Privacy Policy

Last updated: April 5, 2026

Sheetora (“Service”) is operated by Sairin Technology (“Company”, “we”, “us”). Our registered website is sairintechnology.com. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use Sheetora.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, display name, and profile photo. If you sign up via Google OAuth, we receive your name and email from Google.

1.2 Billing & Payment Information

When you subscribe to a paid plan, payment is processed by LemonSqueezy, our Merchant of Record. We do not store your credit card number, CVV, or full card details on our servers. LemonSqueezy provides us with a token, your billing email, card last-four digits, expiry date, and country for record-keeping purposes. For details on how LemonSqueezy handles your data, see LemonSqueezy's Privacy Policy.

1.3 Uploaded Data

CSV and Excel files you upload for analysis are stored securely and associated with your workspace. We process this data solely to provide the Service (generating dashboards, insights, and reports).

1.4 Usage Data

We collect information about your interactions with the Service, including queries run, dashboards viewed, features used, and session duration. This data is used to improve the Service and is not sold to third parties.

1.5 Technical Data

We automatically collect IP address, browser type, operating system, and device information for security, performance monitoring, and fraud prevention.

2. How We Use Your Information

• To provide, maintain, and improve the Sheetora Service
• To process and analyze your uploaded data as requested
• To process payments and manage your subscription
• To send transactional emails (invoices, receipts, password resets, workspace invitations)
• To monitor application performance, detect errors, and prevent abuse
• To comply with legal obligations

3. Data Sharing

We do not sell your personal data. We share data only with:

• Service providers who assist in operating the Service (listed in Section 6 below), under strict data processing agreements. See our Data Processing Agreement for details.
• Law enforcement when required by applicable law, court order, or governmental regulation.

4. Data Retention

Your uploaded data and account information are retained for as long as your account is active. When you delete your account, your personal data is removed within 30 days and your contributions (such as comments) are anonymized. Payment records are retained as required by applicable tax and accounting regulations (typically 7 years). Audit logs are retained for 90 days for security purposes.

5. Your Rights

You have the right to:

• Access: Export a copy of your personal data from your account settings at any time.
• Deletion: Delete your account and associated personal data from your account settings. Billing records retained per legal requirements.
• Correction: Update your profile information at any time.
• Portability: Download your uploaded datasets in their original format.
• Objection: Contact us to object to specific data processing activities.

6. Third-Party Services

We use the following third-party services to operate Sheetora:

• LemonSqueezy — Payment processing (Merchant of Record)
• Supabase — Database, authentication, and file storage
• Vercel — Application hosting and CDN
• Resend — Transactional email delivery
• Sentry — Error tracking and performance monitoring
• PostHog — Product analytics (anonymized usage data)
• Upstash — Rate limiting and job queue infrastructure

7. Cookies

We use essential cookies to maintain your authentication session. We use PostHog for anonymized product analytics. We do not use advertising or third-party tracking cookies.

8. Security

We implement industry-standard security measures including encrypted connections (TLS/HTTPS), row-level security policies, role-based access control, HMAC-signed webhooks, CSRF protection, and audit logging. Payment data is handled entirely by LemonSqueezy, our Merchant of Record.

9. International Data Transfers

Your data may be processed in countries other than your own. Our service providers maintain appropriate data protection measures. By using the Service, you consent to your information being transferred and processed in these locations.

10. Children's Privacy

Sheetora is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top indicates the most recent revision.

12. Contact

For privacy-related questions or to exercise your data rights, contact us:

• Email: privacy@sheetora.app
• Company: Sairin Technology — sairintechnology.com