Legal

Privacy Policy

Last updated: January 2026

Sheets & Cells ("we," "us," "our," "the site," "sheetsandcells.com") respects your privacy and is committed to protecting it. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how we protect it, and your rights regarding that data.

This policy applies to sheetsandcells.com, the Sheets & Cells Excel Add-in ("the Add-in"), our newsletter, and any related services (collectively, "the Services"). If you have questions about anything below, contact us at info@sheetsandcells.com.

Quick Summary (Plain English)

We collect basic analytics on how the site is used (anonymized)
If you subscribe to our newsletter, we collect your email address
If you purchase the Add-in, we collect billing information via our payment processor
If you use AI-powered tools or the Add-in, your prompts go to Anthropic's Claude API for processing (not stored or used for training)
We do not sell your personal data. Ever.
You have rights: access, deletion, correction, portability, unsubscribe — see below

1. Information We Collect

1.1 Information you provide directly

Email address — when you subscribe to our newsletter, download a template with the optional email opt-in, or contact us
Name — when you contact us or purchase the Add-in
Payment information — for Add-in purchases (processed by our payment provider Paddle or Stripe; we do not store credit card numbers)
Company information — for Enterprise inquiries or business communications
Message content — anything you send to us via email or contact forms

1.2 Information collected automatically

Usage data — pages visited, time on site, referring URLs, browser type, device type, operating system, general geographic region (country/region level, never precise)
IP address — logged temporarily for security and abuse prevention, then anonymized
Cookies — see the Cookies section below

1.3 Information from the Add-in

Prompts you type (formula requests, error queries) — sent to Anthropic's Claude API for processing, then discarded. Not stored on our servers.
Selected range data — only when the AI Assistant is actively invoked and you explicitly enable range-reading. Sent to Claude API for context, then discarded. Not stored.
License and usage counts — to enforce free/paid tier limits (e.g., 10 formulas/day on free tier). Anonymized aggregate usage only.

2. How We Use Your Information

To deliver and improve the Services (site, Add-in, tools)
To send you the newsletter you subscribed to
To respond to your questions and support requests
To process payments for the Add-in
To enforce fair-use limits on free-tier AI tools
To detect and prevent fraud, abuse, or security incidents
To comply with legal obligations
To measure aggregate site usage and improve content

We do not: sell your personal data, use your data for advertising targeting, share your data with data brokers, or use your Excel formulas / uploaded content to train AI models.

3. AI Processing (Add-in and Tools)

When you use the Formula Generator, Error Explainer, AI Assistant, or similar AI-powered features, the following happens:

You type a prompt or select a range in Excel
The prompt (or range data if applicable) is sent over an encrypted HTTPS connection to Anthropic's Claude API
Claude processes the request and returns a formula, explanation, or answer
The result is displayed to you
Neither we nor Anthropic store the prompt content or use it to train AI models. Anthropic's data policy for API access explicitly excludes API traffic from training data.

You can read Anthropic's privacy policy at https://www.anthropic.com/legal/privacy.

For Enterprise customers, we offer additional data governance controls including data residency options, no-logging guarantees in writing, and DPA (Data Processing Agreement) support. Contact info@sheetsandcells.com for Enterprise data controls.

4. Cookies and Similar Technologies

We use cookies to make the site work and to understand how it's used. Categories:

Strictly necessary — session cookies, security tokens, cookie consent state. Cannot be disabled.
Analytics — Google Analytics 4 and Plausible for anonymized usage stats. Can be disabled via cookie banner.
Functionality — remembers preferences (e.g., dark/light mode). Can be disabled.
Marketing — none currently. We do not use third-party marketing cookies.

You can manage your cookie preferences via the cookie banner shown on your first visit, or by clearing cookies in your browser settings. Read our Cookie Policy for full details.

5. Who We Share Data With

We share the minimum necessary data with the following service providers to operate the Services:

Anthropic — for AI processing (prompts, no storage)
Paddle or Stripe — for payment processing (billing information only, when you purchase)
Beehiiv — for newsletter delivery (email address, name, subscription preferences)
Google Analytics — for anonymized site usage analytics (opt-out via cookie banner)
Cloudflare — for CDN, DDoS protection, and site security (IP address, temporarily)
Our hosting provider — for site infrastructure

Each of these providers has their own privacy policy and is contractually required to protect your data. We share data with them only for the specific purposes listed above, not for marketing or other purposes.

We may also disclose data if required by law (subpoena, court order, government request) or to protect the safety of individuals or the integrity of the Services.

6. Data Retention

Newsletter subscribers: until you unsubscribe (one-click unsubscribe link in every email)
Add-in customers: account and purchase records retained for 7 years for accounting and tax compliance
Support conversations: retained for 3 years for reference; deletable on request
Analytics data: retained for 24 months in aggregate anonymized form
Server logs: retained for 30 days for security, then deleted
AI prompts: not stored (processed in real-time only)

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — request a copy of the data we have about you
Correction — request correction of inaccurate data
Deletion — request deletion of your data ("right to be forgotten")
Portability — request your data in a machine-readable format
Objection — object to certain processing activities
Restriction — request restriction of processing under certain circumstances
Withdraw consent — withdraw consent you previously gave
Complain — lodge a complaint with your local data protection authority

To exercise any of these rights, email info@sheetsandcells.com with your request. We respond within 30 days. We may need to verify your identity before fulfilling certain requests.

GDPR (European users)

If you're in the European Economic Area, UK, or Switzerland, you have the rights described above under the General Data Protection Regulation. Our legal bases for processing are: your consent (for newsletter), contract performance (for Add-in purchases), legitimate interest (for site security and analytics), and legal obligation (for tax and accounting).

CCPA (California users)

If you're a California resident, you have rights under the California Consumer Privacy Act. We do not sell personal information, and you have the right to know what information we collect, request deletion, and opt out of any future sale (though we do not sell data). Contact us to exercise these rights.

8. Data Security

We use industry-standard security measures to protect your data:

HTTPS/TLS encryption for all data in transit
Encryption at rest for stored data
Access controls limiting who on our team can access user data
Regular security reviews and dependency updates
Cloudflare protection against DDoS and common web attacks
Two-factor authentication required for all team admin accounts

No system is perfectly secure. If we ever experience a data breach affecting your personal information, we will notify you promptly (within 72 hours for GDPR-covered users) and take appropriate remediation steps.

9. Children's Privacy

Sheets & Cells is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you're a parent or guardian and believe your child has provided us with personal information, contact us at info@sheetsandcells.com and we will delete it.

Some of our content (Excel tutorials, student templates) is used by children in educational contexts. When used this way, no account or personal information is required.

10. International Data Transfers

Our team and service providers are located in multiple countries. When we transfer data outside your country, we use appropriate safeguards including Standard Contractual Clauses (SCCs) for transfers out of the EEA, and only use providers with strong privacy commitments.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes take effect when posted on this page. The "Last updated" date at the top reflects the most recent revision. For material changes affecting how we use your data, we will notify affected users by email.

Your continued use of the Services after changes constitutes acceptance of the updated policy.

12. Contact Us

Questions, concerns, or requests regarding this Privacy Policy or your personal data? Contact us:

Email: info@sheetsandcells.com
Subject line: "Privacy Request" (for faster routing)
Response time: within 24 hours on weekdays; formal data requests within 30 days

For EU/UK data protection matters, you may also contact your local data protection authority.