Privacy Policy

Last updated: 12 November 2026

This policy explains what data Sheet AI collects, why, where it is stored, who it is shared with, and how you can delete it. See also our Terms of Service.

1. Who we are

Sheet AI ("Sheet AI", "we", "us") is a chat assistant for Google Sheets. You sign in at sheetai.tech, choose the spreadsheets you want it to work with, and ask questions or give instructions in the Sheet AI chat on your dashboard. Sheet AI reads and edits those spreadsheets for you.

Sheet AI is operated by Ali Hassan (sole trader), operating as Sheet AI, Cité Wadajir, Djibouti City, Djibouti, which is the controller of the personal data described in this policy. You can reach us at hello@sheetai.tech.

2. What we collect

We only collect what we need to run the service:

Google account information. When you sign in with Google we receive your name, email address and profile picture (Google scopes openid, email and profile). We also record whether you have granted Google Drive access and which Google permissions you granted.
Google Drive and Sheets files you choose. The contents of the spreadsheets you pick in the Google file picker on our website, and of the spreadsheets Sheet AI creates for you at your request. See "Google Drive access" below.
Chat messages. The messages you type in the Sheet AI chat and the assistant's replies, including any spreadsheet data the assistant read to answer you.
Profile and preferences. Details that help the assistant work the way you want: things you tell it (such as your preferred name, language, time zone, currency or how you use each sheet) and a short summary of the sheets it has worked with (spreadsheet and tab names and their layout).
Usage and billing data. How much AI processing your requests use, and your usage balance. We do not collect or store payment card details.
Technical logs. Timestamps, your account ID, the actions the assistant took and error reports, which we need to keep the service secure and working.

3. Google Drive access

Sheet AI asks for one Google Drive permission: https://www.googleapis.com/auth/drive.file. This is Google's most limited Drive permission. In plain words, it lets Sheet AI see and edit only:

files you pick yourself in the Google file picker on our website, and
files Sheet AI creates for you (for example a new spreadsheet you ask for).

Sheet AI cannot see, list or open any other file in your Google Drive. We do not ask for access to your Gmail, contacts, calendar or any other Google data.

4. How we use your data

We use your data only to:

sign you in and keep your account secure;
read the spreadsheets you chose and, when you ask, write to them (for example add rows, update cells, create tabs or build summaries);
answer your questions in chat and keep the history of your conversation so you can continue it later;
remember your preferences and the layout of your sheets so you do not have to repeat yourself;
measure usage and, where applicable, charge for it;
prevent abuse, fix problems and meet our legal obligations.

To answer a question about a sheet, Sheet AI may download a temporary copy of it to our server; the copy is deleted as soon as the answer is ready. We do not sell your data, we do not use it for advertising, and we do not use it to train AI models.

5. AI processing

Sheet AI uses third-party AI models to understand your messages and work with your sheets:

OpenRouter routes our requests to DeepSeek language models. For each chat message, it receives your message, the recent conversation, your saved preferences and the spreadsheet data the assistant needs to answer (such as cell values, tab names and headers).
OpenAI receives the text of longer assistant replies, which may include spreadsheet data, to split them into readable parts (text embeddings).

These providers process the data only to return a result to us, under their API terms. Sheet AI sends them only the data needed for the request you made.

6. Storage and security

Clerk (our sign-in provider) stores your account and the Google access tokens Google issues when you grant permissions.
Convex (our database) stores your account record, chat transcripts, profile and preferences, and usage balance.
Railway (PostgreSQL) stores the assistant's working memory of each conversation (the messages and the results of the steps it took) so it can keep context between messages.
Your Google Sheets stay in your own Google Drive, under your control.

Google tokens. Sheet AI does not keep your Google tokens in its own databases. When the assistant needs to read or edit one of your sheets, our server asks Clerk for a short-lived access token and uses it only for that request.

Security. All data is encrypted in transit (HTTPS/TLS). Clerk and Convex encrypt stored data at rest. Access to our systems is limited to the people who need it to run the service, and server keys are kept in secret stores, never in the website code. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

7. Cookies

We use the cookies Clerk needs to keep you signed in, and one small cookie that remembers whether the dashboard sidebar is open. We do not use advertising, analytics or tracking cookies.

9. Retention and deletion

We keep your data while your account is open. You can delete your account at any time from Dashboard → Settings. Deleting your account removes your Clerk account (including the Google tokens it holds), your Sheet AI account record and the assistant's conversation memory. We remove the remaining data linked to your account, such as chat transcripts and your profile and preferences, within 30 days. Technical logs and backups expire on their normal cycle, within 30 days.

Your Google Sheets are yours: deleting your Sheet AI account does not delete them. You can also email hello@sheetai.tech to ask for a copy of your data, or for it to be corrected or deleted.

10. Google API Services User Data Policy

Sheet AI's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In particular, data we receive from Google APIs:

is used only to provide and improve the user-facing features described in this policy;
is transferred to others (such as the AI providers above) only to provide those features, for security, or to comply with the law;
is never used for advertising, never sold, and never used by Sheet AI to train generalised AI or machine-learning models;
is not read by people, except with your permission, for security purposes, to comply with the law, or when aggregated and anonymised for internal operations.

11. Revoking Google access

You can remove Sheet AI's access to your Google account at any time on your Google account permissions page: myaccount.google.com/permissions. After that, Sheet AI can no longer read or edit your sheets until you grant access again. Revoking access does not delete your Sheet AI account; see "Retention and deletion" above for that.

12. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we use it, and to complain to your data protection authority. Email hello@sheetai.tech and we will respond within 30 days.

13. Children

Sheet AI is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a minor has given us data, contact us and we will delete it.

14. Changes to this policy

We may update this policy. We will change the "Last updated" date above and, for significant changes, tell you by email before they take effect.

15. Contact

Questions about privacy? Email hello@sheetai.tech.