Privacy

Sheetlot processes brokerage CSV exports on our servers (not only in your browser) to build a normalized ledger and close pack. Avoid uploading account numbers or other personal data you do not need for the close.

What we store. Waitlist emails; Stripe customer and subscription identifiers (not card numbers); Pro/one-close entitlement cookies; optional workspace priors and column maps; CPA share packs (default 90 days); client intake requests and uploaded CSVs (default 30 days). Expired or revoked intake/share objects are purged on a daily schedule. You can request deletion of your stored intake and share packs while signed in (delete-my-data).

Sub-processors. Vercel (hosting + Blob storage), Stripe (payments), Resend (transactional email when configured), Upstash (rate limiting when configured), PostHog (product analytics when configured; autocapture and session recording are off), and Sentry (error reporting when configured). CSV contents, request bodies, and email addresses are not sent to analytics or error reporting. We do not sell rankings or your CSV contents.

Sheetlot is not a broker, tax preparer, or advisory firm. Outputs are informational aids only. Contact support@sheetlot.com for privacy or deletion requests.