Privacy Policy for SheetApp.ai | Data Handling and Security

How we handle your data

When you upload a CSV file, SheetApp processes it to generate your results. We only store your list when you choose to save a workspace, and we do not sell your data or use it for advertising.

A small sample of rows may be sent to our AI analysis service to detect column types and generate insights. This sample is used only to produce your results and is not used for training.

What we collect

Anonymous usage events. We log events like "file uploaded" or "export downloaded" tied to a random session ID. No personal information is attached.
Account information. If you create an account (required for Pro), we collect your name and email address through Clerk, our authentication provider. We use this to manage your account and verify your subscription.
Payment information. Payments are processed by Stripe. We receive only a confirmation of success and a Stripe customer ID. We never store your card number or billing details.
Support emails. If you email us for support, we receive your email address and message. We use this to respond to you.

Accounts and authentication

Creating an account is optional for the one-time $9 Export Unlock. SheetApp Pro ($39/month) requires an account so we can verify your subscription across devices. We use Clerk for authentication. Their privacy policy governs how sign-in data is handled.

Cookies and local storage

We use your browser's local storage to remember whether you have already paid for an Export Unlock in the current session. This is a random token stored locally on your device. We do not use advertising cookies or third-party tracking pixels.

Service providers and subprocessors

We use the services below to operate SheetApp. They may receive the information needed to provide the service described here.

Stripe. Handles payment processing and subscription billing.
Clerk. Handles account creation and sign-in.
Anthropic Claude. Powers AI analysis and "Ask this data." Only a sample of your data (up to 25 rows) is sent. It is not used for training.
Resend. Sends transactional emails to the site owner. We do not send marketing emails to users.
Replit. Provides application infrastructure and managed integration services used to run SheetApp.
HubSpot and Salesforce. These services are used only when you choose to connect a CRM account. In that case, the information needed for the connection or transfer is handled by the CRM you selected.

For the current, detailed list, see our Subprocessors page. We may update this list as our service providers change.

Data Processing Addendum (DPA). If your organization needs a DPA or the current provider list for its records, request a Data Processing Addendum.

Data retention

Saved workspaces for signed-in users are retained until you delete them. Account data (name and email) is held by Clerk and can be deleted by contacting us. Stripe retains billing records as required by law. Anonymous usage events are retained for up to 90 days. Unsigned sessions store nothing beyond usage events.

Contact

Questions or concerns? Email us at support@sheetapp.ai.