Last updated: 1st February 2025

Starsheet ("we," "our," or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services (the "Service").

Information we collect

Information you provide to us

• Basic Account Information: When you login to our service with your Google Account we collect your Google account ID, name, email address, language preference and profile picture. Additionally we store an access token provided by Google that grants us limited access to your Google Account based on the permissions you allow when signing in with your Google account.

• Billing Information: If you sign up to a paid plan, your billing information including email address, post code, country and payment details will be processed by Paddle. Paddle’s privacy notice is available at https://www.paddle.com/legal/privacy. We do not store your billing information on our servers.

• Your Content: When creating a Starsheet project, you choose a Google Sheet document as your data source. Starsheet can only access the specific files selected using the Google Drive File Picker. We cannot view the contents of, or access any other files in your Google Drive. Starsheet stores limited metadata about each Google Sheet document it can access, including its Google Drive ID, filename, version number, and a list of worksheets in the document. File contents are only accessed temporarily during processing. Starsheet doesn't keep copies of the files, and does not use the contents for any purpose other than publishing data to the AWS account that you specify.

• Credentials: You provide Starsheet with credentials to publish to an AWS account.

• Communications with us: If you contact us via support form, email or social media we will store a copy of our communications.

Information we collect automatically

• Access Logs: Like most only services, we collect access logs containing IP addresses, browser type, pages visited, access times, and referring website addresses

• Usage data: We collect information about your usage of the service, along with device information such as screen resolution and browser type and use this information to get insights on how we can improve the Service.

How We Use Your Information

We use the collected information for:

• Providing and maintaining our Service
• Sending service updates and administrative messages
• Improving and optimizing our Service
• Detecting and preventing security incidents
• Complying with legal obligations

Data Storage and Security

We store your data on secure servers located within the European Economic Area (EEA). We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

Data Sharing and Disclosure

We do not sell your personal information to third parties.

Through your usage of Starsheet, your data may be shared with:

• Paddle: To process your payments and manage subscriptions
• Google: For authentication purposes when you use Google Sign-In
• Amazon Web Services: Data generated from your Google Sheet will be transferred to the AWS account that you specify.
• Cloudflare: We use Cloudflare's infrastructure to increase the speed and security of our Service.

Additionally, we may need to share your information, ensuring appropriate safeguards are in place to protect your privacy, with:

• Other third-party service providers who assist in operating our Service
• Professional advisers, including lawyers, auditors, and insurers
• Law enforcement or regulatory bodies when legally required
• Buyers in connection with any merger, sale, or acquisition of Starsheet

Your Rights

You have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Data portability
• Withdraw consent

To exercise these rights, please contact us at [email protected].

At any time you may revoke Starsheet’s access to your Google account. Please note however, that this will only prevent access from that point forward and will not automatically cause Starsheet to delete previously stored data. To request data erasure please contact [email protected].

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. If you do not have an active paid subscription and have not used Starsheet in over 18 months we will automatically erase your personal data. This deletion will not affect data you have published to your AWS account using Starsheet.

Children's Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

International Data Transfers

When we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions issued by the UK Government or European Commission
• Binding corporate rules for transfers within our group of companies