Privacy Policy

1. Introduction

SheetsX ("we") is committed to protecting your privacy. This policy explains how SheetsX's website, Google Sheets add-on, and AI Agent collect, use, store, share, and protect personal information and Google user data.

2. Information We Collect

We may collect the following types of information:

• Account information: Name, email address provided during registration
• Usage data: How you use our services, feature usage
• Technical data: IP address, device information, browser type
• Payment information: Information required to process payments (via secure third-party processors)

3. Google Sheets API Data and Scope Use

When you explicitly authorize the AI Agent, SheetsX uses the Google Sheets OAuth scope to provide the spreadsheet automation you request. The Agent accesses data only on demand to complete your instruction. SheetsX does not copy or retain your complete spreadsheet as a separate dataset. Although the OAuth scope permits spreadsheet access, our backend restricts Agent operations to the spreadsheet currently open and bound to your authenticated session.

• Data accessed: Spreadsheet identifiers, sheet names and structure, cell values, formulas, formatting, data validation, and selected-range context needed to fulfill your request
• How data is used: To read the current spreadsheet state and carry out your explicit instructions, including writing values, formatting cells, managing sheets, and configuring data validation
• Why write access is required: Read-only access cannot perform the spreadsheet edits requested through the AI Agent
• Access control: The backend validates the authenticated user, session, and current spreadsheet before each operation; the Agent does not independently browse unrelated spreadsheets

4. How We Use Information

We use collected information only to provide and improve user-facing SheetsX features, process your requests, maintain conversation continuity, send important service notices, prevent abuse, and comply with legal obligations. Google user data is not used for advertising, credit decisions, or training general-purpose AI models.

5. Information Sharing and Limited Use

We do not sell, rent, or trade personal information or Google user data. When necessary to perform a feature you request, relevant prompts and spreadsheet excerpts may be processed by infrastructure and AI service providers acting on our behalf. We may also disclose information when required by law or to protect users and our services. SheetsX's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Storage, Retention, and Deletion

SheetsX does not store a separate copy of your complete spreadsheet. Data read during an Agent run is processed only to complete your request. Necessary result excerpts may appear in your Agent conversation history so that results can be displayed and the session can continue. We may also retain account data, prompts, and operational records needed for security, billing, and support. Google OAuth refresh tokens are encrypted at rest, and access tokens are short-lived. You can disconnect Google authorization in SheetsX, revoke access in your Google Account, or request deletion of your personal data by contacting us. Some records may be retained where required for legal, security, fraud-prevention, or accounting purposes.

7. Your Rights

You have the following rights regarding your personal information:

• Access right: Request a copy of your personal information we hold
• Correction right: Request correction of inaccurate personal information
• Deletion right: Request deletion of your personal information
• Objection right: Object to processing of your personal information

8. Cookies

We use cookies and similar technologies to improve user experience, analyze service usage, and personalize content. You can manage cookie preferences through your browser settings.

9. Data Security

We use reasonable technical and organizational safeguards, including encryption in transit, encryption of Google OAuth refresh tokens at rest, access controls, spreadsheet and session validation, and sensitive-error redaction. However, no method of transmission or storage is 100% secure.

10. Policy Changes

We may update this privacy policy from time to time. Continued use of the services after changes constitutes acceptance of the updated policy.

11. Contact Us

For any privacy questions or requests, please contact us at privacy@sheetsx.com.