Privacy Policy

Effective date: 2026-05-07
Last updated: 2026-05-07

This Privacy Policy explains how Excel Armor, located at Rabbi Averbuch 26, Ramat Hasharon 4740020, Israel ("we", "us", "our"), collects, uses and protects personal data when you visit https://excel-armor.com or use Excel Armor (the "Software"). It is written to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, the Israeli Privacy Protection Law and other applicable data protection laws.

1. Data controller and contact

The data controller is Excel Armor. You can contact us about privacy matters at [email protected].

2. What personal data we collect

We collect only the data we need to operate the Service and to verify the validity of your license. The categories are:

  • Identification data you provide: name or username, email address, country, and any optional information you submit through the registration form or support requests.
  • License data: the license key we issue to you, the type of license, the registration date and the expiration date.
  • Device identifier: a non-reversible identifier derived from the serial number of your computer's primary drive ("Device ID"), used to bind the license to a specific device and to enforce the maximum number of devices allowed by your license. We do not collect a list of files, file contents, the names of your workbooks, the content of your VBA code, network drives, or any other system or storage information.
  • Verification logs: the date and time of each license verification request, the result of the verification (approved or denied), the IP address from which the request originated, and the version of the Software.
  • Payment data: processed directly by our payment processor Lemon Squeezy. We receive a transaction reference, your billing country, the amount paid and the last four digits of your payment instrument. We do not store your full card number, CVV or banking details.
  • Communications: the content of emails, support tickets and other messages you send us.
  • Website usage data: when you visit https://excel-armor.com, our hosting provider Netlify processes server logs (IP address, browser type, pages visited, referrer, timestamp) for security and statistics. See our Cookie Notice.

3. Why we use your data and on what legal basis

We process your personal data for the purposes and on the legal bases listed below.

  1. To deliver the Software and your license - sending the download, issuing and managing your license, providing support. Legal basis: performance of a contract with you (GDPR Art. 6(1)(b)).
  2. To verify your license - receiving and answering verification requests sent by the Software, binding the license to your Device ID, enforcing the device limit. Legal basis: performance of the license contract (Art. 6(1)(b)) and our legitimate interest in protecting the Software against unauthorized use (Art. 6(1)(f)). We have balanced this interest against your rights and consider it proportionate because we collect only the minimum identifiers required, do not access any of your files, and provide you with a human-review channel if a verification is denied.
  3. To process payments - receiving payment, issuing invoices, complying with VAT and accounting rules. Legal basis: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).
  4. To respond to your support and contact requests. Legal basis: performance of a contract (Art. 6(1)(b)) or our legitimate interest in answering enquiries (Art. 6(1)(f)).
  5. To send service messages - for example license expiry notices, security notices and updates. Legal basis: performance of a contract (Art. 6(1)(b)).
  6. To send marketing emails about new features and offers. Legal basis: your consent (Art. 6(1)(a)). You can withdraw consent at any time using the unsubscribe link in any marketing email or by contacting us.
  7. To comply with legal obligations - in particular tax, accounting and consumer-protection record-keeping. Legal basis: compliance with legal obligations (Art. 6(1)(c)).
  8. To establish, exercise or defend legal claims and to detect or prevent fraud or unauthorized use. Legal basis: our legitimate interests (Art. 6(1)(f)).

4. Automated decision-making

License verification is an automated process. The result (approved or denied) does not have legal effects on you and does not produce similarly significant effects within the meaning of Article 22 of the GDPR, because it does not modify, delete or otherwise affect any of your files or data - it only determines which features of the Software are available to you during a session. If your verification is denied and you believe this is in error, you can request human review by emailing [email protected]; we will respond within a reasonable time.

5. Who we share your data with

We share personal data only with the following categories of recipients, each of which acts as our processor under a written data processing agreement, or as an independent controller where required by law:

  • Make.com (Celonis) - operates the automation workflows that receive and answer license verification requests and send service emails. Hosted in the European Union.
  • Lemon Squeezy - processes payments and handles VAT collection where applicable. Acts as an independent controller for the payment data.
  • Netlify, Inc. - hosts the website https://excel-armor.com. Located in the United States.
  • Email service provider - sends transactional and, where you have consented, marketing emails.
  • Professional advisors - accountants, lawyers, auditors when required for our legal or business obligations.
  • Authorities - when we are required to disclose data by law, court order or competent authority.

We do not sell your personal data and we do not share it for advertising purposes.

6. International transfers

Some of our processors are located outside the European Economic Area, in particular in the United States. When we transfer personal data outside the EEA we rely on appropriate safeguards, in particular the Standard Contractual Clauses adopted by the European Commission (Decision 2021/914) and, where applicable, the EU-US Data Privacy Framework. You may request a copy of these safeguards by contacting [email protected].

7. How long we keep your data

  • Account, license and verification data: while your license is active and for up to 7 years after termination, in line with Israeli tax and accounting requirements.
  • Payment and invoicing records: for the period required by applicable tax law (typically 7 years).
  • Support correspondence: up to 3 years from the last contact.
  • Marketing data: until you withdraw consent or after 2 years of inactivity, whichever is earlier.
  • Server logs: up to 12 months.

After these periods, data is deleted or irreversibly anonymized.

8. Your rights

Subject to applicable law, you have the following rights with respect to your personal data:

  • Access - request a copy of the personal data we hold about you (GDPR Art. 15).
  • Rectification - ask us to correct inaccurate or incomplete data (Art. 16).
  • Erasure - ask us to delete your personal data, subject to limits (Art. 17). We may need to retain certain data to comply with legal obligations or to defend legal claims; in particular, for fraud prevention we may keep a minimal record of suspended licenses.
  • Restriction - ask us to restrict processing in certain cases (Art. 18).
  • Data portability - receive your data in a structured, commonly used format (Art. 20).
  • Object - object to processing based on our legitimate interests (Art. 21).
  • Withdraw consent - withdraw your consent at any time, without affecting prior processing (Art. 7(3)).
  • Lodge a complaint - with your local data protection authority. In Israel, this is the Privacy Protection Authority. In the EU, you may contact the supervisory authority of your country of residence; a list is available at edpb.europa.eu.

To exercise these rights, contact [email protected]. We will respond within one month.

9. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted connections (HTTPS/TLS) for all communications between the Software and our servers, restricted access on a need-to-know basis, and secure credentials for our processors. No system can be guaranteed to be 100% secure; if we become aware of a breach affecting your personal data, we will notify you and the competent authority where required by law.

10. Children

The Site and the Software are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Site with a new effective date. For material changes we will notify you by email.

12. Contact

Excel Armor
Rabbi Averbuch 26, Ramat Hasharon 4740020, Israel
Email: [email protected]