Privacy policy

Brightsheet is operated by The Trustee for M J & J M Samios Trust, trading as Samios Software Solutions, ABN 29 966 784 797. You can reach a person at hello@brightsheet.app.

When you connect a sheet, you share it with a reading address we give you. From that point we read the rows and column headings of the tab you selected, on the schedule you chose. We read whatever is in those columns, which is the part worth being clear about: if your register contains a customer’s name, a site address or a phone number, we read and store that too.

We never write to your spreadsheet. The access you grant is read-only, and the product has no ability to change, add or delete anything in it. If you stop sharing the sheet, we stop being able to read it immediately.

We do not read any other file in your Google account. The access is limited to the specific spreadsheet you shared with us.

For the people who sign in: a name, an email address, and a password stored only as a cryptographic hash, or nothing at all if you sign in with Google, Microsoft or your own company’s single sign-on. For the business: a business name, a billing email, and which plan you are on.

We also keep a record of each sync, so you can see when we last read your sheet and what happened if a read failed.

Your current rows are held for as long as the sheet is connected. Each time we read your sheet we also keep a point-in-time copy, so a dashboard can be rebuilt if something goes wrong. Those copies are deleted after 90 days.

If you cancel, your dashboards keep working until the end of the period you have paid for. After that we stop reading your sheet. We delete the rows we hold, and the snapshots, within 30 days of the account closing, unless you ask us to do it sooner, which we will do on request. Your own spreadsheet is untouched throughout and remains entirely yours: nothing about cancelling takes anything away from you, because the spreadsheet was always the original.

Records we have to keep for tax purposes, which means invoices and payment records rather than any of your business data, are kept for five years as Australian law requires.

In Australia. The database and the snapshots are held in Cloudflare’s Australian region. Pages are served from Cloudflare’s network, which means the page itself may be delivered from a location near whoever is looking at it, but your rows are read from Australia.

We do not sell your data, and we do not use it to train any AI model. These are the only other parties involved in running the service:

• Cloudflare, Inc.: Runs the application, stores the database and the sheet snapshots, and serves every page. (Australia, with global edge delivery)
• Google LLC: Holds the customer's own spreadsheet. Brightsheet reads it with the customer's permission and never writes to it. (Customer's own Google account)
• Chargebee, Inc.: Subscription billing and invoices. Receives a business name and a billing email. (United States and India)

If you turn on the plain English question feature using your own AI provider key, your column names and a sample of your rows are sent to the provider you nominated, at the address you gave us. That is your choice and your arrangement with them; if you leave that setting alone, questions are answered on Cloudflare’s own infrastructure in the list above.

A shared view is a link that shows part of your data to anyone holding it, without a login. That is what it is for, and it is worth being plain about the consequence: anyone the link is forwarded to can open it. You choose which rows and which columns each link shows, you can set it to expire, and you can turn it off at any time, which takes effect immediately.

Every connection is encrypted in transit. Passwords are hashed and never stored in a readable form. Credentials you give us, such as an AI provider key or a single sign-on secret, are encrypted before they are stored. Each business’s data is separated at the database level, and every request is checked against the workspace the person signing in belongs to.

No system is perfect. If something happens that affects your data, we will tell you what happened and what we are doing about it, and we will do it promptly rather than quietly.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@brightsheet.app and we will respond within 30 days. You can also stop the whole thing at any moment without asking us: un-share the spreadsheet, and we cannot read it any more.

If you are unhappy with how we have handled your information, tell us first and we will try to fix it. If that does not resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If we change this policy in a way that materially affects you, we will email the account owner before it takes effect rather than quietly updating the date at the top.