Privacy Policy

Overview

Business Buddy OS and Sheet Speak (“we”, “the app”) connect to your Google Sheets to build dashboards, answer questions, and format your data. This policy explains what data we access, what we store, and how we use it.

Google account access

When you connect your Google account, you authorize the app through Google’s OAuth system. We request only the scopes needed to do the job:

• Read your spreadsheets — to import sheet contents into your dashboard and chat.
• View your Drive metadata — to list your spreadsheets so you can pick which one to connect.
• Edit your sheets — only when you use the Sheet Formatter tool and explicitly ask us to create a new tab with cleaned data.
• Basic profile info — your name and email to identify your account.

Your Google password is never seen or stored by us. The connection token that Google issues is encrypted (AES-256-GCM) and stored so the app can keep reading your sheet across sessions. You can disconnect at any time from Settings, which revokes the connection and deletes the token.

What data we store

• Account info — your email address and a unique user ID from our auth provider.
• Sheet selection — the spreadsheet ID and sheet name you choose to connect. We do not store a permanent copy of your sheet’s cell contents.
• Encrypted connection token — the OAuth refresh token Google provides, encrypted at rest.
• Chat history — messages you send and receive in the AI Buddy chat and Sheet Speak, so you can resume conversations.
• Dashboard configuration — your tabs, their names, and which sheets belong to which tab.

How your data is used

• Reading your sheet — we fetch your selected sheet’s contents in real time when you open a dashboard or send a chat message. The data is processed to compute KPIs, render charts, and answer your questions.
• AI analysis — when you chat with the AI Buddy or use SheetBot, a compact summary of your sheet (headers, aggregate totals, and a few sample rows) is sent to our AI provider to generate insights and advice. We avoid sending the entire raw sheet if it is large.
• Sheet formatting — when you paste data into the Sheet Formatter, it is processed by AI to produce a cleaned, standardized version. Creating a new sheet tab writes that cleaned data back into your Google Sheet.
• Improving the app — we use anonymous, aggregated usage patterns to find bugs and improve features. We do not sell your data to anyone.

How your data is protected

All data is stored in our managed backend with row-level security so that only your account can read your records. OAuth connection tokens are encrypted with AES-256-GCM before storage. Access to your sheet is scoped to the permissions you granted and nothing more.

Data retention & deletion

We keep your data for as long as your account is active. If you disconnect a sheet, we delete the connection token and sheet selection. If you delete your account, all associated data — workspaces, chat history, dashboard tabs, and connection tokens — is removed. You can download your data or permanently delete your account directly from Settings.

Third-party services

The app relies on Google Sheets APIs for sheet access, a managed auth provider for sign-in, and an AI model provider for generating insights. Each provider has its own privacy policy governing data they process on their end.

Payments are processed by Stripe, our payment processor, which acts as merchant of record where applicable. When you subscribe, Stripe collects and processes your payment details (card, billing address) on our behalf — we never see or store your full card number. Stripe may share your subscription status, email, and billing country with us so we can manage your plan.

Legal basis & your rights

Business Buddy OS is the data controller for the personal data described in this policy. We process your data to perform the contract with you (providing the dashboard and Sheet Speak features), based on your consent (connecting your Google account), and for our legitimate interest in securing and improving the service. You may request access, correction, export, or deletion of your data at any time by contacting us.

Contact

Questions about this policy or your data? Reach out from the Settings page or email the app owner directly.