SimpleSheet Privacy Policy

Information We Collect

Account Information:

• Email address (required for authentication)
• Google user ID (unique identifier from Google)
• Name and profile information (from Google profile)

Google Services Access:

• Access to Google Sheets you create or authorize our app to access
• Access to Google Drive files created by our app
• OAuth tokens to maintain your authenticated session

Usage Data:

• Session information for maintaining your login
• App usage patterns for service functionality

OAuth Permissions

SimpleSheet requests these Google permissions:

• OpenID & Email

  For secure authentication

• Profile

  To display your name in the app interface

• Drive (File Access Only)

  Limited to files created by SimpleSheet

• Google Sheets

  To read and modify spreadsheets you work with in our app

How We Use Your Information

Service Operation:

• Authenticate your account securely
• Access and modify your Google Sheets as directed by you
• Maintain your session across app usage
• Provide personalized app experience

Data Storage:

• Account information stored in our secure database
• Google tokens stored encrypted for API access
• No spreadsheet content stored on our servers (remains in your Google account)

Data Sharing and Privacy

We Never Share Your Data:

• Your personal information is never sold or shared with third parties
• No data is used for advertising or marketing to external parties
• No analytics data is shared outside SimpleSheet

Google Integration:

• Data access limited to what's necessary for app functionality
• All Google API access follows Google's security and privacy standards
• You can revoke app permissions anytime through your Google account settings

Your Rights

• Access

  View what data we have about you

• Deletion

  Request complete account and data deletion

• Revocation

  Remove app access through Google account settings anytime

• Portability

  Your spreadsheet data remains in your Google account

Data Security

• All data encrypted in transit and at rest
• OAuth tokens securely stored and regularly refreshed
• Database access restricted and monitored