1. Introduction
Submitsheet Ltd ("we", "us", or "our") operates the website submitsheet.com (the
"Service"). This policy informs you of our policies regarding the collection, use,
and disclosure of personal data when you use our Service and the choices you have
associated with that data. We operate in accordance with the UK General Data Protection
Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information Collection and Use
We collect several different types of information for various purposes to provide and
improve our Service to you:
-
Account Data:
When you sign up via a Magic Link, we collect your email address. This is essential
for authentication and to manage your account.
-
Usage Data:
We may collect information on how the Service is accessed and used. This may include
your IP address, browser type, and time spent on our pages.
-
Customer-Uploaded Data:
As a spreadsheet collection tool, we host data you collect from your users. You (the
Customer) are the Data Controller of this information, and Submitsheet Ltd is the
Data Processor. We do not access or use this data except to provide the Service or at
your explicit request for support.
3. Legal Basis for Processing
Under UK GDPR, we process your data under the following legal bases:
-
Contractual Necessity:
To provide the subscription service you have signed up for.
-
Legitimate Interests:
To ensure the security of our platform and to communicate essential service updates.
-
Consent:
Where you have explicitly opted-in to receive non-essential communications.
4. Data Storage and Security
We take data security seriously.
-
Encryption:
All data is encrypted at rest using AES-256 and in transit via TLS/SSL.
-
Hosting:
Our infrastructure is hosted on secure, industry-leading cloud providers (AWS/GCP).
-
Retention:
We retain account data for as long as your account is active. Customer-uploaded data
is retained according to your plan's retention policy (e.g., 90 days for Pro users).
5. Third-Party Service Providers
We use a limited number of third-party providers to help run Submitsheet:
-
Stripe:
For payment processing. We do not store your credit card details.
-
Postmark/SendGrid:
For delivering transactional emails and Magic Links.
-
Cloud Hosting:
AWS or Google Cloud for server infrastructure.
6. Your Data Rights
Under UK law, you have the following rights:
- The right to access, update, or delete the information we have on you.
- The right of rectification.
- The right to object to or restrict processing.
- The right to data portability.
7. Contact Us
If you have any questions about this Privacy Policy, please contact us: