Privacy Policy

Effective date: May 13, 2026

Short version

StrategyXL is a desktop Excel add-in. We don't run an account system, we don't track your usage, and we don't store your trading data on our servers. The only data that touches us directly is what's required to sell you a license, deliver it, validate it on your machine, and respond when you email us. This page tells you exactly what those flows look like.

Who we are

StrategyXL is a product of Second Chapter Ventures, LLC, a North Carolina limited liability company doing business as StrategyXL. Questions about this policy go to support@strategyxl.com.

What we collect and why

1. When you visit this website

Our site is hosted on Cloudflare. Cloudflare logs IP addresses and basic request metadata (timestamp, URL, user-agent) for security and abuse prevention. We do not use any analytics, advertising, tracking pixels, or third-party scripts. We do not set tracking cookies. Cloudflare may set its own short-lived security cookies; see their policy linked above.

2. When you buy a license

Purchases are processed by Lemon Squeezy, who acts as the Merchant of Record. Lemon Squeezy collects your payment details, billing address, and email directly — we never see your card number. After a successful purchase, we receive only your email address and name (for order records and license delivery) and the Lemon Squeezy order ID.

3. When the add-in activates your license

Your installed copy of StrategyXL talks directly to Lemon Squeezy's license API to activate, validate, and (if needed) deactivate your license. Each request sends only:

• Your license key.
• A randomly-generated per-install identifier (a GUID written once to your machine the first time the add-in runs) — used so that you can install on up to two devices and deactivate one if you replace hardware.

We do not send your username, your real machine name, or any market data through this channel. Validation runs once every 7 days and the add-in is allowed up to 7 more days of offline grace before requiring reconnection.

4. When you email us

Email to support@strategyxl.com, shawn@strategyxl.com, ideas@strategyxl.com, or security@strategyxl.com is delivered through Migadu, our email provider. We keep support correspondence so we can pick up a conversation if you write back, and so we can spot patterns in feedback. We do not add you to a marketing list.

5. When the add-in fetches market data

Market data comes from Tiingo, who you sign up with directly. You paste your own Tiingo API key into the add-in; from then on, ticker requests flow straight from your machine to Tiingo's servers. We do not proxy this traffic and we do not see which symbols you research or how often.

6. When the add-in fetches our public data

Some features (Index Holdings, company-name lookups) read static public JSON files from data.strategyxl.com. These files are the same for every customer; we don't customize responses per user. Cloudflare may log the IP requesting these files.

What's stored on your computer

StrategyXL keeps a small amount of local state so it can resume between sessions. Nothing in this folder leaves your machine unless you choose to send it to us:

• %LOCALAPPDATA%\StrategyXL\license.json — your license key, the per-install GUID, last-validated timestamp, and the next re-check date.
• %LOCALAPPDATA%\StrategyXL\machine.id — the per-install GUID, on its own.
• A small SQLite database with your saved template defaults and a cached copy of ticker names.
• A lifecycle log noting when Excel loads and unloads the add-in. Useful for diagnosing the rare case where Excel starts unexpectedly; contains no market data.

Uninstalling StrategyXL removes the registry entry that loads the add-in. You can delete %LOCALAPPDATA%\StrategyXL\ manually if you want to remove all local traces.

Third parties

We rely on a small set of vendors to operate. Each has its own privacy policy:

• Lemon Squeezy — payments + license issuance and validation.
• Tiingo — market data (you contract with them directly via your own free account).
• Cloudflare — website hosting, CDN, and DDoS protection.
• Migadu — email hosting for our support inbox.

We do not sell, rent, or share customer data with anyone outside this list, and the list does not include marketing or advertising vendors.

Data retention

Order records (your email + LS order ID) are retained as long as the underlying license is active — they're what lets us help you if you lose your key. Support correspondence is retained indefinitely so we can stay coherent across long-running conversations. You can ask us to delete either at any time.

Your rights

Depending on where you live, you may have legal rights to access, correct, or delete the personal data we hold about you (GDPR for the EU/UK, CCPA for California, and similar laws elsewhere). To exercise any of these rights, email support@strategyxl.com from the address tied to your license. We'll reply within 30 days.

Children

StrategyXL is not intended for, marketed to, or knowingly sold to anyone under 18. We do not knowingly collect personal data from children.

Changes to this policy

If we change anything material, we'll update the effective date at the top of this page and, if the change affects existing customers meaningfully, send a note from support@strategyxl.com.

Contact

Second Chapter Ventures, LLC
Waxhaw, North Carolina, USA
support@strategyxl.com