

DataMind, your organization’s workspace and our subprocessors may process data in countries other than yours. When personal data moves across borders, we use safeguards the law recognizes, such as the European Commission’s Standard Contractual Clauses. If your organization runs its workspace on its own servers, workspace data stays where your organization runs it; AI requests still travel to DataMind’s AI gateway and the model providers.

14 Children

The add-in is for business use by people whose organization gives them access. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

15 Changes to this policy

We may update this policy when the add-in or the law changes. The date at the top shows the current version. If a change materially affects how your data is handled, we will say so on this page before it takes effect.

16 Contact

Questions or requests about personal data and the add-in: privacy@datamind.com.

DataMind Oda is published by Datamind, registered in Georgia under identification code 405458393, Tbilisi, Georgia.