Privacy Policy

Whatsheet — WhatsApp to Google Sheets or Microsoft Excel

Last updated: August 2026

This policy explains what data Whatsheet collects when you connect a WhatsApp number and a Google account or a Microsoft account, why, and how it's handled. Whatsheet is available as a Google Sheets add-on and, separately, as a Microsoft Excel add-in — this policy covers both; which sections apply to you depends on which one you use.

1. What we collect

Category	What it includes
Account data	Name, email address, and password (stored as a salted hash, never in plain text)
WhatsApp connection data	Your WhatsApp number's session credentials, needed to keep your number linked (stored encrypted; see Security below)
Message content	Every WhatsApp message sent to your connected number is checked in real time against the extraction rules you've configured. Only messages that actually match are retained (a short preview alongside the extracted fields, for your own audit trail) — messages that don't match anything are not stored. If you enable AI extraction, a record of that call (cost and token usage) is kept regardless of match, but without the message text unless it matched.
Google account access (Google Sheets add-on only)	An OAuth token scoped only to the specific spreadsheet(s) you create or explicitly select — never your whole Google Drive
Microsoft account access (Excel add-in only)	An OAuth token scoped only to files Whatsheet creates or the specific workbook you're actively using — never your whole OneDrive or SharePoint
Extraction rules and (if enabled) AI prompts	The keyword rules or natural-language instructions you configure for what to extract from messages

2. How we use it

To connect your WhatsApp number and keep it linked
To extract the fields you've configured from each message (via keyword matching, or an AI model if you enable that tier) and write them to your chosen Google Sheet or Excel workbook
To show you a log of recent extractions and connection health

We do not sell your data or your contacts' message data to third parties.

3. Who we share it with

Data is shared only with the services required to provide functionality you've enabled:

Google (Google Sheets add-on only) — under the Google Sheets API's spreadsheets permission scope. This scope technically permits access to any spreadsheet in your Google account, but Whatsheet only ever reads or writes the one spreadsheet you set up through the add-on — it never browses, lists, or accesses any other spreadsheet or Drive file
Microsoft (Excel add-in only) — under the Microsoft Graph Files.ReadWrite permission scope, requested with the minimum other scopes needed to sign you in (openid, email, offline_access). Whatsheet only ever reads or writes the one workbook you set up through the add-in — it never browses or lists any other OneDrive or SharePoint file
AI model providers (Anthropic, OpenAI) — only if you enable the AI extraction tier; the relevant message content is sent to generate the extracted fields

4. AI/ML use and platform API data (Limited Use)

Whatsheet's optional AI extraction tier sends the text of a WhatsApp message, and the column names you've configured, to a third-party AI model provider (Anthropic or OpenAI) to generate the extracted field values — which are then written to your Google Sheet or Excel workbook via the Google Sheets API or Microsoft Graph, whichever you're using.

Whatsheet's use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

Data obtained through Google Workspace APIs is used only to provide or improve the specific, user-facing features of Whatsheet that you've enabled (writing extracted rows into the Google Sheet you've set up) — never for advertising, and never sold, rented, or transferred to third parties for their own purposes.
No human at Whatsheet reads this data except with your explicit consent, to investigate a security incident, to comply with applicable law, or where the data has been aggregated and anonymized.
Whatsheet does not use Google Workspace data, or any other user data, to train or improve AI/ML models — data sent to our AI extraction provider is used solely to generate the response for that specific request, nothing more.

(Excel add-in only) The same commitments apply identically to data obtained through Microsoft Graph:

Data obtained through Microsoft Graph is used only to provide the specific, user-facing features of Whatsheet you've enabled (writing extracted rows into the Excel workbook you've set up) — never for advertising, and never sold, rented, or transferred to third parties for their own purposes.
No human at Whatsheet reads this data except with your explicit consent, to investigate a security incident, to comply with applicable law, or where the data has been aggregated and anonymized.
Whatsheet does not use Microsoft Graph data, or any other user data, to train or improve AI/ML models.

5. Data security

WhatsApp session credentials and Google/Microsoft OAuth tokens are encrypted at rest (AES-256-GCM). Passwords are hashed, never stored in plain text. All traffic to and from the platform is served over HTTPS.

6. Data retention and deletion

We retain your data for as long as your account is active. You can disconnect your WhatsApp number or your Google/Microsoft account at any time from within the app, which stops further processing. To request full deletion of your account and all associated data, email [email protected] with the subject "Data Deletion Request" — we process verified requests within 30 days.

7. Your rights

You can request access to, correction of, or deletion of your data by contacting us using the details below.

8. Children's privacy

Whatsheet is a business tool and is not directed at or knowingly used by children.

9. Changes to this policy

We may update this policy as the product changes. Material changes will be reflected by updating the date at the top of this page.

10. Contact

Questions about this policy or your data: [email protected]