Privacy Policy

1. Introduction

This Privacy Policy explains how SheetFiller (“we”) handles information when you use SheetFiller at sheet-filler.vercel.app/ (the “Service”). SheetFiller is a productivity utility that converts text you paste into structured values and writes the values you approve into a Google Sheet you choose.

We follow the Google API Services User Data Policy, including its Limited Use requirements.

2. Google permissions we request and why

We request only the permissions needed to place a row in your sheet. You approve them on Google's consent screen and can revoke them at any time.

3. Information we access and process

• Google account identity: your name, email address and profile image (OpenID Connect) so the app can show which account is connected.
• Spreadsheet metadata: file name, file ID and modified time of the Google Sheets you can edit, plus tab names, the header row and row/column counts, so we can list your sheets and mirror the target row on screen.
• Worksheet cell values (transient): the header row, the empty target row, and the cells you choose to fill. These are used to render the row and to write the values you approved.
• The text you paste into the conversion box, processed in memory on our server to produce structured fields for that request.
• Operational logs: short-lived server logs may record timestamps, request paths and error codes for debugging and abuse prevention. We do not log your sheet contents or pasted text.

4. How we use information

We use access to your Google account and files exclusively to:

• list the Google Sheets you can edit so you can select one;
• read the header row, the current value of the target row, and any dropdown rules on those cells;
• convert the text you paste into structured values using our own rules engine;
• write the values you reviewed into the target row when you press Submit; and
• show you the resulting row and a link to open it in Google Sheets.

We do not use your data for advertising, profiling, credit or eligibility decisions, selling, or training machine-learning models. We do not transfer it to third parties except as required to operate the Service (Google's own APIs) or to comply with the law.

5. Storage, retention and caching

• No database: there is no data store for sheet contents, rows or pasted text. Closing the workflow discards them.
• Short-lived server memory: spreadsheet metadata (title, tab names, row/column counts) can be cached in process memory for up to 5 minutes to avoid repeated API calls. It is discarded on restart and never written to disk.
• Session cookie: an encrypted, HTTP-only cookie (sheet_filler_session) holds your OAuth tokens and basic profile for up to 8 hours so you do not have to sign in on every page. It is destroyed when you sign out.
• No offline copies: we never download or mirror your spreadsheets.

6. How you can view, revoke or delete

• Sign out inside the app to destroy the session cookie immediately.
• Revoke access at myaccount.google.com/permissions — the app loses all access within moments.
• Ask us to delete anything we hold by emailing umairzakria6@gmail.com. In practice there is nothing persistent to delete, and we will confirm that in writing.
• Any values already written to your spreadsheet are yours: edit or delete them in Google Sheets at any time.

7. Security

• All traffic to the app is served over HTTPS in production.
• OAuth tokens are held server-side in an encrypted session cookie with HttpOnly and SameSite=Lax flags; they are never exposed to browser JavaScript.
• Every Google API call is made with your tokens only, and only for the request you triggered.
• Writes are limited to empty, non-formula cells in the single row you reviewed.
• We use Google's official client library, including automatic backoff on rate limits, and keep dependencies current.

8. Children, changes and contact

The Service is intended for business use and is not directed to children under 13 (or the minimum age in your jurisdiction); we do not knowingly collect their data.

We may update this policy as the Service evolves. Material changes are reflected in the “Last updated” date above, and continued use after an update means you accept the revised policy.

Questions, data requests or complaints: umairzakria6@gmail.com. We respond within 30 days.