Privacy Policy

Last updated: May 29, 2026

RouteMetrics is an Excel add-in that returns driving distance, time, and directions between addresses you enter into your spreadsheet. This policy explains what data we collect, why, and what we do with it.

Who we are

RouteMetrics is operated by ALS Properties LLC, a Pennsylvania limited liability company. For privacy purposes, ALS Properties LLC is the data controller of personal information collected through the add-in and this website.

You can reach us at:

ALS Properties LLC
516 East Dr
Sewickley, PA 15143
USA
support@routemetrics.app

What we collect

• Your email address — provided by Microsoft single sign-on when you use the add-in. Used to identify your account and bill you.
• The addresses you query — origin and destination passed to HERE to compute the route. We store a SHA-256 hash of each address (not the raw text) for cache lookups and aggregate analytics.
• Search counts — how many ROUTE function calls you make. Used to enforce your monthly quota and credit-pack balance.
• Billing information — handled by Stripe. We never see or store your full credit card number. We do store your Stripe customer ID so we can manage your subscription.
• Subscription state — your current plan, renewal date, and cancellation status.

What we do NOT collect

• The contents of your spreadsheets, beyond the specific cells you've used a ROUTE function in.
• Your name, address, phone number, or any other personal identifier beyond your email.
• Tracking cookies for advertising. The add-in uses only the cookies Microsoft Office requires to run.

Legal basis for processing (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, we process your personal data on the following bases under the GDPR:

• Performance of a contract — to provide the add-in, authenticate your account, enforce quotas, and process payments.
• Legitimate interest — to cache route results for performance, monitor service health via operational logs, and prevent abuse of trial allowances.
• Legal obligation — to retain billing and tax records as required by applicable law.

International data transfers

RouteMetrics is operated from the United States. All personal data is stored and processed on US-based infrastructure (Google Cloud, Upstash, Stripe). If you access the service from outside the US, your data will be transferred to the United States. Where required, we rely on the European Commission's Standard Contractual Clauses with our sub-processors (Google, HERE, Stripe) for these transfers.

Where data is stored

• Google Firestore — your account record (email, subscription state, quota counters) in Google Cloud, US data center.
• Upstash Redis — short-term cache of route lookup results (keyed by hashed address, expires within 30 days).
• Google Cloud Logging — operational logs including event records keyed by your email and hashed addresses.
• Stripe — payment method, customer record, and transaction history under Stripe's privacy policy.

Third parties we share data with

• HERE Technologies — receives the address you query in order to geocode it and compute the route. Subject to HERE's privacy policy.
• Stripe — processes all payments and acts as merchant of record. Subject to Stripe's privacy policy.
• Microsoft — provides single sign-on for your M365 account. Subject to Microsoft's privacy policy.
• Google Analytics — measures visits to this website (pages viewed, approximate location, device, and how you arrived) so we can understand traffic and improve the site. It sets cookies and processes a truncated, anonymized IP address; we do not send it any personally identifying information. This applies only to the routemetrics.app website, not to the Excel add-in. Subject to Google's privacy policy.

We do not sell, rent, or share your data with any other third party.

Your rights

You can:

• Access — see your account record by signing into the task pane. Contact us if you want a full export.
• Correct — update your email by signing in with a different Microsoft account.
• Delete — request full deletion of your account record and associated data. We'll remove everything except what we're legally required to retain (Stripe transaction records have a 7-year retention requirement for tax purposes).
• Cancel — at any time via the billing portal in the task pane. No retention period; access ends at the close of your billing cycle.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of your personal information.

We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act. We do not have a "Do Not Sell or Share My Personal Information" link because there is nothing to opt out of.

To exercise any California privacy right, email support@routemetrics.app from the address associated with your account. We will not discriminate against you for exercising these rights.

Children's privacy

RouteMetrics is a business productivity tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, contact us and we will delete the account.

Security

All data is transmitted over TLS (HTTPS). Account records and cached results are encrypted at rest by our infrastructure providers. Access to production systems is restricted to authorized personnel and protected by single sign-on with multi-factor authentication. No system is perfectly secure; if we ever experience a breach affecting your data, we will notify you in accordance with applicable law.

Data retention

• Active account data: retained while you use the service.
• Cached route results: 30 days from last access.
• Server logs: 30 days (Cloud Logging default), then auto-deleted.
• Stripe transaction records: 7 years (legal requirement).

Changes to this policy

If we make material changes, we'll notify you via the add-in's task pane at least 30 days before they take effect.

Contact

For privacy questions or data deletion requests, email support@routemetrics.app.