Privacy Policy

Introduction

SheetDog ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Chrome extension and website (sheetdog.app).

Information We Collect

Account Information

When you create an account, we collect your email address, name, and profile picture through Google OAuth. This information is used to identify your account and manage your subscription.

Payment Information

Payment processing is handled by Stripe. We store only your Stripe customer ID and subscription status—we do not store your credit card details. See Stripe's privacy policy.

AI Usage Data

When you use AI features with SheetDog-managed credits, we record token counts (input and output) and the model used for billing purposes. We do not store the content of your prompts, your spreadsheet data, or AI responses.

Locally Stored Data

The extension stores the following data locally on your device:

• Your session token (for authentication)
• Your hotkey and formatting preferences (synced across your Chrome browsers via chrome.storage.sync)
• Your AI provider settings and personal API keys, if you provide them (stored only on your device via chrome.storage.local, never sent to SheetDog)

Information We Do NOT Collect

• Spreadsheet content: SheetDog does not collect, store, or transmit your spreadsheet data to our servers
• AI prompts or responses: When you use AI features, data is sent directly from your browser to the AI provider (Anthropic or xAI)—it never passes through SheetDog servers
• Browsing history: We do not track your activity outside of Google Sheets
• Personal API keys: If you bring your own API key, it is stored locally on your device and never transmitted to SheetDog

How AI Features Handle Data

SheetDog offers AI-powered spreadsheet editing. When you submit an AI prompt, the extension gathers context about your current sheet (selected cells, headers, formatting) and sends it directly from your browser to the AI provider. This data flow depends on your key source:

• SheetDog-managed key: Data is sent from your browser directly to Anthropic's API. We track token usage for billing but never see the content.
• Personal API key: Data is sent from your browser directly to the AI provider (Anthropic or xAI). SheetDog never sees your API key or the request content.
• Organization API key: Data is sent from your browser directly to Anthropic's API or your organization's custom API endpoint. SheetDog never sees the request content.
• Custom enterprise endpoint: If your organization configures a custom API endpoint, AI requests are routed directly from your browser to that endpoint. SheetDog never sees or proxies this traffic.

In all cases, spreadsheet data and AI responses never pass through SheetDog servers.

How We Use Your Information

• To provide and maintain our service
• To authenticate your account and verify your subscription
• To process subscription payments
• To track AI credit usage for billing (token counts only, not content)
• To send important service updates
• To respond to support requests

Organization & Enterprise Data

For Teams tier organizations, we additionally store:

• Organization name and member list (email addresses)
• Organization API key, if provided by the admin (encrypted at rest using AES-256-GCM)
• Custom API endpoint URL, if configured (not encrypted—it is a URL, not a secret)
• Organization key delivery preferences and permission settings

Organizations using Chrome Enterprise policy to deliver API keys and endpoints do not store these values in SheetDog—they are managed entirely within the organization's Chrome Enterprise environment.

Chrome Extension Permissions

The SheetDog extension requests only the permissions necessary to function:

• activeTab: To interact with the Google Sheets tab you have open
• storage: To save your preferences and session locally
• identity: To authenticate with Google OAuth
• Host permissions (docs.google.com/spreadsheets): To inject keyboard shortcut handlers into Google Sheets
• Optional host permissions: If your organization uses a custom API endpoint, the extension requests permission for that specific domain at runtime. This is a one-time prompt per domain.

Third-Party Services

We use the following services:

Google API Services User Data Policy

SheetDog's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request permissions necessary to provide our service and do not use Google data for advertising or sell it to third parties.

Data Retention

• Active accounts: Retained while your account is active
• Deleted accounts: Personal information deleted within 30 days of account deletion
• Payment records: Retained for 7 years for tax and accounting purposes
• AI usage records: Token count records retained for billing cycle duration, then aggregated

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Export your data in a portable format

To exercise these rights, contact us at admin@sheetdog.app. We'll respond within 30 days.

California Residents

Under the CCPA, you have the right to know what personal information we collect, request deletion, and opt out of data sales. We do not sell personal information.

International Users

SheetDog is based in the United States. By using our service, your information may be transferred to and processed in the United States.

Children's Privacy

SheetDog is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy periodically. We'll notify you of material changes by updating the date above and, for significant changes, by email.

Contact Us

Questions about this policy? Contact us at admin@sheetdog.app or visit sheetdog.app/contact.