Legal

Privacy Policy

Last updated: July 23, 2026 · BuffSheets Inc.

BuffSheets (“we”, “us”, “our”) provides a Windows desktop app that works with Excel workbooks using AI. This policy explains what data we handle, when something leaves your computer, and the choices you have.

1. The two modes — and what leaves your machine

  • On-device models (for example via Ollama): Your workbook data, prompts, and results stay on your computer. We do not receive or store that content for model inference.
  • Hosted (cloud) models: When you choose a hosted model, the selected workbook context (cells/sheets relevant to your request), your prompt, and the AI’s proposed plan/actions are sent over encrypted connections to BuffSheets infrastructure and then to the model provider you selected (for example OpenAI, Anthropic, Google, or xAI). That provider processes the request under its own terms and policies.

The product shows a disclosure before your first hosted-model use. You can switch between on-device and hosted models in the app.

2. Data we collect

Account

If you create an account, we process email and authentication identifiers through Clerk (our authentication provider).

Billing

Payments and subscriptions are processed by Stripe. We store plan tier, subscription status, and usage balances needed to operate the product. We do not store full card numbers.

Usage metering

For hosted models we record per-request usage metrics (for example token counts and computed cost) so we can enforce plan allowances and show usage in your account.

Request logs (product improvement)

When you use hosted models, we may log the prompt, workbook context sent for the request, system/skill instructions used, the resulting action plan, and accept/reject feedback. This logging is on by default and helps us improve BuffSheets. You can opt out at any time in your account privacy/settings.

Website analytics

Our marketing site (buffsheets.com) may use privacy-oriented analytics such as Vercel Web Analytics / Speed Insights to understand traffic and performance. These tools are designed to minimize personal data.

Desktop app diagnostics

The local app may write operational logs on your machine (for example server logs under the install directory) to help diagnose crashes. Optional error monitoring (if enabled for a build) is configured not to send workbook contents.

3. Your choices

  • Opt out of training/request logging in account settings at app.buffsheets.com. When off, we retain only the minimal account, billing, and usage records needed to run the service.
  • Use on-device models to keep workbook content local.
  • Access, export, or delete: email privacy@buffsheets.com from your account email. We aim to respond to verified requests within 30 days.

4. Retention

  • Billing and usage records: retained as needed for operations, tax, and accounting (typically up to 7 years where required).
  • Request logs: retained until you delete them, opt out (then purged on a rolling basis), or we no longer need them for product improvement — generally purged within 30 days after opt-out or a verified deletion request for those logs.
  • Account profile: retained while your account is active; residual records may remain where we must keep them for legal or fraud-prevention reasons.

5. Sharing

We share data only with processors needed to run BuffSheets, for example:

  • The model provider you select (hosted mode only)
  • Clerk (authentication)
  • Stripe (payments)
  • Our hosting and database providers (for example Vercel and Neon)

We do not sell your personal information. Processors are engaged to provide services to us and are expected to protect data appropriately.

6. Security

  • Encrypted transport (HTTPS/TLS) for web and hosted API traffic.
  • Provider API keys stay on BuffSheets servers — not shipped inside your desktop installer for public use.
  • The local engine binds to loopback (127.0.0.1) on your machine.
  • Desktop updates download from BuffSheets hosts and verify Authenticode signatures before silent install.

No method of transmission or storage is 100% secure. Please use a strong password with your identity provider and keep Windows and Excel updated.

7. Legal bases & regions

If you are in the EEA/UK (GDPR) or California (CCPA/CPRA), you may have rights to access, correct, delete, and (under CCPA) opt out of “sale” or “sharing” of personal information. We do not sell personal information. To exercise rights, contact privacy@buffsheets.com.

Where GDPR applies, we process data to perform our contract with you (provide the service), for legitimate interests (security, product improvement when logging is on), and where required by law.

8. Children

BuffSheets is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

9. Changes & contact

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. Material changes may also be communicated in-product or by email when appropriate.

Questions about privacy: privacy@buffsheets.com. Product support: buffsheets.com/support or support@buffsheets.com.

Related: Terms of Service.