Privacy Policy

This policy explains how [Your legal business name] ("OpenSheet", "we", "us") handles personal information when you use opensheet.live and the OpenSheet app (the "Service"), and how we handle the business contact information the Service finds. Questions? Email [support@opensheet.live].

1. Information about you, our customer

• Account details: your email address and password (stored hashed), or your Google account email if you sign in with Google.
• Billing details: your plan, purchases and billing status. Card details go straight to our payment provider; we never see or store your full card number.
• What you do in the app: your searches, sheets, city lists, Autopilot runs, verification jobs, and usage counts (for example, searches used this month).
• What you add to your leads: lead stages, notes, follow-up dates and your message templates. Notes and templates are yours; we store them only to show them back to you. When you use a template, it opens your own email or WhatsApp; OpenSheet doesn't send the message or see it.
• Technical data: IP address, browser type, device and log data our hosting providers record to keep the Service running and secure.
• Abuse prevention: to stop the free plan being misused, we keep a short one-way code made from your IP address (not the address itself) for two days, and we may check that sign-ups come from a real person using Cloudflare Turnstile.

2. Business contact information the Service finds

When you search, OpenSheet collects information that businesses publish about themselves: business name, address, phone number, website, ratings, the email addresses, contact names and WhatsApp numbers listed on their websites, and, in some countries, whether the company is still registered and its directors' names from official public company registers. We also note what a business's own homepage shows about its website (for example whether it uses a secure connection, which website builder it's made with, and its social media pages). Some of this can relate to identifiable people (for example, an owner's work email or a director's name). We collect it only from publicly available business sources, for business-to-business use, and store it in the sheets of the customer who searched for it. You, the customer, decide how to use it and are responsible for doing so lawfully (see our Terms of Service).

If you're a business owner or employee and want your details removed, email [support@opensheet.live] with the details you want removed. We'll delete them from our systems where we can and add them to a suppression list so they aren't collected again.

3. How we use information

• To provide the Service: run searches, save and verify leads, run Autopilot, and export your data.
• To manage your account, billing, plan limits and fraud prevention.
• To send you service emails (sign-up confirmation, password resets, billing notices, important changes).
• To keep the Service secure, debug problems and improve features.
• To meet legal obligations and enforce our Terms.

We don't sell your personal information, and we don't use the data you collect to market our own products to those businesses.

4. Who we share it with

We use trusted service providers who process data on our behalf, under contract:

• Hosting, database and authentication (Lovable Cloud, built on Supabase).
• Payments (Stripe).
• Sign-in with Google (Google), if you choose it.
• Transactional email delivery.
• Search and mapping data providers (such as Google and OpenStreetMap), which receive your search terms.
• Bot protection on sign-up (Cloudflare Turnstile).
• Official company registers (such as Companies House in the UK), which receive a business's name and postcode when we check whether it's still trading.
• A website-loading service (Firecrawl), if enabled, which receives the address of a business website we need to read.

We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or sale of the business (with notice to you).

5. Cookies and local storage

We use your browser's storage to keep you signed in and to remember small preferences (such as in-progress searches, your preferred email app and which getting-started tips you've closed). We don't use advertising cookies or sell browsing data.

6. How long we keep it

We keep your account data while your account is open. When you delete your account, we delete your account data and sheets within 30 days, except records we must keep for tax, accounting or legal reasons (such as payment records). Backups are overwritten on a regular schedule.

7. Security

Data is encrypted in transit, access is limited to people who need it, and each customer's data is isolated from every other customer's at the database level. No system is perfectly secure, so please use a strong, unique password.

8. Your rights

Depending on where you live (for example under PIPEDA in Canada, GDPR in the EU/UK, or the CCPA in California), you may have the right to access, correct, export or delete your personal information, to object to or restrict some uses, and to withdraw consent. Email [support@opensheet.live] and we'll respond within 30 days. You can also complain to your local privacy regulator.

9. International transfers

Our providers may store and process data in Canada, the United States and other countries. Where required, we use appropriate safeguards for these transfers.

10. Children

The Service is for businesses and isn't directed at anyone under 18. We don't knowingly collect children's information.

11. Changes

We'll post any changes here and update the date above. If a change is significant, we'll tell you by email or in the app before it takes effect.

12. Contact

[Your legal business name] · [Your business mailing address] · [support@opensheet.live]

Town names used to check search locations come from GeoNames, under the CC BY 4.0 licence. The check runs in your browser; your searches aren't sent to GeoNames.