Privacy Policy for SheetAgent

Last Updated: June 15, 2025

1. Introduction

SheetAgent ("we," "our," or "us") is a Chrome extension that automates web tasks using CSV data and natural language instructions. This Privacy Policy explains how we collect, use, store, and protect your information when you use our extension.

2. Information We Collect

2.1 Information You Provide

• CSV Files: Data you upload containing headers and values for task automation
• Instructions: Natural language commands you provide for task execution
• Configuration Data: Settings like start URLs and task preferences

2.2 Authentication Information

Google Account Data: When you sign in using Google OAuth, we collect:

• Email address
• Profile picture
• User ID
• Name (if available)

2.3 Automatically Collected Information

• Web Page Data: Simplified DOM structure of pages you interact with during task execution
• Task Execution Data: Actions performed, success/failure status, and execution logs
• Browser Information: Tab IDs and URLs for task coordination

3. How We Use Your Information

3.1 Core Functionality

• Process CSV data to execute automated tasks
• Interpret natural language instructions using AI services
• Maintain task state and progress across browser sessions
• Authenticate users and maintain secure sessions

3.2 AI Processing

• Send simplified page structure and instructions to our AI service to determine appropriate actions
• Analyze CSV data in context of user instructions
• Generate automated task sequences

4. Data Storage and Security

4.1 Local Storage

• CSV data, instructions, and task state are stored locally in your browser
• Authentication tokens are securely stored using Chrome's storage API
• No sensitive data is permanently stored on our servers

4.2 Security Measures

• All API communications use HTTPS encryption
• Authentication tokens are handled securely
• Local data is isolated to the extension's storage space

5. Third-Party Services

5.1 AI Processing Service

• Purpose: Interpret instructions and generate automation actions
• Data Shared: Simplified DOM structure, user instructions, CSV row data
• Retention: Processing data is not permanently stored

5.2 Google OAuth

• Purpose: User authentication
• Data Shared: Standard OAuth information (email, profile)
• Governed By: Google's Privacy Policy

5.3 Google Fonts

• Purpose: UI font loading
• Data Shared: Standard web font requests
• Governed By: Google's Privacy Policy

6. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except:

• For AI processing as described above
• When required by law or legal process
• To protect our rights, property, or safety
• With your explicit consent

7. Data Retention

• Local Data: Retained until you clear it manually or uninstall the extension
• Authentication Data: Retained until you log out or revoke access
• Processing Data: Not permanently stored on our servers

8. Your Rights and Choices

8.1 Data Control

• Clear CSV data and instructions at any time through the extension interface
• Log out to remove authentication data
• Uninstall the extension to remove all local data

8.2 Access and Correction

• View all stored data through the extension interface
• Modify or delete instructions and CSV data
• Update account information through Google account settings

9. Children's Privacy

SheetAgent is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

10. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last Updated" date
• Displaying a notice in the extension
• Other appropriate means

12. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected
• Delete personal information
• Opt-out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising your rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data
• Restrict processing
• Data portability
• Object to processing
• Lodge a complaint with supervisory authorities

14. Contact Information

15. Consent

By using SheetAgent, you consent to the collection, use, and processing of your information as described in this Privacy Policy.