On this page
1. Who is responsible
AkatsukI LLC operates JOIN SHEET and is responsible for the personal information it uses to provide the service. For privacy questions and requests, email contact@joinsheet.com.
This Notice covers our website, account and plan administration, and communications with us. Google and Paddle also explain their own processing in their privacy notices. Your employer, device administrator, browser extensions, and any storage or synchronization services you use are outside our control.
2. Your spreadsheet workspace
Selected Excel and CSV files, pasted data, working tables, and previews are processed in the current browser workspace. JOIN SHEET does not send those source cell values to an account or payment server to join sheets, append sheets, compare values, apply filters, or generate an export.
Refreshing the page or discarding the workspace can remove the working data. Your original files and any downloaded results remain wherever you saved them. A Data Recipe can contain file and sheet names, column names, connections, filter values, and other workflow settings even though it does not contain the source data rows or preview results. Treat recipes as potentially confidential.
If you send us a screenshot, recipe, copied text, or attachment, it becomes part of your support correspondence and leaves your local workspace. Use a small, anonymized example instead of a confidential source file.
3. Information used online
- Result-save click history
- Account and click identifiers, server-recorded time, and the verified plan and billing context at the time of the click. No file names, sheet names or cell values are included in this record.Record a result-save request before allowing export and use the record to investigate errors and handle related inquiries or disputes. A click is not proof that a file was successfully saved to your device; later cancellation or export errors do not remove the click record.
- Account and sign-in
- Email address, account and provider identifiers, display name or profile image supplied by Google, authentication events and session information.Create and maintain your account, authenticate requests, and respond to account issues.
- Plan and payment administration
- Account, customer, transaction, subscription and price identifiers; plan status, billing dates, payment-confirmation status and support references; limited billing details returned by Paddle.Provide the purchased access, show billing information, reconcile a payment, prevent duplicate requests, and investigate a billing issue.
- Website and security requests
- IP address, request time, browser and device headers, requested resources, response status and technical error information processed by the delivery and account infrastructure.Deliver the site and protected resources, diagnose failures, and prevent abuse.
- Support and privacy requests
- Your email address, message, correspondence, and any information you choose to attach; limited verification information when necessary.Reply, resolve the request, verify authority to act, and keep an appropriate record of the outcome.
- Browser preferences and recovery records
- Language, theme, sign-in coordination, and checkout or plan-recovery information stored in your browser.Remember your choices and keep sign-in and payment confirmation working. Storage lifetimes are listed in the Cookies and browser storage section below.
4. Google sign-in and Paddle checkout
Google sign-in is connected through Supabase Auth. We do not ask for your Google password or use this sign-in to read your Google Drive files. Refusing the sign-in information needed to create a session prevents use of account-dependent features, but does not prevent browsing public pages.
Paddle is the authorized reseller and Merchant of Record for paid orders. It receives the information entered in its checkout and handles payment, tax and subscription administration. JOIN SHEET receives the limited order information needed to connect the purchase to your account; it does not receive your full payment-card number. A request to JOIN SHEET does not automatically delete information Paddle must retain for its own responsibilities.
5. Purposes and applicable legal grounds
We use account and plan information to provide the service you request and perform the relevant service agreement. We use support information to answer your request, transaction records to administer purchases and meet applicable legal duties, and technical records to operate and protect the service. We do not sell personal information or use it for cross-context behavioral advertising.
Result-save click records are used to process save requests, investigate errors, and handle related inquiries and disputes. A click record alone does not establish that a file was successfully saved.
Where a law requires a specific legal basis for processing, necessary service operations rely on performing a contract or taking steps you request before entering one. Required records and responses rely on legal obligations. Where permitted and after considering your rights, our legitimate interests in keeping the service secure and resolving disputes may apply. We rely on consent where applicable law requires it, rather than using it as a basis for every activity.
Providing optional details or attachments is not required for ordinary use. Send sensitive personal information or other people’s confidential data only if it is necessary, you have authority to provide it, and an appropriate handling method has been agreed.
6. Recipients and international processing
We use service providers for website delivery, authentication and database services, and email delivery. Google provides your selected sign-in method, and Paddle administers paid orders. The Service Providers & Transfers page identifies these roles and links to their privacy information. Access by our personnel is limited to information needed for their work.
Online account, delivery, payment and support information may be processed outside your country. Processing locations and the applicable transfer arrangements depend on the provider and service configuration. The provider directory is not a promise that all information is stored in one country. Contact us to request information about the transfer affecting your data and any applicable safeguards. A provider privacy notice does not replace any additional notice or consent required of JOIN SHEET.
7. Retention and deletion
We do not apply a single retention period to all information. When a valid deletion request is processed, we identify what can be deleted, what must be retained, and the reason for any exception. Deletion may involve removing records from the active system and asking relevant providers to act; it does not provide a remote wipe of your device or of records independently held by Google or Paddle.
Some records may be retained for tax, transaction, fraud prevention, security, dispute, or legal-obligation purposes. We will identify the reason when an exemption applies.
For a Paddle purchase, Paddle may act independently for buyer and transaction information. Account deletion does not erase records Paddle must keep. For requests concerning information Paddle controls independently, we will direct you to its privacy request process.
- Result-save click records
- Retained while needed to process save requests, investigate errors, and handle related inquiries or disputes, then deleted when no longer needed. Any further retention is limited to applicable legal obligations or ongoing disputes. Deleting an account does not immediately erase necessary transaction or dispute records.
- Account and plan records
- Used for the lifetime of the account and for resolving outstanding access, payment or account issues. After an account-deletion request, unnecessary account information is deleted, subject to records that must or may lawfully be retained.
- Payment, fraud-prevention and dispute records
- Retention depends on the record, applicable accounting or consumer requirements, unresolved refunds or disputes, and any legal preservation duty. Account deletion does not erase required transaction or dispute records.
- Support correspondence
- Retention depends on whether the request is resolved, whether follow-up or a dispute remains, the sensitivity of attachments, and any applicable record-keeping duty. Closing a browser tab does not delete an email attachment you have sent us.
- Technical records and backups
- Retention depends on the relevant infrastructure settings and the need to investigate an incident. Deletion from an active system and expiry from backups or provider logs are separate processes.
- Local information
- Workspace memory lasts for the current working session. Browser records follow the lifetimes listed in the Cookies and browser storage section below. Files, exports and recipes saved to your device remain until you delete them.
8. Your privacy rights
Depending on applicable law, you may ask whether and how we process your information, access it or obtain a copy, correct inaccurate or complete incomplete information, delete it, restrict or object to processing, request portability, withdraw consent, or seek review of a refused request. Withdrawing consent does not invalidate processing that was lawful before withdrawal. Some requests can affect account-dependent features.
See Privacy requests on the Contact page or email contact@joinsheet.com. We verify your identity only as needed and respond within the applicable legal time limit.
You may first ask JOIN SHEET to review a privacy concern. You also have the right to contact the competent privacy or data-protection authority in your country, including without waiting for our response where the law allows.
9. Cookies and browser storage
localStorage keeps website records across visits until you or the app remove them. sessionStorage lasts for a tab or window session, which may continue if the browser restores it. Browser memory holds working data while the app runs. Google and Paddle use their own cookies on their pages; those cookies are separate from the app storage listed here.
- Language and theme
- localStorage · Until changed or clearedRemembers the selected language and appearance, including whether you chose them explicitly.
- Authentication session and sign-in verification
- localStorage · Updated during authentication; removed by the sign-out or cleanup flow, or when you clear site dataSupabase stores the session and temporary verification information needed to complete sign-in and refresh the session. When a short-lived access token expires, other stored session records may remain.
- Sign-in popup marker
- sessionStorage · Popup page sessionIdentifies the Google sign-in popup during the return to JOIN SHEET.
- Sign-in completion signal
- localStorage · Removed when the app stops waiting for sign-in; a signal the app has not read may remain until clearedPasses the attempt identifier, completion status and possible error to the original window. This completion signal does not contain authentication tokens.
- Resume checkout after sign-in
- sessionStorage · Used for up to 10 minutesRemembers the chosen plan and start time. Removed after use, when expiry is checked, or when the tab session ends.
- Payment confirmation and recovery
- localStorage · Until resolved or cleared; no fixed automatic expiry for an unresolved recordRemembers the account, transaction and support identifiers, start time and confirmation status. After 10 minutes, an unresolved payment remains marked as needing confirmation. This record does not confirm Pro access.
- Plan refresh signal
- localStorage · Until replaced or clearedStores the latest refresh timestamp so other open tabs can recheck account access. It does not itself grant Pro access.
- Active workspace and temporary export
- Browser memory · While the current workspace or temporary result remains activeHolds source values, working tables, previews and temporarily prepared output. Reloading or discarding the workspace can remove them. The browser does not keep a permanent copy of the workspace.
- Downloaded site resources
- Browser HTTP cache · According to response headers and browser settingsMay reuse scripts, fonts and images on later visits. Cached application files are not a saved copy of your working sheet data.
11. Change settings or clear storage
Finish or save needed work before closing the workspace or clearing site storage. Clear JOIN SHEET site data through your browser to remove local settings and stored sign-in information; this may sign you out and remove locally saved payment-recovery references. It does not submit a server-side account deletion or cancel a subscription.
Delete downloaded files, saved recipes, clipboard history, and synchronized copies through the relevant device or provider settings. We cannot remotely remove those copies.
- Change the language or theme using the site controls. On a shared device, sign out when you finish.
- Save needed results and payment support references before clearing storage. Clearing it can sign you out, reset preferences and remove payment-recovery prompts; it does not cancel or refund a purchase.
- Clear site data separately from clearing cached files if your browser distinguishes them. Private browsing does not prevent online authentication or payment processing.
12. Optional technologies and storage problems
We will update this inventory before adding optional analytics or advertising technology and provide the controls required by applicable law. Because the current app has no optional analytics, it has no analytics preference switch.
If a workplace policy blocks browser storage, preferences may not be saved and account or checkout recovery may fail. Contact us with your browser name and the error shown on screen. Do not send stored authentication tokens or screenshots of their values.
13. Security, children, and updates
We use technical and organizational measures proportionate to the information involved, including authenticated access and restrictions on account records. No internet service, email system or device can be guaranteed risk-free. The Security & Local Processing page explains the boundary and practical precautions.
JOIN SHEET is not directed at children who cannot lawfully enter the service agreement or provide any required consent. If you believe a child has provided personal information improperly, contact us. We will update this Notice when processing changes and provide additional notice or seek consent where required.