This notice explains how HAP-E Ltd ("we", "us") collects and uses personal data when you use Sheetsmith. We act as the data controller for personal data processed in connection with your use of the Service.
What we collect
- Account data: email address, authentication identifiers, and, if you sign in with Google, your Google profile name and avatar.
- Workbook content: descriptions you type, files you upload to be audited, and the generated workbooks.
- Usage and telemetry: pages visited, features used, error reports, approximate location derived from IP, device and browser type.
- Support messages: any content you send us when contacting support.
Payment card data is collected directly by Paddle and never reaches our servers.
Why we use it
- To create and operate your account (contract performance).
- To generate and deliver the workbooks you request (contract performance).
- To detect and prevent fraud, abuse, and security incidents (legitimate interests).
- To improve the Service and fix bugs (legitimate interests).
- To respond to support requests (legitimate interests).
- To send service emails such as password resets and billing notices (contract performance).
- To comply with legal obligations (legal obligation).
Who we share with
- Paddle: our Merchant of Record, who handles payments, billing, tax, invoicing, and subscription management.
- Infrastructure providers: Lovable Cloud (hosting, database, file storage) and AI model providers used to generate workbook plans.
- Email and analytics tooling used to operate the Service.
- Authorities where required by law.
We do not sell your personal data.
International transfers
Some providers process data outside the UK and EEA. Where this happens we rely on safeguards such as Standard Contractual Clauses or adequacy decisions.
Retention
We keep account and workbook data for as long as your account is active. If you delete your account we remove personal data within 30 days, except where we are required to keep records (for example billing records retained for tax purposes).
Your rights
Depending on your location you may have the right to:
- Access the personal data we hold about you;
- Have inaccurate data corrected;
- Request deletion of your data;
- Restrict or object to processing;
- Receive a copy of your data in a portable format;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data protection authority.
We respond to verified requests within one month.
Security
We use encryption in transit, access controls, and audit logging to protect your data. No system is perfectly secure, but we work hard to keep yours safe.
Cookies
Sheetsmith uses cookies and similar storage for essential functions (sign-in sessions, security). We do not use advertising cookies. You can manage cookies in your browser settings.
Contact
For privacy questions or to exercise your rights, contact us via the support link in the app.