Privacy policy
Last updated: August 29, 2026.
What we collect
- Account data: your name, email address, and sign-in provider (Google, GitHub, or email and password). Passwords are hashed. We never see Google or GitHub passwords.
- Workbook data: the cells, formulas, descriptions, folders, and webhook configurations you or your agents create. This is your data. We store it to serve it back to you.
- API keys and OAuth tokens: API keys are stored hashed (the plaintext is shown once and not stored in readable form); OAuth tokens are stored encrypted. Webhook signing secrets are shown once at creation and kept server-side so we can sign each delivery.
- Operational logs: request paths, timestamps, status codes, and IP addresses, kept for debugging and abuse prevention. Anonymous workbook creation records the creating IP to enforce rate limits.
What we do not do
- We do not sell your data.
- We do not train AI models on your workbook contents.
- We do not read your workbooks except when required to operate the service or investigate abuse.
Anonymous workbooks
Workbooks created without an account are readable and writable by anyone who has the workbook URL. They are deleted 7 days after creation unless a signed-in user claims them. Do not put sensitive data in an unclaimed workbook.
Service providers
Your data is processed by the infrastructure we run on:
- Vercel (application hosting, logs)
- Neon (database, hosted on AWS in the United States)
- Upstash QStash (webhook delivery; sees webhook payloads in transit)
- Resend (transactional email)
- Google and GitHub (sign-in, only if you choose them)
Agents and connectors
When you connect sheets.fast to an AI product (Claude, ChatGPT, or any MCP client), that product can read and write workbooks in your workspace on your behalf. What the AI product does with data it reads is governed by that product's own privacy policy. You can revoke a connection at any time from the AI product's settings.
Retention and deletion
- Claimed workbooks persist until you delete them.
- Unclaimed workbooks are deleted after 7 days.
- Deleting a workbook deletes its revision history, webhooks, and delivery logs.
- To delete your account and all associated data, email the address below.
Contact
Questions or deletion requests: ben@sheets.fast