Privacy Policy

2. Data we collect

We collect and process the following personal data:

• Google account data – When you sign in with Google, we receive your email address, name, and profile picture. We use this to identify you and manage your account.
• OAuth tokens – To access your Google Sheets on your behalf, we store refresh and access tokens. These are used solely to read and write data in sheets you have linked to HolySheet.
• API keys – Keys you create are stored in hashed form for authentication.
• Logs – Server logs may include IP addresses, request timestamps, and error details for operational and security purposes.

3. Legal basis and purposes

We process your data for:

• Contract performance – To provide the HolySheet service (API access to your sheets) and manage your account.
• Legitimate interests – To operate, secure, and improve the service.
• Consent – Where we rely on consent (e.g., optional communications), you may withdraw it at any time.

4. Retention

We retain your data for as long as your account exists and as needed to provide the service. After account deletion, we remove personal data within a reasonable period, except where we must retain it for legal or security reasons.

5. Third parties

We use:

• Google – For sign-in and access to Google Sheets. Google's privacy policy applies to their processing.
• Supabase – For hosting our database and authentication.
• Hosting providers – To run the Website and API.

6. Your rights

Depending on your location, you may have the right to:

• Access your personal data
• Rectify or correct your data
• Erase your data
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at soneshjain6@gmail.com.

7. Changes

We may update this Privacy Policy from time to time. We will post changes on this page and update the "Last Updated" date. Continued use of the service after changes constitutes acceptance.

Contact: soneshjain6@gmail.com