Privacy Policy

The desktop application is local-first. Your spreadsheets stay on your device. There is no telemetry and nothing is sent to us.

VisiGrid Cloud stores your spreadsheets on our servers, because that is what it is for: opening a sheet in a browser, or letting an AI assistant work on it while your laptop is closed. If you create a VisiGrid account, the sheets you put in it are held by us and described in detail below.

Using one does not opt you into the other. The desktop app does not upload your files to a VisiGrid account unless you explicitly publish them.

• The VisiGrid desktop application
• VisiGrid Cloud — the web app at app.visigrid.app, your account, and the API
• Connectors that let an AI assistant reach your cloud spreadsheets
• The VisiGrid website (visigrid.app)
• Pro license purchases

• No telemetry
• No crash reports
• No usage analytics
• No network requests (except for optional update checks)

This changes only if you sign in to a VisiGrid account from the app and publish a sheet to it. That is an explicit action, and what happens to the data then is covered under VisiGrid Cloud below.

• Your spreadsheets. The file itself — cells, formulas, formatting — is stored in Cloudflare R2 object storage. Details about it (name, folders, tab structure, revision number, sharing settings) are stored in our database.
• Your account. Email address, and a hash of your password — never the password itself.
• API keys and connectors. Only a cryptographic hash of each key, never the key itself, along with its name, when it was last used, and the IP address it was last used from.

Our application servers are hosted by Hetzner in Hillsboro, Oregon, United States. Spreadsheet files are stored in Cloudflare R2. If you are outside the United States, using VisiGrid Cloud means your data is transferred to and processed there.

Your spreadsheets are private to your account unless you share them. We do not read them, and we do not use their contents to train models or improve our own products. Staff access is limited to what is needed to operate the service or to investigate a problem you have reported.

The web app measures how it is used — pages opened, features used, whether something failed — through PostHog, so we can tell which parts work and which are broken. This records actions, not content: the contents of your spreadsheets are never sent to it, and neither are cell values, formulas, or file names.

If you are signed in, these events are associated with your account so we can support you and understand how real workflows run. If you are using the anonymous editor at /try without an account, they are not tied to any identity.

This applies only to VisiGrid Cloud. The desktop application still reports nothing at all.

Deleting a spreadsheet removes its stored file as well as its record. Deleting your account — from Settings, confirmed by email — removes your account and its contents. Backups are retained for a short period and age out on their own schedule, so deletion is not always instantaneous everywhere.

• The assistant sees what it asks for. When it reads a range, those cell values, formulas and formatting are sent to the company operating that assistant, and are then subject to their privacy policy, not ours.
• Only the cells requested. Reads return populated cells in the requested range, not your whole workbook.
• Only your own spreadsheets. A connection is scoped to the account that authorised it.
• We do not send your data to any AI provider on our own initiative. Data moves only in response to a request the assistant makes on your behalf.
• We do not train models on your data, and we do not permit our providers to do so with data we send them.

You can revoke a connector at any time by deleting its key in Settings → API keys. Access stops immediately.

We use Cloudflare for hosting, which provides privacy-friendly analytics. This includes aggregated data like page views and visitor counts. No cookies are used, and no personal data is collected.

If you subscribe to our newsletter, we collect your email address. We use this only to send release announcements and product updates. You can unsubscribe at any time.

• Payment information is collected and processed by Stripe
• We receive your email address and purchase details
• We do not store credit card numbers

• Cloudflare — hosting for our websites, R2 object storage for cloud spreadsheets, and Turnstile bot protection on sign-in (which receives your IP address).
• Hetzner — the servers running our application and database, in Oregon, United States.
• Amazon Web Services (SES) — sending account email, such as sign-in links and verification messages.
• PostHog — product analytics for the web app only, recording which features are used and what fails. It never receives the contents of your spreadsheets, and it is not used by the desktop application or this website.
• Stripe — payment processing. We never see or store your card number.
• Google — only when you ask us to import a Google Sheets link. We fetch that one document; we do not connect to your Google account or request access to your Drive.

• Cloud spreadsheets: Kept until you delete them or close your account
• Account records: Kept while your account is open
• API key records: Kept until you delete the key
• Newsletter emails: Retained until you unsubscribe
• Purchase records: Retained for accounting and support purposes, and for as long as tax law requires
• Desktop application data: We don't have it — it's on your device

• Delete any cloud spreadsheet, which removes its stored file
• Delete your account and its contents from Settings
• Download your spreadsheets at any time, in standard formats
• Revoke a connector or API key immediately, from Settings → API keys
• Unsubscribe from the newsletter at any time
• Request deletion of your purchase records (email us)
• Request a copy of any data we have about you

Depending on where you live, you may have additional rights over your personal data — to correct it, object to how it is used, or complain to a regulator. Ask and we will help you exercise them.