1. Scope and contact
OceanSheet is an independently operated service for connecting Google spreadsheets and running workflows. This notice covers our website, documentation, and web application, including the beta application. “We” and “our” refer to the operator providing OceanSheet.
OceanSheet legal and privacy contact: legal@oceansheet.com
We determine how account, security, support, and service-administration information is used. When you connect spreadsheets containing other people's information, you or your organisation determine the purpose of that processing; OceanSheet processes that content to carry out your workflow instructions. Where law requires a data-processing agreement, contact us and agree those arrangements before processing other people's personal data through the service.
2. Information we process
| Category | Examples and use |
|---|---|
| Account information | Name, email, password hash if you use a password, verification status, optional company/time zone, and account timestamps. Google sign-in can also provide a Google identifier, display name, and avatar URL. |
| Google connection | Connected account identifier/email, permission scopes, encrypted access/refresh tokens, expiry times, and connection status. These allow access to authorised spreadsheets and scheduled runs. |
| Workflow settings | Workflow names/descriptions, spreadsheet/tab identifiers and names, ranges, column names/types, mappings, filter values, destination settings, and schedules. These settings can contain personal or confidential information. |
| Spreadsheet content during processing | Headers and values needed for a preview, test, or run. Values pass through OceanSheet's servers; preview values also reach your browser. Outputs are written to the destination you select in Google Sheets. |
| Run and security records | Run status, times, row counts, errors, account notifications, sessions, and operational/security logs. Logs can contain IP addresses, browser details, request times, and diagnostic information. |
| Support | Your submitted subject/message, account identity, request reference, and correspondence. Requests are saved and may be forwarded by email to our support inbox. Do not include passwords, tokens, or unnecessary spreadsheet contents. |
| Optional contributions | If you open Stripe Checkout, we provide your account email, account reference, and amount/currency. Stripe processes payment details and provides payment records. OceanSheet does not receive or store your full card number or card security code. |
Server processing is different from file storage. OceanSheet does not maintain a separate database copy of spreadsheet rows as a dataset. It processes values on its servers and saves the configuration and operational records above. A column name, filter value, support message, or diagnostic message can still contain personal data. Do not put secrets or unnecessary personal information in these fields.
Information comes from you, your browser, Google when you authorise access, and payment/support interactions. Browser drafts contain workflow settings and remain on your device; see the Cookies Policy.
3. Purposes and legal bases
Where GDPR or similar rules apply, the basis depends on the purpose:
- Providing the service: performing our agreement with you or taking steps you request before an agreement, including authentication, authorised workflows, support, and service-related emails.
- Protecting and maintaining the service: legitimate interests in preventing abuse, investigating failures, securing accounts, and maintaining operations, balanced against individuals' rights.
- Legal duties: applicable accounting, payment, regulatory, and data-protection obligations.
- Optional processing requiring consent: your separate, affirmative choice where required. Connecting Google is not blanket consent to unrelated uses of personal data.
Essential account details are needed to provide an account. Without Google permissions, affected spreadsheet features cannot work. Optional profile fields and contributions are not required for the free beta. We do not use spreadsheet data for advertising or training general-purpose AI models. We do not make decisions with legal or similarly significant effects about you based solely on automated profiling; workflow filters apply your configured instructions.
4. Google user data and Limited Use
Google sign-in and Drive access are separate. Sign-in requests basic identity information. The spreadsheet connection requests access to files you select, including reading/writing those files and creating an output spreadsheet when instructed. Offline authorisation permits scheduled runs without an open browser.
OceanSheet's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace user data policy.
Google data is used for the user-facing spreadsheet features you request. We do not sell it, use it for advertising, or transfer it for unrelated purposes. Human access is limited to circumstances those policies permit, such as your affirmative permission to inspect specific data for support, investigating security incidents/abuse, or complying with law. We do not routinely inspect spreadsheet contents.
You can disconnect Google in Integrations and revoke access through your Google account's third-party connections settings. Disconnecting clears stored connection tokens; it does not delete saved workflow settings or outputs in Google Sheets. Disable workflows you no longer want. Revocation cannot undo completed writes.
5. Recipients and international processing
Recipients are limited to what is needed for the purposes described here:
- OVHcloud and infrastructure providers: hosting, databases, operational storage, and service delivery.
- Google: identity sign-in, Drive/Sheets authorisation, file selection, reading/writing, and correspondence sent to a Google-hosted support inbox.
- Email delivery/support providers: verification, password-reset, failed-run, support, and other necessary service messages.
- Stripe: an optional contribution you choose to make; see Stripe's Privacy Policy.
- Legal/security recipients: advisers or authorities where disclosure is legally required or necessary for legal claims, fraud, or security incidents, subject to applicable Google data-use restrictions.
Independent services may process information under their own terms/privacy notices. We do not sell personal information or share it for cross-context behavioural advertising.
Providers may process information in more than one country. This notice does not promise that all information remains in a particular region. Where law restricts an international transfer, an applicable legal mechanism is required, such as a valid adequacy decision or appropriate contractual safeguards. Request current recipient, location, and applicable safeguard information at legal@oceansheet.com. Agreeing to terms or continuing to use OceanSheet is not blanket consent to overseas transfers or a waiver of your rights.
6. Retention, deletion, and security
Account details, workflow settings, and related history are retained while needed to provide your account and workflows. You can delete workflows or your account in the application. Account deletion removes the account and linked workflow/connection records from the live database. It does not remove outputs in Google, messages already delivered to inboxes, independent Stripe records, or browser drafts on your devices.
Correspondence, necessary security/diagnostic records, and records required for legal obligations or claims may remain for the time needed for those purposes. Retention depends on unresolved requests/incidents, applicable legal retention or limitation periods, and whether information can be deleted or anonymised sooner. Backup copies, where maintained, follow the relevant backup rotation and legal preservation requirements; live deletion does not promise immediate removal from every backup. Contact us about a particular record.
Passwords are hashed and Google connection tokens are encrypted in the application database. No measure guarantees absolute security or uninterrupted availability. Protect your account, restrict source/destination sharing, and keep independent copies of important data. Report suspected security issues to our legal/privacy contact without emailing passwords or tokens.
7. Your choices and rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing; receive certain information in a portable form; and withdraw consent where it is the processing basis. Withdrawal does not affect prior lawful processing. Rights can be subject to lawful exceptions.
Use Account/Integrations settings where available, or email legal@oceansheet.com. We may request proportionate identity verification. Where GDPR applies, we normally respond within one month; complex or numerous requests may justify an extension under that law, with notice within the initial month. You may complain to a competent data-protection authority, including where you live or work. You need not contact us first or waive a remedy.
If your information is in a spreadsheet connected by another user, contact that user/organisation as the relevant controller. You can also contact us to help route the request where appropriate.
8. Cookies, children, and changes
The website's application templates do not currently load Google Analytics or advertising trackers. Necessary login/security cookies and requested draft storage are explained in the Cookies Policy. New optional tracking will require the notices and choices applicable law requires before it runs.
The service is intended for adults aged 18 or over. Contact us if you believe a child has supplied personal information so we can investigate and take appropriate action.
The effective date identifies this notice's version. Material changes will be communicated through an appropriate service notice or email where required. New uses of Google data or consent-based information require fresh permission where applicable; publishing a new notice does not itself provide that permission.