Privacy Policy

Last updated: March 24, 2026

FinSheet ("we", "our", "us") is a Chrome extension that extracts financial data from web pages and exports it to Google Sheets. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account Information: When you create a FinSheet account, we collect your email address and name. If you subscribe to a paid plan, Stripe (our payment processor) collects your billing information — we never see or store your full credit card number.

Page Content for Extraction: When you use FinSheet to extract data, the content of the selected area (tables, text, or the relevant portion of the page) is sent to our servers for processing. This data is used solely to perform the extraction you requested.

Usage Analytics: We collect anonymized usage data such as the number of extractions performed, feature usage, and error logs. This helps us improve the product. We do not track which specific pages you visit.

2. Data We Do NOT Collect

• Browsing history: We do not monitor, collect, or store your browsing history. FinSheet only processes page content when you explicitly click the extract button.
• Passwords or credentials: We never access or store your passwords, authentication tokens, or login credentials for any website.
• Personal financial data: We do not store the financial data you extract. Once the extraction is complete and the data is delivered to your Google Sheet, we do not retain it on our servers.
• Data from other tabs or pages: FinSheet only accesses the content of the active tab when you initiate an extraction. It cannot read other tabs, bookmarks, or browser data.

3. How We Process Your Data

When you perform an extraction:

1. The selected page content is sent to our servers via an encrypted (HTTPS) connection.
2. Our service processes the content to identify and structure the financial data.
3. The structured data is returned to the extension and exported to your Google Sheet.
4. The page content sent for processing is automatically deleted from our servers after processing is complete. We do not retain copies of extracted page content.

Temporary processing logs may be retained for up to 72 hours for error diagnosis, after which they are automatically purged.

4. Google Sheets Integration

FinSheet uses the Google Sheets API to write extracted data to your spreadsheets. We request only the minimum permissions needed to create and write to sheets. We do not read existing data in your spreadsheets beyond what is necessary to determine where to place new data. Your Google OAuth token is stored securely in the extension and is never transmitted to our servers.

5. Third-Party Services

• Stripe: Handles payment processing for paid subscriptions. Stripe's privacy policy: stripe.com/privacy
• Google: Provides the Sheets API for data export and OAuth for authentication. Google's privacy policy: policies.google.com/privacy

We do not sell, rent, or share your personal data with any other third parties.

6. Data Storage and Security

Account data is stored on servers located in the United States, protected by encryption at rest and in transit. We use industry-standard security practices including TLS 1.3, encrypted databases, and regular security audits.

7. Your Rights (GDPR and CCPA)

If you are located in the European Economic Area (EEA), United Kingdom, or California, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate data.
• Deletion: Request that we delete your account and associated data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data for specific purposes.
• Restriction: Request that we limit how we use your data.

To exercise any of these rights, email us at support@finsheet.space. We will respond within 30 days.

8. Legal Basis for Processing (GDPR)

We process your data on the following legal bases:

• Contract performance: Processing page content to perform the extraction service you requested.
• Legitimate interest: Anonymized analytics to improve our product.
• Consent: Marketing communications (you can unsubscribe at any time).

9. Data Retention

• Account data is retained while your account is active and for 30 days after deletion request.
• Page content sent for extraction is deleted immediately after processing (within minutes).
• Processing logs are retained for up to 72 hours.
• Payment records are retained as required by law (typically 7 years).

10. Children's Privacy

FinSheet is not intended for use by anyone under the age of 13. We do not knowingly collect data from children under 13.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the extension. Continued use of FinSheet after changes constitutes acceptance of the updated policy.