Draft for legal review. Replace bracketed items and have this reviewed before public launch.
Last updated: [date]
Your data stays on your computer. Your spreadsheet is read and processed in your web browser and is never uploaded. To understand your columns, the app sends our analysis service each column name (or one-way codes of it, in privacy mode or when you choose to code names), some counts, such as how many values are filled, distinct, numbers or dates, and rounded summary numbers (smallest, largest and total, to 2 significant figures). Before the first analysis in your browser, and for any new sheet that looks sensitive, the app shows what will be sent and lets you choose before anything leaves your browser. Cell values, names and other text in your data, exact dates, file names and the file itself are never sent. See an example.
When a sheet looks like it contains people's details or health information, privacy mode switches on automatically: column names are sent as one-way codes (our service can recognise only common words it already knows, such as “amount” or “due date”; other words stay unreadable), contact details are hidden on screen, and for health-like data identifiers and free text are hidden and groups smaller than 5 are merged. People's names are shown on your screen (they never leave your browser either way) and are replaced with Person 1, 2… by default when you present or export to Excel or PowerPoint; you can change this, or choose to hide names on screen too, in Privacy settings. Only anonymous counts are kept (see below), and the file is not remembered on your computer unless you choose. You can switch privacy mode off, or turn it on for any sheet. In privacy mode you can choose Help us improve: send column names uncoded: column names are then sent readable and kept as described below (headers that look like a person’s name, an email or a number are left out); your data stays hidden. For other sheets you can choose to code column names too, in which case only the same anonymous counts are kept. Offline mode sends nothing at all, with a simpler analysis.
For sheets outside privacy mode whose column names are not coded, we keep: column names, how each column was understood, the use-case pack suggested, the corrections you make in Review columns, which features you use (for example exports or the pivot table), time to the first dashboard, and error messages. Column headers that look like a person's name, an email address or a number are left out. Each analysis gets a random number so a correction can be linked to it; nothing is stored on your device to identify you, and we keep no IP addresses with this data. Records are deleted after 12 months. For sheets in privacy mode we keep only anonymous counts (for example the number of columns) and codes our service didn't recognise, which are unreadable. Turn on privacy mode, or code column names, to stop this for any sheet. [Legal basis, e.g. legitimate interest in improving the service — to be confirmed in legal review.]
[Legal entity name and address.] Email: contact@sheetdashboards.com
[Describe rights under applicable law, such as GDPR: access, deletion, objection, complaint to a supervisory authority.] Because we do not store your spreadsheets or settings, most data is under your control in your browser.
[How changes to this notice are communicated.]