SheetWallet Privacy Policy

Who we are

SheetWallet is a personal finance spreadsheet tool operated by Winter Advisory LLC d/b/a SheetWallet ("SheetWallet," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use SheetWallet websites, web apps, Google Sheets workflows, Plaid-powered account connection features, billing flows, and related services.

SheetWallet is not a bank, broker-dealer, investment adviser, lender, money transmitter, accountant, tax preparer, or financial planner. SheetWallet helps you move data into spreadsheets you control so you can build your own models.

Information we collect

We collect account information such as your Google account identifier, email address, display name, profile image, session records, product settings, billing state, support messages, and operational logs. When you use Plaid, we collect institution and account metadata, account identifiers, selected account settings, formula references, encrypted Plaid access tokens, sync status, cursor metadata, and audit records needed to operate the service.

When you authorize Google Sheets features, Google may provide access tokens, refresh tokens, OAuth scope information, spreadsheet identifiers, Apps Script project identifiers, and other Google user data needed to create, open, update, and sync SheetWallet-managed spreadsheets. We also receive limited billing information from Polar, such as checkout, customer, subscription, trial, plan, payment status, and invoice metadata.

Sources of information

We collect information directly from you, from your browser or device, from Google when you sign in or approve Sheets access, from Plaid when you connect financial accounts, from Polar when you start or manage billing, and from infrastructure providers that host, secure, log, and operate SheetWallet.

How we use information

We use information to authenticate users, create and secure sessions, connect Plaid accounts, let you select accounts for formulas, create and update SheetWallet-managed Google Sheets, install and maintain the SheetWallet formula runtime, sync selected balances and transactions into encrypted spreadsheet caches, process trials and subscriptions, provide support, debug errors, detect misuse, enforce terms, comply with law, and protect SheetWallet, users, and the service.

This general use section is subject to the narrower Google user data limits below. We do not use Google user data for any purpose outside providing or improving the SheetWallet features that you request.

Google user data and Limited Use

SheetWallet uses Google user data only to provide and improve user-facing SheetWallet features you request: sign-in, account identification, spreadsheet creation, Apps Script installation, spreadsheet opening, workspace bootstrap, and updates to SheetWallet-created spreadsheets. Per-file Drive access limits the web app to files created or opened with SheetWallet, and current-file Sheets access limits the add-on to the spreadsheet where you use it.

SheetWallet does not use Google user data for targeted, user, personalized, retargeted, interest-based, or cross-context behavioral advertising. SheetWallet does not sell Google user data, disclose Google user data to data brokers or information resellers, use Google user data to determine credit-worthiness or for lending purposes, use Google user data to build databases for purposes unrelated to user-requested SheetWallet functionality, or use Google user data for unrelated secondary purposes.

SheetWallet transfers Google user data only when necessary to provide or improve SheetWallet's user-facing features that you request, such as sending authorized requests to Google APIs and using infrastructure providers to host and operate SheetWallet. We do not transfer Google user data to third parties for advertising, resale, credit, lending, or any unrelated secondary purpose.

SheetWallet's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Plaid and financial data

SheetWallet uses Plaid data to list connected institutions and accounts, store your selected accounts, maintain formula references, and sync selected account balances and transactions into the SheetWallet spreadsheet cache. Plaid access tokens are encrypted before server-side storage. SheetWallet processes plaintext Plaid transaction and balance data during sync, but does not persist merchant-level transaction history rows in the web database. If you disconnect an institution in SheetWallet, we ask Plaid to remove the Item, clear the encrypted Plaid access token from active storage, and stop future sync for that institution.

Financial data can be delayed, incomplete, unavailable, categorized incorrectly, or changed by your financial institution, Plaid, Google, or SheetWallet sync logic. You are responsible for reviewing spreadsheet outputs before relying on them.

Cookies and sessions

SheetWallet uses necessary cookies and similar browser storage to keep you signed in, protect OAuth flows, remember interface preferences, and secure the app. We do not currently use cookies to sell personal information or run cross-context behavioral advertising.

How we disclose information

We disclose information to service providers only as needed to operate SheetWallet, including Google for authentication and spreadsheet actions, Plaid for bank connectivity, Polar for checkout and subscription billing, Vercel for web hosting, Railway and Postgres for backend hosting and storage, and security, monitoring, support, and infrastructure providers. We may disclose information if required by law, legal process, security needs, fraud prevention, business transfers, or to protect rights, safety, users, and the service.

We do not sell personal information, financial account data, Google user data, or Plaid data.

Retention and deletion

We retain account, workspace, provider token, billing, support, audit, and security records while your account is active and as needed for operations, security, legal, billing, tax, dispute, backup, and compliance purposes. We delete or de-identify information when it is no longer needed unless we have a legitimate business need, legal obligation, or technically constrained backup retention period.

You can revoke Google access from your Google Account permissions page and disconnect bank access in SheetWallet, through Plaid-supported institution controls, or by contacting us. You may request account deletion, access, correction, or export by emailing andrew@winteradvisory.llc.

Security safeguards

We use administrative, technical, and organizational safeguards designed to protect information, including HTTPS for public web and API traffic, encrypted provider token storage, scoped workspace access, authenticated spreadsheet actions, operational audit records, access limits, and vendor safeguards. No system can be guaranteed completely secure, and you are responsible for protecting your Google account, financial institution accounts, devices, and spreadsheets.

Your privacy choices

Depending on where you live, you may have rights to access, correct, delete, export, or limit certain uses of personal information. SheetWallet is built for US consumers and will respond to verified privacy requests as required by applicable law. We will not discriminate against you for exercising privacy rights, but some requests may limit or prevent use of SheetWallet features.

Children

SheetWallet is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information, contact us so we can review and delete it where appropriate.

Changes

We may update this Privacy Policy as SheetWallet changes. The updated date shows when the current version was posted. Material changes will be handled as required by applicable law.

Contact

For privacy, consent, account, or security questions, contact andrew@winteradvisory.llc.