Last updated 26 October 2026
Privacy Policy
We never store your submissions.
Data you send to the API passes straight through to your Google Sheet. We don't save it in our database, and we don't write it to our logs.
Who we are
SheetCapture is operated by Alan Montgomery in the United Kingdom. For anything about your data, email support@sheetcapture.com.
Data you send through the API
When you or your visitors submit data to SheetCapture, we use it only to add a row to the Google Sheet you chose, then discard it. If a write fails, we log the error code (for example sheet_not_found), never the data itself.
For this data, you are the controller and we act as your processor. You're responsible for having a lawful basis to collect it, such as your visitors' consent, and for telling them how you'll use it.
Data we store about your account
- Account details: your name and email address.
- Password: stored only as a one-way hash (bcrypt). We can't see your password.
- Access key: so we can recognise your API requests.
- Plan and usage: your plan, how many requests you've used this month and when it refills.
- Security: a count of recent failed sign-ins, so we can temporarily lock an account under attack.
We use this only to run the service. We don't sell it, share it for marketing, or use it to profile you.
Cookies
We set one cookie, sc_session, to keep you signed in. It's strictly necessary, so it doesn't need consent. We don't use analytics, advertising or tracking cookies.
Services we rely on
- Google Sheets API (Google): to write rows into the sheets you share with us.
- Vercel: hosts the website and API. Their standard request logs record details like the page requested, response status and IP address, but not request bodies.
- Neon: hosts our database in London (AWS eu-west-2), where your account details are stored.
How long we keep it
We keep your account details until you delete your account. You can do that any time from Settings. Deleting it removes your account from our database straight away, and your access key stops working immediately. Rows already in your Google Sheets are yours and aren't affected.
Your rights
Under UK GDPR you can ask to see, correct, export or delete your personal data, or object to how we use it. You can update your details yourself in Settings, or email us and we'll respond within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office.
Security
Everything is sent over HTTPS. Passwords are hashed, sessions are signed, and repeated failed sign-ins lock an account temporarily.
Changes
If we change how we handle your data, we'll update this page and the date at the top, and email you about anything significant.