Last updated 13 November 2026

Privacy Policy

Actionable Sheets turns spreadsheets into business apps. This policy explains what personal data we hold when you use the web app, the desktop, Linux, Android and iOS apps and the APIs, why, where it is kept and what you can do about it. Actionable Sheets is in beta testing: features may change, and we will update this page when they do.

Who is responsible

Actionable Sheets ("we") is the controller of the personal data described here. For anything about your data, write to privacy@actionablesheets.com.

What we hold

Your account: your email address, the name shown to your colleagues, your account type (personal or business), time zone, language and avatar colour.
How you sign in: we never hold a password. We keep hashes of sign-in codes and links for the minutes they are valid, the public keys of your passkeys, and one record per signed-in browser or app (when it signed in, how, its IP address and what it said about itself, such as "Chrome on macOS"), so you can review and sign out devices on the Security page.
What you and your organizations put in: tables, records, views, apps, forms, automations, comments, files you link and conversations with the Infinite Brain. Organizations decide what goes in; for that content the organization is the controller and we process it on its behalf.
Security and audit records: an organization's audit log notes who did what (by account id), for that organization's security.
Email we send you: sign-in codes and links, invitations and security notices such as a sign-in from a new device. We do not send marketing email.

Why we use it

To provide the service you asked for: your account, sign-in, your organizations' data and the apps (performance of a contract).
To keep accounts and data safe: rate limits, lockouts after wrong codes, new-device notices and audit records (our legitimate interest in security, and your organizations').
To meet legal obligations when they apply.

We do not sell personal data, show advertising or build profiles for marketing. There are no analytics or tracking scripts on our pages.

Where it is kept

Our servers are in the European Union: Hetzner's data centre in Helsinki, Finland. Data in transit is encrypted (HTTPS), and connection credentials for integrations are encrypted at rest.

Who else processes it

Hetzner Online (Germany) hosts our servers in Helsinki, Finland.
Our email provider delivers sign-in codes, invitations and notices; it sees the recipient address and the message.
If your organization switches on an AI provider for the Infinite Brain, the text of the requests it makes goes to that provider. Without one, the Brain runs on our own servers.
If your organization links Actionable Docs or another integration, data moves between them as your organization set up, and your own permissions apply on both sides.

How long we keep it

Sign-in codes: 10 minutes; sign-in links: 15 minutes; app hand-offs: 2 minutes. Expired ones are deleted within a day.
Signed-in sessions: until you sign out or after 14 days.
Your account and its data: until you delete your account or your organization deletes its data.

Your rights

Under the GDPR you may ask for a copy of your data, have it corrected, have it erased, restrict or object to its use, and take it with you. You can do most of this yourself: change your profile on the Account page, export any table as CSV or through the API, and delete your account from the Account page (or in the apps: Account → Delete my account). Deleting your account removes your personal data, your personal space and any organization only you belong to; organizations other people use keep their own data. For anything else write to privacy@actionablesheets.com; we answer within one month.

You can also complain to a data protection authority, for example the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

Children

Actionable Sheets is not meant for children under 16, and we do not knowingly hold their data.

Changes

When this policy changes we update the date at the top, and we tell you in the app or by email when a change matters to you.

Questions? Write to privacy@actionablesheets.com.