If this sounds like your week
The CSV is full of customer data, and the cleaner you found wants you to upload it.
Most quick online CSV tools ask you to drop your file onto their server. That file is a list of real names, emails, order histories, or salaries — exactly the data you are not supposed to hand to an unknown third party just to strip some whitespace.
Where tooling usually breaks
An upload you can't see is a risk you can't justify.
Once sensitive records leave your machine you cannot prove where they went, how long they are kept, or that they were ever deleted. For anyone bound by a privacy policy, a DPA, or simple common sense, "paste it into a website" is not an option.