Service Providers & Transfers

1. Providers and information flows

Opening a local file does not upload its cell values to these providers for sheet operations. Website requests, sign-in, paid-order administration and messages you send to support are separate online activities.

Vercel

Website hosting and deliverySite-resource requests and associated IP address, browser headers, timing, response and infrastructure log information. Used when pages and application resources are requested.

Cloudflare DNS

Domain name resolutionDNS queries and associated network information used to resolve joinsheet.com. DNS service is not a spreadsheet-upload or processing service.

Supabase

Authentication, database and server functionsGoogle-linked identity and sessions; account and plan records; checkout, transaction and subscription identifiers; support references and access-verification records. Used when signing in, checking access or administering a purchase.

Google

Selected sign-in providerGoogle account authentication and the limited identity information returned to Supabase, such as email, identifier, name and profile image. Used when Google sign-in is selected; it is not a Google Drive import permission.

Paddle

Authorized reseller and Merchant of RecordInformation entered in checkout, payment and tax information, customer and subscription records, receipts, fraud-prevention and purchase-support information. JOIN SHEET exchanges the limited order metadata needed to link and administer plan access. Used for paid-order activity when checkout is available.

Cloudflare Email Routing

Support email forwardingSender and recipient addresses, message headers, body and attachments you send to contact@joinsheet.com are routed to the support mailbox. Forwarding is separate from storage and handling in the receiving mailbox.

2. Local work and support attachments

The browser on your device reads supported files or pasted data and performs the sheet operations. Requests to sign in, verify plan access or start checkout do not include those source values. Your downloaded results and Data Recipes stay at the locations you choose.

Source values, screenshots, recipes or attachments you send to support pass through email services and reach the support mailbox. Remove personal and confidential information first. If you need to know who will receive sensitive material, contact us before attaching it.

3. Provider responsibilities

Hosting, database and delivery providers supply infrastructure used to run JOIN SHEET. Google also controls its own sign-in service, and Paddle has its own responsibilities as the seller of paid orders, including payment, tax and fraud-prevention processing. These providers do not all act solely on JOIN SHEET’s instructions.

The links below describe each provider’s broader services. They do not mean JOIN SHEET uses every product, data category or advertising activity mentioned in those notices. The current app does not include advertising trackers or non-essential product analytics.

4. International processing and safeguards

Account, technical-request, order and support information may be processed outside your country. The countries involved depend on the configured hosting region, provider infrastructure, support access, subcontractors and email destination. A provider’s headquarters alone does not identify every processing location.

Applicable transfer requirements can include a lawful transfer ground, required recipient and country disclosures, contractual safeguards, or valid consent where necessary. Linking to a provider policy is not by itself proof that every requirement has been met, and this directory does not claim that your information is held only in your country.

To ask about a transfer affecting your information, use the Privacy requests section on the Contact page. We can explain who receives it, what information is transferred, why, how and when it is transferred, how long it is retained, and what safeguards are available. Where additional disclosures are legally required, they must accompany the relevant processing. A general contact route does not replace those disclosures.

5. Retention, deletion and provider changes

The Privacy Notice explains retention criteria for information used by JOIN SHEET. A provider may retain technical records or independently controlled transaction records under its own duties; deleting a JOIN SHEET account does not automatically erase those records. We cancel any renewing Paddle subscription before completing account deletion, but this does not delete records Paddle must retain.

We update this directory when the services or information flows change. Any new feature that sends source values outside your device must clearly explain that change; it will not be described as the same local-only sheet processing.

6. Official provider privacy information

Use the official notices below to review each provider’s privacy practices and contact channels. For questions about how JOIN SHEET uses these services or about your request, email contact@joinsheet.com.