Privacy Notice
How JOIN SHEET handles account, payment, and support information—and what stays in your browser when you work with spreadsheets.
1. Who is responsible
AkatsukI LLC operates JOIN SHEET and is responsible for the personal information it uses to provide the service. For privacy questions and requests, contact contact@joinsheet.com. Our company details are on the Company & Regional Legal Notices page.
This Notice covers our website, account and plan administration, and communications with us. Google and Paddle also explain their own processing in their privacy notices. Your employer, device administrator, browser extensions, and any storage or synchronization services you use are outside our control.
2. Your spreadsheet workspace
Selected Excel and CSV files, pasted data, working tables, and previews are processed in the current browser workspace. JOIN SHEET does not send those source cell values to an account or payment server to connect sheets, append sheets, compare values, apply filters, or generate an export.
Refreshing the page or discarding the workspace can remove the working data. Your original files and any downloaded results remain wherever you saved them. A Data Recipe can contain file and sheet names, column names, connections, filter values, and other workflow settings even though it does not contain the source data rows or preview results. Treat recipes as potentially confidential.
If you deliberately send us a screenshot, recipe, copied text, or attachment, that material becomes part of a support communication and is no longer within the local-only workspace boundary. Use a small, anonymized example instead of a confidential source file.
3. Information used online
| Result-save click history | Account and click identifiers, server-recorded time, and the verified plan and billing context at the time of the click. No file names, sheet names or cell values are included in this record. |
|---|---|
| Account and sign-in | Email address, account and provider identifiers, display name or profile image supplied by Google, authentication events and session information. |
| Plan and payment administration | Account, customer, transaction, subscription and price identifiers; plan status, billing dates, payment-confirmation status and support references; limited billing details returned by Paddle. |
| Website and security requests | IP address, request time, browser and device headers, requested resources, response status and technical error information processed by the delivery and account infrastructure. |
| Support and privacy requests | Your email address, message, correspondence, and any information you choose to attach; limited verification information when necessary. |
| Browser preferences and recovery records | Language, theme, sign-in coordination, and checkout or plan-recovery information stored in your browser. |
4. Google sign-in and Paddle checkout
Google sign-in is connected through Supabase Auth. We do not ask for your Google password or use this sign-in to read your Google Drive files. Refusing the sign-in information needed to create a session prevents use of account-dependent features, but does not prevent browsing public pages.
Paddle is the authorized reseller and Merchant of Record for paid orders. It receives the information entered in its checkout and handles payment, tax and subscription administration. JOIN SHEET receives the limited order information needed to connect the purchase to your account; it does not receive your full payment-card number. A request to JOIN SHEET does not automatically delete information Paddle must retain for its own responsibilities.
5. Purposes and applicable legal grounds
We use account and plan information to provide the service you request and perform the relevant service agreement. We use support information to answer your request, transaction records to administer purchases and applicable legal duties, and technical records to operate and protect the service. We do not sell personal information or use it for cross-context behavioral advertising.
Result-save click records are used to process save requests, check our additional refund conditions, and handle related inquiries and disputes. A record alone does not establish a successful file save or a waiver of legal rights.
Where a law requires a specific processing ground, contract performance or requested pre-contract steps apply to the necessary service operations; legal obligations apply to required records and responses. Where permitted and after considering your rights, our legitimate interests in keeping the service secure and resolving disputes may apply. Consent is used where the applicable law requires it, not as a blanket justification for every activity.
Providing optional details or attachments is not required for ordinary use. Do not send sensitive personal information or other people’s confidential data unless it is genuinely necessary, you have authority to provide it, and an appropriate handling method has been agreed.
6. Recipients and international processing
We use service providers for website delivery, authentication and database services, and email delivery. Google provides your selected sign-in method, and Paddle administers paid orders. The Service Providers & Transfers page identifies these roles and links to their privacy information. Access by our personnel is limited to information needed for their work.
Online account, delivery, payment and support information may be processed outside your country. Processing locations and the applicable transfer arrangements depend on the provider and service configuration. The provider directory is not a promise that all information is stored in one country. Contact us to request information about the transfer affecting your data and any applicable safeguards. A provider privacy notice does not replace any additional notice or consent required of JOIN SHEET.
7. Retention and deletion
We do not apply a single retention period to all information. When a valid deletion request is processed, we identify what can be deleted, what must be retained, and the reason for any exception. Deletion may involve removing records from the active system and asking relevant providers to act; it does not provide a remote wipe of your device or of records independently held by Google or Paddle.
| Result-save click records | Retained while needed to check refund conditions and resolve related inquiries or disputes, then deleted when no longer needed. Any further retention is limited to applicable legal obligations or ongoing disputes. Deleting an account does not immediately erase necessary transaction or dispute records. |
|---|---|
| Account and plan records | Used for the lifetime of the account and for resolving outstanding access, payment or account issues. After an account-deletion request, unnecessary account information is deleted, subject to records that must or may lawfully be retained. |
| Payment, fraud-prevention and dispute records | Retention depends on the record, applicable accounting or consumer requirements, unresolved refunds or disputes, and any legal preservation duty. Account deletion does not erase required transaction records or automatically cancel a subscription. |
| Support correspondence | Retention is assessed against whether the request is resolved, whether follow-up or a dispute remains, the sensitivity of attachments, and any applicable record-keeping duty. Do not assume that an email attachment disappears when a browser tab closes. |
| Technical records and backups | Retention depends on the relevant infrastructure settings and the need to investigate an incident. Deletion from an active system and expiry from backups or provider logs are separate processes. |
| Local information | Workspace memory lasts for the current working session. Browser records follow the lifetimes on the Cookies & Browser Storage page. Files, exports and recipes saved to your device remain until you delete them. |
8. Your choices and rights
Depending on applicable law, you may request confirmation of processing, access or a copy, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of a refused request. Withdrawing consent does not invalidate processing that was lawful before withdrawal. Some requests can affect account-dependent features.
Use the Privacy Request page or email contact@joinsheet.com with “Privacy Request” in the subject. We request only the verification information reasonably needed to protect the account and respond within the applicable legal time limit. If a request cannot be fulfilled in full, we explain the relevant reason and available review route. You may also complain to your competent privacy regulator.
9. Security, children, and updates
We use technical and organizational measures proportionate to the information involved, including authenticated access and restrictions on account records. No internet service, email system or device can be guaranteed risk-free. The Security & Local Processing page explains the boundary and practical precautions.
JOIN SHEET is not directed at children who cannot lawfully enter the service agreement or provide any required consent. If you believe a child has provided personal information improperly, contact us. We will update this Notice when processing changes and provide additional notice or seek consent where required.