Privacy policy

Last updated: 6 October 2026

This policy explains what information Sheets processes, why, and what control you have. Sheets is published by 4Cs BV, Lindekensweg 3, 2160 Wommelgem, Belgium, company number BE 1014.832.509 ("we"), the controller of the personal data described here. Contact: [email protected].

Where Sheets runs

Sheets runs on monday.com's app infrastructure ("monday code", EU region). Your spreadsheets and settings are stored in monday code storage for your monday.com account.

Information we process

  • monday.com account and user details: account id, user id, name, e-mail address, admin/guest status and team membership, read from monday.com to apply permissions.
  • monday.com access tokens: issued when a user connects Sheets, stored encrypted in monday.com's SecureStorage, used to read the boards that user's spreadsheets use, to check their permissions, and to make the board changes that user asks for.
  • Board data: read live with the user's own permissions to compute formulas, pivots, charts, linked tables, exports and scheduled reports. It is not copied into Sheets storage, except values a user deliberately writes into a spreadsheet and a user's unsent changes to a linked table.
  • Spreadsheets: their content, folders, sharing settings and version history.
  • E-mail settings for scheduled reports, chosen by an account admin (a Google or Microsoft mailbox, SMTP server details or a Resend key), stored encrypted.
  • Scheduled reports and cell alerts: the recipients' e-mail addresses, subject, message and cadence; the report content is generated when it is sent and not kept afterwards.
  • AI assistant connections (if a user creates one): the client's name, the access the user granted and its tokens.

Changes to your boards

Sheets changes a board only when a user does so: by sending their own changes to a linked table, or by writing totals to a board they choose, always with that user's monday.com permissions.

AI assistants

A user may connect their own AI assistant (Claude, ChatGPT or any MCP client) to Sheets. The assistant signs in through OAuth and a consent screen where the user chooses what it may do: read only, read and edit, and optionally write changes back to boards. That choice is checked on every call, is limited to the user's own monday.com permissions, and can be changed or revoked in Sheets at any time. Every edit an assistant makes is recorded in the file's change log. Sheets itself sends no data to any AI provider; the assistant the user connects receives only what it asks for within the access granted.

Cookies

Sheets uses only HttpOnly session cookies needed to keep users signed in. It uses no tracking or advertising cookies.

Google and Microsoft user data

If an admin chooses "Sign in with Google" or "Sign in with Microsoft" for scheduled reports, Sheets uses the mailbox only to send the reports and test messages set up in the account. It cannot read the mailbox. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who receives it

  • monday.com, which hosts and stores Sheets (monday code) and controls its app storage, including how long data stays there after Sheets is uninstalled.
  • The e-mail provider your admin chose, and the recipients of each report.
  • Authorities, where the law requires it.

How long we keep it

Spreadsheets and settings stay until they are deleted in the app.

When Sheets is uninstalled from a monday.com account, we delete everything we hold ourselves straight away: the account's access tokens, e-mail settings and AI assistant connections. Spreadsheets, their version history, change logs, schedules and alerts are kept in monday.com's app storage (monday code), which monday.com hosts and controls. monday.com withdraws our access to that storage at the moment of uninstall, so from then on we cannot read or delete it ourselves; it is held by monday.com under monday.com's own terms and privacy policy, and its retention is monday.com's responsibility. If you want it removed, write to [email protected]: we will have it deleted with the tools monday.com provides to app developers, normally within 10 days of your request.

Why we process it

Only to provide Sheets: show and save spreadsheets, apply sharing and permissions, compute live data, export files, send the scheduled reports you configure and keep the service secure. We do not sell personal data, show advertising or build profiles.

Analytics on this website

The pages of this website (not the Sheets apps) use Google Analytics, provided by Google Ireland Limited, only after you click Accept in the bar shown on your first visit. It then sets the cookies _ga and _ga_X8X11J9M43 (up to two years) to count visits and see which pages are used. Google Analytics does not store IP addresses; Google may process the data outside the EU under the EU Standard Contractual Clauses. Nothing is loaded if you decline, if the page is shown inside another site, or if your browser asks not to be tracked (Do Not Track or Global Privacy Control). You can change your choice at any time with "Cookie settings" at the bottom of every page; declining deletes these cookies.

Your rights

Depending on where you live (for example under the GDPR, the CCPA or PIPEDA) you can ask for access to, correction or deletion of your personal data, object to processing or ask for a copy. Write to [email protected]. For data your organisation's administrator controls, we may refer you to them. You can also complain to your data protection authority (in Belgium: the Gegevensbeschermingsautoriteit / Autorité de protection des données).

Changes

We will update this page when the policy changes and change the date above.