Privacy policy — Interiu FDD
This policy covers the Interiu FDD add-in for Microsoft PowerPoint, Excel and Word (the "add-in") and the service that delivers it from fdd.interiu.com. It explains what happens to your documents and to personal data when you use the add-in. The privacy policy of our website interiu.com is separate: interiu.com/privacy.
Who we are
| Controller | Interiu AI S.L., Calle Maquinaria, 4, 3, 1, 07011 Palma de Mallorca, Spain. NIF B75247320. |
|---|---|
| Privacy contact | legal@interiu.com |
| Supervisory authority | Agencia Española de Protección de Datos (AEPD), aepd.es |
What the add-in does
Interiu FDD reviews financial due diligence reports. When you press Run Review, it reads the document open in PowerPoint, Excel or Word (or a PDF file you choose in the panel), checks the figures and the text against each other and shows the findings in a side panel. All of this happens inside Office on your computer.
Your documents
The document is read in the add-in's panel, in your computer's memory. It is not uploaded to Interiu or to anyone else, and Interiu has no access to it. Documents often contain personal data (for example names of employees or directors of the company being reviewed); because the add-in does not transmit the document, Interiu does not receive or process that data.
The panel's Content Security Policy only allows network connections to the server the add-in was loaded from (fdd.interiu.com), and the panel shows a live count of every network request made since it opened, so you can verify this yourself, including by switching the network off after the panel has opened.
What is stored on your computer
The add-in keeps, in the browser storage that Office provides to add-ins on your computer: your confirm / dismiss marks on findings, your settings, and a cached copy of the add-in's own files so it can open without a network. Interiu cannot read this storage. You can clear it by removing the add-in or clearing the Office add-in cache.
Personal data we do process
| What | When and why | Legal basis, retention |
|---|---|---|
| IP address, time, requested file, browser / Office version | When Office loads the add-in's files from fdd.interiu.com, our hosting infrastructure (load balancer) records technical connection logs to deliver the files and protect the service. The add-in's own server does not log IP addresses. | Legitimate interest in running a secure service (GDPR Art. 6(1)(f)). Kept up to 30 days, then deleted. |
| Name, e-mail address and the content of your message | When you write to us for support or about a licence. | Performing our agreement with you or your firm, or steps you asked for before one (Art. 6(1)(b)); legitimate interest in answering (Art. 6(1)(f)). Kept while the matter is open and up to 3 years after, or as required by law. |
| Business contact details of the licensing firm's representatives | To manage the licence agreement and invoicing. | Performance of the contract (Art. 6(1)(b)); legal obligations for accounting and tax records (Art. 6(1)(c)), kept for the periods Spanish law requires. |
The add-in has no sign-in, no analytics or advertising trackers, no cookies, and does not use any artificial intelligence service. We do not sell personal data or use it for profiling.
Diagnostics edition (installed directly by firms, not in Microsoft Marketplace)
Some firms install, by their own administrator, a separate edition of the add-in, InteriuT FDD, from fdd-traced.interiu.com, whose ribbon tab is called "InteriuT". It is used for non-client material, for example to evaluate the add-in. In that edition the user can choose to send diagnostics to Interiu by pressing Send diagnostics; nothing is sent before the user has seen exactly what will be sent and pressed Send.
| Level | Contains |
|---|---|
| Check traces | which checks ran and how they ended, the user's confirm / dismiss marks, versions and timings. No text, figures or file names. |
| Anonymised (with a code issued by Interiu) | the structure of the document with labels replaced by tokens and amounts scaled by a secret factor. |
| Full (with a code issued by Interiu, for test material only) | the document and every result of the review. |
Diagnostics are used only to improve the checks, are stored in our database and file storage in the European Union (DigitalOcean, Frankfurt), are kept for up to 12 months, and are deleted earlier on request. The legal basis is the user's or firm's consent (Art. 6(1)(a)), which can be withdrawn at any time by writing to us. The edition in Microsoft Marketplace does not contain this function.
Service providers
| Provider | Purpose | Location |
|---|---|---|
| DigitalOcean, LLC | hosting of fdd.interiu.com (the add-in's files; diagnostics of the diagnostics edition) | Frankfurt, Germany (EU) |
| Microsoft | Office loads Microsoft's office.js library, required for every Office add-in; Office's own data handling is governed by your Microsoft 365 agreement and settings | per your Microsoft 365 tenant |
DigitalOcean is a US company; where personal data could be accessed from outside the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
Under the GDPR and the Spanish data protection law (LOPDGDD) you can ask for access to, correction, erasure or portability of your personal data, restrict or object to its processing, and withdraw consent at any time. Write to legal@interiu.com; we reply within one month. You can also complain to the AEPD or to the data protection authority where you live or work.
Children
The add-in is a professional tool for advisory firms and is not directed at children.
Changes
If we change how the add-in handles data, we update this page and the date above before the change takes effect. A change that makes the add-in send data it does not send today is introduced only as a new edition or a new Marketplace submission, and is announced to licensed firms in advance.