Privacy policy
What SheetCRM collects, why it collects it, who sees it, and how you can get it changed or deleted.
The short version: we collect what we need to run your account and your workspace. We don’t sell personal data. The records you import belong to you, and you can export them or ask us to delete them.
The details are below, and they matter more than this summary.
Who we are
SheetCRM is a spreadsheet-first CRM. You can import a Google Sheet, Excel file or CSV, and then manage leads, contacts and follow-ups with your team. It’s run by [add the legal name of the person or business that runs SheetCRM], referred to here as “we” or “SheetCRM”.
This policy covers the marketing site at sheetcrm.dg2.in and the SheetCRM app at sheetcrm.dg2.in/crm. It applies when you visit the site, create an account, or use a workspace.
What we collect
Information you give us
- Account details: your name, email address and password. We store passwords in hashed form, not as plain text.
- Workspace details: your workspace name, the plan it’s on, and the people you invite, along with the role each person has.
- Billing details: your plan, the billing period and the invoices we’ve issued. Card or UPI details are entered with our payment provider, not with us.
- Messages you send us, such as support requests.
Information you put into your workspace
- Records, contacts, companies, deal values, notes, tags, stages, owners and follow-up dates.
- Custom fields created from your own spreadsheet columns.
- Files you import: CSV and Excel files, and the contents of Google Sheets you connect.
- Activity in the workspace, such as who changed a record and when.
Information collected automatically
- Technical data: IP address, browser type, device type, operating system and the pages or screens you open.
- Log data: timestamps, errors and sign-in events, which we use to keep the service running and to investigate abuse.
Google Sheets
If you connect or link a Google Sheet, we read the rows from that sheet to import or sync them. If you turn on two-way sync, we also write changes back to that sheet. We only touch the sheets you point us to.
Your customer data
Your workspace will almost certainly contain personal information about other people: your leads, customers and contacts. That’s the point of a CRM, and it means two roles are in play.
For the account information described above, we decide how it’s used, so we’re responsible for it. For the records you import or type into a workspace, you decide what goes in and why. We process that data on your behalf and on your instructions, to give you the service. We don’t use your customer records for our own marketing, and we don’t look at them except to support your account at your request, to keep the service secure, or where the law requires it.
It’s your job to have a lawful reason for the data you upload, and to tell your own contacts how you use it. If one of your contacts asks us to delete or correct their record, we’ll point them to you.
How we use it
| What we do | Using this data |
|---|---|
| Provide the service | Account and workspace details, your records, imports and syncs. |
| Send messages you need | Sign-up and password-reset emails, team invites, follow-up reminders, the daily overdue digest, and the weekly or monthly reports your plan includes. |
| Take payment | Plan and billing details. |
| Keep things secure | Log data, sign-in events and technical data, to spot abuse and fix faults. |
| Improve the product | Aggregated usage patterns, such as which features get used. Not the contents of your records. |
| Meet legal duties | Whatever Indian law and tax rules require us to keep or disclose. |
Reminder and report emails are part of the service. You can adjust them in your account settings. We don’t sell your personal information, and we don’t use it for third-party advertising.
How long we keep it
We keep account and workspace data for as long as your account is open. If you delete a workspace or close your account, we remove its records from the live system, and copies in backups expire on our normal backup cycle. We keep a limited set of billing and invoice records for as long as tax and accounting law require. Server logs are kept for a short period and then deleted.
Want a copy first? Export your views to CSV from inside the app before you delete anything.
Security
The site and app are served over HTTPS. Access inside a workspace follows the roles you assign, and passwords are stored hashed. We limit who on our side can reach production data.
No online service is perfectly secure, and we can’t promise otherwise. If we learn of a breach that affects your data, we’ll tell you and the relevant authorities as the law requires. Please use a strong, unique password and only invite people you trust.
Your rights
You can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that’s wrong or out of date;
- delete your data, subject to records we must keep by law;
- stop sending you non-essential emails;
- withdraw consent you’ve given us, where we rely on consent.
If you’re in India, the Digital Personal Data Protection Act, 2023 gives you these rights, including the right to nominate someone to exercise them for you and the right to have a grievance addressed. If you’re in the European Economic Area or the UK, you may also have the right to object to or restrict certain processing, to data portability, and to complain to your local data protection authority.
Write to us at the address in the contact section below. We’ll answer within a reasonable time, and no later than the law allows. For records inside someone else’s workspace, we may ask you to go through the workspace owner.
Where data is processed
Our providers may store or process data in countries other than the one you live in, including outside India. When that happens, we rely on providers that protect data to a reasonable standard and, where the law requires it, on approved transfer mechanisms.
Children
SheetCRM is a business tool and isn’t meant for anyone under 18. We don’t knowingly collect data from children. If you think a child has given us personal data, contact us and we’ll delete it.
Changes to this policy
We’ll update this page when our practices change, and we’ll change the date at the top. For material changes, such as a new way of using your data, we’ll email workspace owners or show a notice in the app before the change takes effect.
Contact us
Questions, requests or complaints about privacy: [add your privacy contact email].
Grievance contact: [add name and email of the person who handles privacy complaints]. We’ll acknowledge your message and reply as quickly as we can.