← Back to SheetClean

Privacy Policy

Last updated: March 2026

SheetClean ("we", "our", "us") operates the SheetClean add-in for Google Sheets and the website at sheetclean.uk. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account data: When you register, we collect your email address and an encrypted password. You may optionally provide your name.

Spreadsheet data: When you use AI-powered features, the cells you select are sent to our server for processing. We only access the specific cells you select — never your entire spreadsheet.

Usage data: We track operation types, cell counts, and timing metadata to provide your quota display and our admin monitoring. We never log or store the actual content of your cells beyond the 30-day processing retention window.

Payment data: Payments are processed by Paddle (our Merchant of Record). We receive your Paddle customer ID and subscription status but never see your card number or bank details.

2. How We Process Your Data

Quick actions (trim, format, validate, deduplicate) are processed entirely on our server using deterministic algorithms. Your cell data is never sent to any third-party API for these operations.

AI-powered operations (text extraction, classification, name normalisation) send your selected cell data to the Google Gemini API for processing. Google processes this data according to their Gemini API Terms of Service. As of the current Gemini API terms, data sent via the paid API is not used to train Google models.

3. Data Retention

• Extraction results: Automatically deleted 30 days after processing.
• Account data: Retained while your account is active. Deleted upon account deletion request.
• Operation logs: Metadata (operation type, cell count, cost) retained for billing and admin purposes. No cell content is stored in logs.

4. Third-Party Services

• Google Gemini API — Processes cell data for AI operations.
• Paddle — Handles payments, invoicing, and tax compliance as our Merchant of Record.
• PostHog — Collects anonymised usage analytics (button clicks, feature usage) to improve the product. No cell data is sent to PostHog.

5. Google API Services User Data Policy

Specifically:

• We only request access to the spreadsheet data the user is currently viewing (using the spreadsheets.currentonly scope).
• We do not use Google user data for advertising purposes.
• We do not transfer Google user data to third parties except as necessary to provide the service (Gemini API for AI processing).
• We do not use Google user data to develop, train, or improve AI/ML models unrelated to providing SheetClean's core functionality.

6. Your Rights

• Access: You can view your account data and usage history within the SheetClean sidebar.
• Deletion: You can request deletion of your account and all associated data by emailing [email protected]. We will process your request within 30 days.
• Data export: Extraction results can be downloaded from your spreadsheet at any time during the 30-day retention window.

7. Security

All data in transit is encrypted via HTTPS/TLS. Passwords are hashed using bcrypt. API authentication uses time-limited JWT tokens. Our server infrastructure is hosted on a secured VPS with regular security updates.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates the most recent revision.

9. Contact

For privacy-related questions or data deletion requests, contact us at [email protected].