Privacy Policy

1. Scope and Controller

This Privacy Policy applies to the Company Sheet website, applications, and related services (the “Service”). “Personal information” (or “personal data”) means information that identifies or can reasonably be linked to an individual.

The operator of Company Sheet is the controller of personal information collected through the Service. Contact: [email protected].

2. Information We Collect

2.1 Information you provide

• Account and profile data — name, email address, profile image URL, and identifiers supplied by your sign-in provider (e.g., Google OAuth).
• User-generated content — watchlists, saved sheets/filters, preferences, and any feedback or support messages you send.
• Communications — emails or messages you send us regarding support, privacy, or legal requests.

2.2 Information collected automatically

• Device and log data — IP address, browser type, operating system, referring URLs, pages viewed, timestamps, and approximate location derived from IP.
• Usage data — features used (e.g., company pages viewed, search queries, export actions), performance metrics, and error logs.
• Cookies and similar technologies — session and preference cookies (theme, auth session), and any analytics cookies we enable. See Section 6.

2.3 Information from third parties

• Authentication providers (e.g., Google) — basic profile and email needed to create and secure your session.
• Infrastructure providers — hosting, database, CDN, and email delivery may process operational metadata.

2.4 What we generally do not collect

We do not intentionally collect government ID numbers, payment card data (unless a paid plan and processor is introduced and disclosed), precise GPS location, or special-category data. Do not submit sensitive personal data through free-text fields.

2.5 Financial and market data (not personal)

Company fundamentals and filings data are about public companies, not about you. Market price charts embedded via TradingView are loaded from TradingView’s systems; we do not store TradingView market-data time series as our own database product. TradingView may collect technical data as described in its privacy policy when widgets load.

3. How We Use Information

We use personal information to:

• Provide, operate, secure, and maintain the Service;
• Authenticate users and prevent fraud, abuse, and unauthorized access;
• Save and sync watchlists, sheets, and preferences;
• Respond to support and legal requests;
• Monitor performance, debug errors, and improve features and content quality;
• Comply with law, enforce our Terms, and protect rights, safety, and property;
• Communicate service-related notices (security, material policy changes). Marketing emails, if any, will include an unsubscribe option where required.

Legal bases (EEA/UK where applicable): performance of a contract (providing the Service you request); legitimate interests (security, improvement, fraud prevention) balanced against your rights; consent (where required, e.g., certain cookies); and legal obligation.

4. How We Share Information

We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws, unless we update this Policy and provide required notices/opt-outs.

We may share information with:

• Service providers / processors who assist with hosting, databases, authentication, email, analytics, or security, under contractual confidentiality and use limits.
• Third-party features you invoke — e.g., Google sign-in; TradingView widgets (which may receive page URL, symbol, IP, and widget configuration as described by TradingView).
• Legal and safety — if required by law, subpoena, or government request, or to protect rights, safety, and integrity of the Service or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality.
• With your direction — when you choose to export or share content.

5. International Transfers

We may process and store information in the United States and other countries where we or our providers operate. Those countries may have different data- protection laws than your home country. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

6. Cookies and Similar Technologies

We use cookies and local storage for:

• Essential / security — session authentication, CSRF protection, load balancing.
• Preferences — theme (light/dark), UI settings.
• Performance (if enabled) — understanding feature usage and errors.

You can control cookies through browser settings. Blocking essential cookies may break sign-in or core features. Third-party embeds (TradingView, Google) may set their own cookies or use local storage subject to their policies.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Server logs are typically retained for a limited operational period unless needed longer for security or legal reasons. You may request deletion as described below; residual backups may persist for a limited time before rotation.

8. Security

We implement reasonable technical and organizational measures designed to protect personal information (including HTTPS/TLS in transit and access controls). No method of transmission or storage is 100% secure; we cannot guarantee absolute security. Please use strong account hygiene and notify us of suspected unauthorized access.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal information; to object to certain processing; and to withdraw consent where processing is consent-based. California and other U.S. state residents may have additional rights regarding know, delete, correct, and opt-out of certain sharing.

To exercise rights, email [email protected]. We may need to verify your identity. You may also appeal a denial where required by law. You can delete or disconnect third-party sign-in via your provider’s settings in addition to requesting account deletion from us.

If you are in the EEA/UK, you may lodge a complaint with your local supervisory authority.

10. Children’s Privacy

The Service is not directed to children under 16 (or 13 where applicable). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

11. Do Not Track

Some browsers send “Do Not Track” signals. There is no consistent industry standard for responding; we do not currently respond to DNT signals beyond what is described in this Policy.

12. Third-Party Policies

We encourage you to review the privacy practices of:

• Google / Google OAuth — policies.google.com/privacy
• TradingView — tradingview.com/privacy-policy
• SEC.gov (public data) — sec.gov/privacy

13. Changes to This Policy

We may update this Policy periodically. The “Last Updated” date will reflect changes. Material changes may be highlighted in the Service or via email where appropriate. Continued use after the effective date means you acknowledge the updated Policy.

14. Contact

Privacy questions or requests: [email protected]. Legal: [email protected].

Related documents: Terms of Service · Disclaimer.