How we protect your privacy, what data we collect, and your rights over your information. Your data always belongs to you, not us.
Last updated January 27, 2026
This policy covers sheetful.co website visitors and customers. For data we process on behalf of our customers, see our data policy and DPA.
For website visitors, we collect anonymous usage data and only use cookies for authentication. If you create an account to use our service, we ask for the bare minimum and only share it with services that are absolutely necessary for the app to function.
At Sheetful, we are committed to complying with GDPR, CCPA, PECR and other privacy regulations. The privacy of your data, and it is your data, not ours, is a big deal to us.
In this policy, we lay out what data we collect and why, how your data is handled and your rights to your data. We promise we never sell your data, never have, never will.
If you use Sheetful to turn your spreadsheets into APIs, take a look at our data policy for details on how we handle that data.
The data controller is Sheetful. We can be contacted by email at privacy@sheetful.co.
We collect anonymous usage data for statistical purposes and to understand how our website is used. We do not use cookies for analytics and do not collect personal information from website visitors unless voluntarily provided.
You can find more details about the data we collect in our data policy.
Our guiding principle is to collect only what we need and that we will solely process this information to provide you with the service you signed up for.
We use a select number of trusted external service providers for certain service offerings. We only share the minimum information required for each service to function.
An email address is required to create an account so you can log in and we can send you invoices, updates or other essential information.
A persistent first-party cookie is stored to remember you're logged in. This makes it easier for you to use our product without having to log in on each returning session.
All data is kept fully secured, encrypted and hosted on reliable servers. Your data is protected by strict data privacy laws.
Some account, billing, and email delivery data is processed by our service providers and may involve international transfers depending on where those providers operate.
Payment processing is handled by Stripe. We never see your credit card details. Email delivery is handled by Resend for account and billing notifications.
For complete technical details about how we handle data, see our data policy. For information about our role as data processor, see our DPA.
We work with a small number of trusted partners to deliver our service. Here's exactly who has access to what.
| Service | What they do for us |
|---|---|
| Cloudflare | Protects our infrastructure from attacks and serves our website, api and dashboard. |
| Stripe | Handles payment processing and billing. |
| Resend | Sends account emails and billing notifications. |
| Google Sheets & Drive API | Used to interact with Google Sheets and provide the Google Drive Picker for file selection. |
We do not sell, rent, or share your Google user data with third parties for their marketing purposes. We only share your data in the following limited circumstances:
drive.file andspreadsheets scopes to perform these operations. We do not transfer this data to any third parties or use it for any other purpose.We do not transfer Google user data outside of the purposes for which it was collected. Your Google Sheets data is accessed only to enable API functionality and is not stored permanently on our servers beyond necessary caching for performance optimization.
Sheetful's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not use Google user data for serving advertisements, and we do not transfer or sell your data to third parties, including for training AI models.
We believe in data minimization and only retain your information for as long as necessary to provide our services.
Account Data: Your account information (email, authentication tokens, API configurations) is retained for as long as your account is active. When you delete your account, all associated data is permanently deleted within 30 days.
Google Sheets Data: We do not permanently store the contents of your Google Sheets. We only access your sheets in real-time when API requests are made. Any temporary caching of sheet data for performance purposes is automatically deleted within 24 hours.
OAuth Tokens: Your Google OAuth access tokens are stored securely and encrypted. You can revoke our access to your Google account at any time through your Google Account permissions page. When you revoke access or delete your Sheetful account, all OAuth tokens are immediately invalidated and deleted.
Billing Data: For legal and accounting purposes, we retain billing records for 7 years as required by law. However, payment card details are never stored on our servers - they are handled exclusively by Stripe.
How to Delete Your Data: You can delete your account and all associated data at any time from your account settings. Alternatively, you can contact us at privacy@sheetful.co to request data deletion. We will process your request within 30 days.
We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change to our policies, we will also announce them on our company blog or social media profiles.
Contact us at privacy@sheetful.co if you have any questions, comments, or concerns about this privacy policy, your data, or your rights with respect to your information.