SheetTrack Privacy Policy
Effective date: October 21, 2026
1. Who we are and what this covers
SheetTrack is a Microsoft Excel add-in that checks workbooks for errors and keeps version history. This policy covers the add-in, the SheetTrack web service it calls (the "API"), and the website at sheettrack.com. The add-in's task pane is served from app.sheettrack.com.
SheetTrack is operated by SheetTrack, a sole proprietorship of Lakshay Goel registered in New Delhi, India ("we", "us"). Contact: privacy@sheettrack.com.
2. The short version
- SheetTrack has no user accounts. We keep no copy of your workbooks, your version history or your Microsoft sign-in tokens.
- If you ask to hear when SheetTrack is on Microsoft AppSource, we keep the email address you give us until we send that one email, then delete it.
- Check Workbook runs inside the add-in, on your device. Your workbook's content is not sent to us.
- Version history is stored on your device (in the add-in's browser storage), with backup to a private SheetTrack folder in your own OneDrive, or, for history you share with others, in a
.sheettrackfolder next to the workbook in your own Microsoft 365 storage. We never hold a copy. - We show no advertising, we do not sell data, we set no cookies, and we use no third-party analytics.
3. Information we process
| Information | When | Where it goes | Do we keep it? |
|---|---|---|---|
| Version snapshots (the cell values and formulas of a saved version) for history kept next to a OneDrive or SharePoint workbook | A version is saved, by you or automatically if automatic versions are on | Uploaded by the add-in directly to Microsoft Graph, into a .sheettrack folder next to your workbook | No. They live in your Microsoft 365 storage. |
| Version metadata for cloud saves: your note, a change summary (which can include changed cell addresses and their before and after values), the snapshot's hash and size, the workbook's OneDrive or SharePoint address | A version is saved, or you use Team features | Sent to the API, which writes the history index into your .sheettrack folder with your permission | No. Held in memory during the request. |
| Team records: review requests, decisions, comments, roles and the audit log, with names and email addresses as Microsoft reports them | You use Team features | Your .sheettrack folder | No. |
| History on your device, for any workbook, including the key numbers you watch (each one's cell, its row and column names and its formula) and the Check Workbook findings you accept (each one's check, cell, row and column names and your reason) | A version is saved | The add-in's browser storage (IndexedDB) on your device. When OneDrive backup is on, also a private SheetTrack app folder in your OneDrive. Backup may be turned on for you when you sign in; you can turn it off in Settings | No. |
| Identity: your Microsoft name, email address and ID | You use cloud features | Read from Microsoft Graph by the API to identify who is acting | Held in memory for up to 5 minutes, indexed by a one-way hash of your token, then removed within a few minutes. Also written as the author in your own records. |
| Workbook location: its address, file name, folder, and OneDrive drive and item IDs | You use cloud features | The API's memory | Up to 10 minutes, then removed within a few minutes. |
| Technical data: IP address, user agent, requested address, status code, duration and byte counts; browser security reports (the blocked address and the page address) | Every request to the API or our sites | Google Cloud Run's request logs for the API. Cloudflare processes the same kind of data to deliver and protect sheettrack.com and app.sheettrack.com. IP addresses are also held briefly in memory for rate limiting. | API request logs are kept for 30 days, then deleted. |
| Support messages | You email us | Our business mailbox, hosted by GoDaddy | Up to 24 months after the conversation ends, unless the law requires longer. |
| Launch sign-ups: the email address you enter, the time, which form on the page you used, and whether the address's domain accepts email (checked with a DNS lookup) | You ask to be told when SheetTrack is on Microsoft AppSource | Stored by Cloudflare (a D1 database) for sheettrack.com. To stop automated sign-ups, the form runs Cloudflare Turnstile, a bot check that Cloudflare runs on its own servers; it loads only when you use the form, and we receive only a pass or fail | Until we send the launch email, then deleted. Ask us to delete it sooner at privacy@sheettrack.com. |
After each Check Workbook, the add-in keeps a list of that check's findings (each one's check, cell, row and column names and message) in its browser storage on your device, so the next check can show what is new. It is never sent anywhere and is not in your OneDrive backup.
Key numbers you watch and Check Workbook findings you accept in a workbook whose history is shared with your team are kept only in the add-in's browser storage on your device, never in the .sheettrack folder or the workbook.
Once you start tracking a workbook, the add-in stores a small record inside that workbook file (in its document settings): a random history ID, when tracking started, whether its history is shared with your team, one-way fingerprints of the places the file has been saved (they cannot be turned back into a place, though someone who already knows or guesses a place could check it against them), and, for a file in OneDrive or SharePoint whose history is shared, its folder, encrypted with a key made from that file's own OneDrive identifiers. The record contains no file names, paths, web addresses or account names. The add-in's browser storage on your device keeps the same record with this device's paths and addresses, so that history survives renaming or moving the file. The API never logs workbook content, notes, comments or tokens.
4. What we do not do
We do not show ads, sell or share personal information for advertising, use third-party analytics or tracking, build profiles, or use your workbook content to train models. A launch sign-up address is used only for the launch email: it is not added to a newsletter or shared. Our website and task pane set no cookies.
5. Sign-in, permissions and tokens
You sign in with Microsoft (work, school or personal accounts). SheetTrack asks for permissions one step at a time:
| Microsoft permission | When it is requested | What SheetTrack uses it for |
|---|---|---|
User.Read | At sign-in | Show who is signed in; name you as the author in your own records |
Files.Read | Only when you list what changed since one of OneDrive's own versions of a workbook in your own OneDrive, and SheetTrack doesn't already have Files.ReadWrite | Read that workbook's version list and earlier versions. It covers only your own files and cannot change them. |
Files.ReadWrite | Only when you share the history of a workbook in your own OneDrive (work or school account), or open such a workbook's shared history | Read and write the .sheettrack folder next to that workbook, and read that workbook's location, sharing list, version list and earlier versions. It covers only your own files. |
Files.ReadWrite.All | Only when you share the history of a workbook in SharePoint, in someone else's OneDrive or in a personal OneDrive, or open such a workbook's shared history, or when you list what changed since one of OneDrive's own versions of such a workbook and SheetTrack already has this permission (it never asks for it for that) | The same, for files other people share with you and SharePoint files, which Files.ReadWrite does not reach. Microsoft words this permission broadly ("all files you can access"); SheetTrack uses it only for the workbook you track and its .sheettrack folder. |
Files.ReadWrite.AppFolder | When OneDrive backup is on | Read and write SheetTrack's own private app folder in your OneDrive |
For cloud history actions the add-in sends your Microsoft access token to the API in an Authorization header so the API can act on your behalf. The API uses it for that request only. It does not store the token or write it to logs. Microsoft's sign-in library keeps its own cache in the add-in's browser storage on your device; Sign out clears it. Your organization's administrator may control whether you can grant these permissions; many organizations require an administrator to approve Files.ReadWrite.All.
6. Team features and tamper evidence
Reviews, comments, roles and the audit log are stored in the same .sheettrack folder as your version history. Anyone who can open that folder can read them and the full workbook snapshots saved there, including cells you later deleted from the workbook. Names and email addresses of people who saved versions, requested reviews or commented are included.
Each audit record is chained to the one before it with SHA-256 and signed with a key that only SheetTrack's service holds, so records edited or forged outside SheetTrack are detected and SheetTrack shows a warning. This is tamper-evident, not tamper-proof: someone who can edit the folder can still delete it or put back an older copy. Roles inside SheetTrack are workflow settings, not security controls. Do not rely on this log as your only compliance control.
7. Service providers and international transfers
- Google Cloud hosts the API (United States, us-east1) and keeps its request logs (in Cloud Logging's global location, which may be any of Google's regions).
- Cloudflare hosts the website and the task pane files, stores launch sign-up addresses, and runs the sign-up form's bot check (Turnstile).
- GoDaddy (GoDaddy.com, LLC, United States) hosts our email (support@, privacy@, security@ and business@sheettrack.com), so it holds what you write to us.
- Microsoft provides sign-in and your Microsoft 365 storage under your own agreement with Microsoft. See the Microsoft Privacy Statement.
See also the privacy notices of Google Cloud, Cloudflare and GoDaddy. The current list of providers, with what each one holds, is on our security page. We are based in India and the API runs in the United States, so your data may be processed outside your country. For personal data from the EU, the UK or Switzerland, we rely on our providers' data processing terms, which include the European Commission's standard contractual clauses and the UK addendum. Organizations that need a data processing agreement with SheetTrack itself can ask for one at privacy@sheettrack.com once counsel has reviewed it (see our security page).
8. How long we keep information
We keep nothing about your workbooks. Identity and location caches expire within 10 minutes. API request logs are deleted after 30 days, launch sign-up addresses after the launch email is sent, and support email after 24 months. Everything else lives in your Microsoft 365 storage or on your device until you delete it. The one exception is automatic versions: SheetTrack deletes older ones itself as they age (it keeps all of a day's that day, then one an hour for 7 days and one a day after that), on your device, in your OneDrive backup and, for history shared with your team, in the .sheettrack folder, where their snapshot files go to the recycle bin. Versions anyone saves themselves are kept.
9. Your choices and rights
Because there is no account database, you control your data directly:
- Delete cloud history: delete the
.sheettrackfolder next to your workbook. Microsoft's recycle bin rules apply. - Delete backups: delete SheetTrack's app folder in your OneDrive.
- Delete on-device history: sign out, then clear the add-in's storage (instructions at sheettrack.com/support). History that was not backed up is lost.
- Revoke access: for work or school accounts, open My Apps, choose Manage your application for SheetTrack, then Revoke Permissions. For personal accounts, open account.live.com/consent/Manage and choose Remove these permissions. Permissions your administrator granted for the whole organization can only be revoked by an administrator.
- Anything else: email privacy@sheettrack.com, for example to remove a launch sign-up address or to ask what we hold about you in support email or logs.
Depending on where you live, you may have rights to access, correct, delete, port or restrict the use of personal data, and to object or complain. These include rights under the EU and UK GDPR, US state privacy laws such as the California CCPA/CPRA, and India's Digital Personal Data Protection Act, 2023, as it comes into force. We do not sell or share personal information as those laws define them. We will answer requests within 30 days, and may need to verify your identity first. You may also complain to your local data-protection authority. We cannot see or delete data that is only in your own Microsoft 365 storage or on your device.
10. Children
SheetTrack is a workplace tool and is not directed to anyone under 18. Please do not use it if you are under 18.
11. Security
All traffic uses HTTPS. The API stores no workbook data, runs without a database or persistent disk, and limits request sizes and rates. No system is perfectly secure. If a breach affects your personal data, we will notify you and regulators as the law requires. How the service is protected, and how to report a security problem (security@sheettrack.com), is on our security page.
12. Changes to this policy
We will post changes here with a new effective date. For material changes we will also post a notice on sheettrack.com at least 14 days before they take effect.
13. Contact and grievances
SheetTrack, New Delhi, India. Email: privacy@sheettrack.com. Grievance officer: Lakshay Goel, Proprietor, at the same address. We aim to acknowledge complaints within 7 days.