Privacy Policy

Whatsheet — WhatsApp to Google Sheets

Last updated: August 2026

This policy explains what data Whatsheet collects when you connect a WhatsApp number and a Google account, why, and how it's handled.

1. What we collect

Category	What it includes
Account data	Name, email address, and password (stored as a salted hash, never in plain text)
WhatsApp connection data	Your WhatsApp number's session credentials, needed to keep your number linked (stored encrypted; see Security below)
Message content	The text of WhatsApp messages sent to your connected number, processed to extract the fields you've configured
Google account access	An OAuth token scoped only to the specific spreadsheet(s) you create or explicitly select — never your whole Google Drive
Extraction rules and (if enabled) AI prompts	The keyword rules or natural-language instructions you configure for what to extract from messages

2. How we use it

To connect your WhatsApp number and keep it linked
To extract the fields you've configured from each message (via keyword matching, or an AI model if you enable that tier) and write them to your chosen Google Sheet
To show you a log of recent extractions and connection health

We do not sell your data or your contacts' message data to third parties.

3. Who we share it with

Data is shared only with the services required to provide functionality you've enabled:

Google — under the Google Sheets API's spreadsheets permission scope. This scope technically permits access to any spreadsheet in your Google account, but Whatsheet only ever reads or writes the one spreadsheet you set up through the add-on — it never browses, lists, or accesses any other spreadsheet or Drive file
AI model providers (Anthropic, OpenAI) — only if you enable the AI extraction tier; the relevant message content is sent to generate the extracted fields

5. Data security

WhatsApp session credentials and Google OAuth tokens are encrypted at rest (AES-256-GCM). Passwords are hashed, never stored in plain text. All traffic to and from the platform is served over HTTPS.

6. Data retention and deletion

We retain your data for as long as your account is active. You can disconnect your WhatsApp number or Google account at any time from within the app, which stops further processing. To request full deletion of your account and all associated data, email [email protected] with the subject "Data Deletion Request" — we process verified requests within 30 days.

7. Your rights

You can request access to, correction of, or deletion of your data by contacting us using the details below.

8. Children's privacy

Whatsheet is a business tool and is not directed at or knowingly used by children.

9. Changes to this policy

We may update this policy as the product changes. Material changes will be reflected by updating the date at the top of this page.

10. Contact

Questions about this policy or your data: [email protected]