What we collect
- Your prompt. What you type into the playground. Stored for 30 days so you can see it in your history, then deleted.
- The formula we returned. Same retention as your prompt.
- Your email. Only if you sign up for a pack or subscription. We use it to send receipts and absolutely nothing else.
- Your IP address. Temporarily, for rate limiting the free daily quota. Not stored beyond 24 hours.
What we don't collect
- Spreadsheet files. Ever. You only send us a description, not the actual data.
- Analytics cookies.
- Tracking pixels.
- Third-party trackers.
- Anything you didn't explicitly type into the tool.
Training data
Biscuit is a fine-tuned model. The training data does NOT include user prompts. We trained on a licensed dataset of real Excel and Sheets functions paired with human-written descriptions. Your data stays your data.
Third parties
The whole list:
- Vercel for hosting.
- Stripe for payments, only if you pay.
- Resend for transactional email, only if you subscribe.
- OpenAI API and Anthropic API for the actual formula generation. Our fine-tune sits on top of a base model.
That's it. No ad networks, no analytics vendors, no data brokers.
Your rights
- You can delete any past prompt from the dashboard.
- You can delete your whole account by writing to us through the contact form.
- GDPR and CCPA apply to us as far as they can be applied to a one-person company in Lisbon.
Retention
- Prompts and formulas: 30 days.
- Account info: until you delete it.
- IP addresses: 24 hours.
Changes
If this changes, we'll email subscribers and update the "last updated" date at the bottom of this page.
Contact
Questions about any of this? Drop Biscuit a note through the contact form. He reads everything.
Last updated: April 2026.