Privacy policy

Last updated: 8 October 2026

This policy explains what information Sheets processes, why, and what control you have. Sheets is published by 4Cs BV, Lindekensweg 3, 2160 Wommelgem, Belgium, company number BE 1014.832.509 ("we"), the controller of the personal data described here. Contact: [email protected].

Where Sheets runs

Sheets runs on servers in the European Union. Your spreadsheets and settings are stored there for your store.

Information we process

  • Store and staff details: store name and domain, and the name and e-mail address of the staff members who use Sheets.
  • Access token: issued by Shopify when you install Sheets, stored encrypted, used only to read your store data.
  • Store data: orders, products, inventory, the store's traffic totals and customer records (customer ID, number of orders, amount spent, and the city and country of an address; never names, e-mail addresses, phone numbers, street addresses or postcodes), read through Shopify's Admin API to compute formulas, pivots, charts, exports and scheduled reports. Store data is kept in server memory for at most one minute and not copied into Sheets storage, except values a user deliberately writes into a spreadsheet. How Sheets handles Shopify data lists every field.
  • Spreadsheets: their content, folders, sharing settings and version history.
  • Scheduled reports: recipients, subject, message and cadence; the report content is generated when it is sent and not kept afterwards.

Customer data

We process your customers' personal data only on your behalf and on your instructions, to show it in your own spreadsheets. We answer Shopify's privacy requests: a customer data request is answered with what Sheets holds about that customer, and a customer or store redaction request deletes it. The Data Processing Agreement sets out these terms in full.

Who receives it

  • Our hosting provider in the EU, which stores Sheets' data.
  • The e-mail provider you choose for scheduled reports, and the recipients of each report.
  • Authorities, where the law requires it.

How long we keep it

Spreadsheets and settings stay until they are deleted in the app. Uninstalling Sheets deletes the access token at once and all of the store's Sheets data within 48 hours of Shopify's store redaction request.

Why we process it

Only to provide Sheets: show and save spreadsheets, apply sharing and permissions, compute live data, export files, send the scheduled reports you configure and keep the service secure. We do not sell personal data, show advertising or build profiles.

Analytics on this website

The pages of this website (not the Sheets apps) use Google Analytics, provided by Google Ireland Limited, only after you click Accept in the bar shown on your first visit. It then sets the cookies _ga and _ga_X8X11J9M43 (up to two years) to count visits and see which pages are used. Google Analytics does not store IP addresses; Google may process the data outside the EU under the EU Standard Contractual Clauses. Nothing is loaded if you decline, if the page is shown inside another site, or if your browser asks not to be tracked (Do Not Track or Global Privacy Control). You can change your choice at any time with "Cookie settings" at the bottom of every page; declining deletes these cookies.

Your rights

Depending on where you live (for example under the GDPR, the CCPA or PIPEDA) you can ask for access to, correction or deletion of your personal data, object to processing or ask for a copy. Write to [email protected]. For data your organisation's administrator controls, we may refer you to them. You can also complain to your data protection authority (in Belgium: the Gegevensbeschermingsautoriteit / Autorité de protection des données).

Changes

We will update this page when the policy changes and change the date above.