Privacy: what happens to your BOQ
A tender document is commercially sensitive. This page says what is done with it, who touches it and what is kept.
The short version
- Files are processed in memory and deleted after conversion.
- Pages that need a second look may be sent to Google's Gemini API for a vision check. Under Google's terms, data sent to the API can be retained for up to 55 days.
- Uploads are not used to train models.
- Samples, and rows you paste into the converter, are read in your browser and are never uploaded.
- The site sets no cookies of its own and shows no advertising.
What is processed when you upload a PDF
Your browser sends the PDF to this site's edge function on Cloudflare, which passes it to the conversion engine run by our compute provider. The engine reads the file in memory, returns the extracted tables, and the file is deleted after conversion. The extracted rows are turned into the Items and Sections results in the edge function and sent back to your browser.
If the engine finds a page it cannot read reliably, that page may be sent to Google's Gemini API as a vision check. Google's terms allow data sent to the API to be retained for up to 55 days. If a document must not leave a defined set of processors, do not upload it.
What is kept to apply the allowance
To apply the free allowance (1 file per day, up to 10 pages, no account) the site sends a random identifier that your browser generates and stores locally, and your connection's IP address, with each upload. They are used to count conversions and to limit abuse. They are not used for advertising and are not sold. If you enter a page code, it is stored in your browser and sent with your uploads, so the service can check it and take pages from it when a file is outside the free allowance.
What stays in your browser
The device identifier and any page code live in your browser's local storage under the names boq_device_id and boqtoexcel_code. Clearing site data removes them, and the Remove link beside the page-code field removes the code on its own. Sample runs and pasted rows are processed by JavaScript on the page and are not sent anywhere. The Excel workbook is also built in your browser.
Sub-processors
| Provider | Role | What it does here |
|---|---|---|
| Modal | Compute | Runs the conversion engine that reads the PDF. |
| Vision check | Pages that need a second look may be sent to the Gemini API. | |
| Cloudflare | Hosting | Serves this website and runs the edge function that passes your upload to the engine. Also delivers the spreadsheet library from cdnjs when you ask for an Excel file. |
| PayPal | Subscriptions | Takes the Pro and Team subscription payments. Card details are handled by PayPal, not by this site; we receive the payment notice and the email address the page code is sent to. |
Other requests your browser makes
Page fonts load from Google Fonts, so Google receives your IP address when a page loads. The spreadsheet library (SheetJS) loads from cdnjs only when you click an Excel download. Cloudflare Web Analytics is added to the pages only if a token is configured for the site. No other third-party scripts are loaded.
Questions and requests
Write to [email protected] about anything on this page, including a question about data tied to your device identifier or page code.
Last updated: October 2026.