Privacy policy

Brightsheet is operated by The Trustee for M J & J M Samios Trust, trading as Samios Software Solutions, ABN 29 966 784 797. You can reach a person at hello@brightsheet.app.

For Google Sheets, you share the spreadsheet with the reading address Brightsheet provides. We read the selected tab on your sync schedule. If its columns contain names, addresses or phone numbers, those values become part of your dashboard data.

For OneDrive, you sign in to your personal or work Microsoft account and approve read access. Microsoft’s Files.Read permission allows the app to read your files, which is broader than a single workbook. We show folders and workbook names in the picker, and import only the workbooks you select. We download the selected workbook to read its selected tab. Some work accounts require their administrator’s approval.

We store encrypted Microsoft access and refresh tokens, linked to your workspace, so selected OneDrive workbooks can update without you staying signed in. We do not receive your Microsoft password. Disconnecting OneDrive removes these stored tokens and pauses its connected sources. You can also revoke Brightsheet’s permission in your Microsoft account. Previously imported dashboard rows remain until you delete the source or close the workspace.

SharePoint uses a separate connection. Your administrator approves Sites.Selected and Files.SelectedOperations.Selected, then grants read access to a workbook or its SharePoint site. Those permissions alone grant access to no files. A site grant permits the app to read files in that site. Your administrator can narrow or remove the grant.

Brightsheet never writes to your spreadsheet. All connection methods are read-only. Uploaded Excel and CSV files are snapshots and update only when you upload a replacement.

When you use our enquiry form, we receive your name, email address, business name, and any phone number or message you choose to provide. We also receive the plan and type of dashboard you selected. These details are sent to our team by email through Cloudflare so we can respond to your enquiry. The form does not ask for your spreadsheet or login details. We do not use it to sign you up for marketing emails.

For the people who sign in: a name, an email address, and a password stored only as a cryptographic hash, or nothing at all if you sign in with Google, Microsoft or your own company’s single sign-on. For the business: a business name, a billing email, and which plan you are on.

We also keep a record of each sync, so you can see when we last read your sheet and what happened if a read failed.

Your current rows are held for as long as the sheet is connected. Each time we read your sheet we also keep a point-in-time copy, so a dashboard can be rebuilt if something goes wrong. Those copies are deleted after 90 days.

If you cancel, your dashboards keep working until the end of the period you have paid for. After that we stop reading your sheet. We delete the rows we hold, and the snapshots, within 30 days of the account closing, unless you ask us to do it sooner, which we will do on request. Your own spreadsheet is untouched throughout and remains entirely yours: nothing about cancelling takes anything away from you, because the spreadsheet was always the original.

Records we have to keep for tax purposes, which means invoices and payment records rather than any of your business data, are kept for five years as Australian law requires.

In Oceania. Your rows, and the copies we keep of them, are stored in Cloudflare’s Oceania region. We would rather be able to say Australia. Oceania is the smallest region Cloudflare offers, it covers Australia and New Zealand, and there is no Australia-only option for anybody to choose, so Australia is not a promise we can honestly make. Cloudflare also treats the placement as best effort rather than a guarantee.

What we can tell you is that we went and checked on 18 August 2026 rather than assuming, and that the database and the point-in-time copies were both in that region on the day we looked. If that ever changes, this page changes before it does.

Pages are served from Cloudflare’s network, which means the page itself may be delivered from a location near whoever is looking at it, but your rows are read from the region above.

One part of Brightsheet sits outside all of this, and it is the plain English box: see “Who else can see it” below.

We do not sell your data, and we do not use it to train any AI model. These are the only other parties involved in running the service:

• Cloudflare, Inc.: Runs the application, stores the database and the sheet snapshots, serves every page, and answers whatever is typed into the plain English box unless the customer brings their own model. (Oceania for the database and the snapshots. Pages are served from wherever is nearest, and Cloudflare does not say where the answers to typed questions are worked out.)
• Google LLC: Holds the customer's own Google Sheet. Brightsheet reads it with the customer's permission and never writes to it. (Customer's own Google account)
• Microsoft Corporation: Holds the customer's own Excel workbook in SharePoint. Brightsheet reads it with the access the customer's own administrator granted, and never writes to it. (Customer's own Microsoft 365)
• Chargebee, Inc.: Subscription billing and invoices. Receives a business name and a billing email. (United States and India)

The plain English box is the one part of Brightsheet whose location we cannot tell you. It is used in two places, asking a question about your dashboard and describing a widget in your own words, and either way what you type goes to a model, along with your column names and a sample of your rows.

Unless you have set up a model of your own, that is Cloudflare’s model answering. Cloudflare does not publish where it runs and gives nobody a way to choose, so we are not going to name a country on their behalf.

There are two ways to deal with that and both are yours to take. Leave the box alone, and nothing of yours goes to a model at all, because nothing else in the dashboard uses one. Or put your own AI provider key in settings, in which case the same material goes to the provider you nominated, at the address you gave us, under your arrangement with them rather than ours.

A shared view is a link that shows part of your data to anyone holding it, without a login. That is what it is for, and it is worth being plain about the consequence: anyone the link is forwarded to can open it. You choose which rows and which columns each link shows, you can set it to expire, and you can turn it off at any time, which takes effect immediately.

Every connection is encrypted in transit. Passwords are hashed and never stored in a readable form. Credentials you give us, such as an AI provider key or a single sign-on secret, are encrypted before they are stored. Each business’s data is separated at the database level, and every request is checked against the workspace the person signing in belongs to.

No system is perfect. If something happens that affects your data, we will tell you what happened and what we are doing about it, and we will do it promptly rather than quietly.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@brightsheet.app and we will respond within 30 days. You can also stop the whole thing at any moment without asking us: un-share the spreadsheet, and we cannot read it any more.

If you are unhappy with how we have handled your information, tell us first and we will try to fix it. If that does not resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If we change this policy in a way that materially affects you, we will email the account owner before it takes effect rather than quietly updating the date at the top.