AI SheetFlow — Privacy Policy
Last updated: August 2026
AI SheetFlow ("we", "us") is a Google Sheets™ add-on that extracts structured data from invoices and receipts you upload. This policy explains what data we collect, exactly who we share it with, and how it's protected.
Google user data — what we access, and where it goes
When you sign in and authorize AI SheetFlow, we request exactly four permissions:
userinfo.email— your Google Account email address.spreadsheets.currentonly— write access to only the one Google Sheet you have open when you use the add-on. We do not access any other spreadsheet, your Drive, Gmail, or any other Google data.script.container.ui— permission to display our sidebar interface inside Sheets.script.external_request— permission for the add-on to call our own backend server.
Your Google Account email and your spreadsheet access are never shared with, transmitted to, or used by DeepSeek, or any AI model provider. Here is exactly what happens to each:
- Your email is sent only to our own backend (hosted on Vercel) and stored in our own database (Supabase), to look up whether your account is paid and how many processing credits remain. It is never sent to DeepSeek or Google Cloud Vision.
- Your spreadsheet is only ever written to — we insert the rows AI SheetFlow extracts into it. We never read existing spreadsheet content and never transmit any spreadsheet data to DeepSeek, Google Cloud Vision, or any other third party.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, no data obtained through a Google API is ever used to train, fine-tune, or otherwise improve any general-purpose AI/ML model, by us or by any third party we use.
The documents you upload (not Google data)
Separately from your Google Account, AI SheetFlow lets you select an invoice or receipt file (PDF or photo) from your own device using a standard file picker. This file is not obtained through any Google API — it is not read from your Drive or any Google service. This locally-selected file is what gets processed by our OCR and AI extraction providers, described below.
Third parties we share data with
| Provider | What they receive | Google user data? |
|---|---|---|
| Google Cloud Vision | The document file you upload (for OCR text extraction only) | No — a locally-selected file, not Google API data |
| DeepSeek | Only the OCR'd text of the document you upload, plus any custom field labels you define | No — never your email or spreadsheet content |
| Stripe | Billing email and payment method, collected directly by Stripe at checkout | No — collected independently of Google sign-in |
| Supabase | Your Google Account email, paid status, credit balance, Stripe customer ID | Yes — email only, used solely for account status lookups |
We do not sell data to any third party, and we do not share data with any party not listed above.
Data protection measures
- Encryption in transit: every connection between your browser, our backend, and the third parties above uses HTTPS/TLS.
- No persistent document storage: uploaded documents and their OCR'd text are processed in memory for a single request and are never written to disk or a database. Once a response is returned to your sheet, the document content is discarded.
- Least-privilege access: our backend uses narrowly-scoped, restricted API keys for each provider (Stripe, Supabase, Google Cloud Vision) rather than broad account-level credentials, limiting what any single key can access if compromised.
- Scoped OAuth permissions: we request the minimum Google scopes needed (see above) — we never request access to Drive, Gmail, Calendar, or any spreadsheet other than the one you have open.
- Server-side secrets: all third-party API keys are stored as encrypted environment variables on our hosting provider (Vercel) and are never exposed to your browser or the Apps Script client.
Data retention & deletion
Account metadata (email, paid status, credits, Stripe customer ID) is retained for as long as your account is active. You can request deletion of your account data at any time by contacting us below; we'll remove your record from our database, excluding records Stripe independently retains for its own legal/tax obligations. Document content is never retained in the first place (see Data protection measures above).
Contact
Questions about this policy or your data: hr@bulkinvoicegenerator.com
Google Sheets™ is a trademark of Google LLC.