Privacy Policy

1. Introduction

This Privacy Policy explains how SheetBridge Google Workspace Connector (the "Service" or "SheetBridge") collects, uses, and protects information when you use our add-on for Google Sheets to load data into AWS Redshift.

2. Information We Collect

2.1 Information You Provide

When you use SheetBridge, you may provide:

• Google Account Information: Your email address (authenticated via Google Workspace OpenID Connect)
• Connection Configuration: AWS account details (region, cluster/workgroup name, database name, schema name) for Mode A; database credentials (host, port, user, password) for Mode B
• Sheet Data: The column headers and data from Google Sheets that you choose to load into Redshift
• Configuration Preferences: Column type mappings, table names, and job history

2.2 Information We Automatically Collect

• Access Logs: Request timestamps, user identity (verified email), API endpoints called
• Job Metadata: Job ID, creation/completion timestamps, source S3 key, target table name
• Error Logs: Failed job details, including error messages and row/column information (see Data Retention)

2.3 Information We Do NOT Collect

• Sheet Content (except during push): SheetBridge does not cache, archive, or retain your sheet data beyond the time needed to transfer it to Redshift
• AWS Credentials (Mode A): We do not store AWS access keys or secret keys; authentication uses STS role assumption
• Redshift Passwords (Mode B): Passwords are encrypted at rest in a dedicated KMS key and decrypted only in Lambda memory (see Data Security below)
• Long-Term Audit Logs: We log API requests for 30 days; logs are then deleted

3. How We Use Your Information

SheetBridge uses your information to:

1. Authenticate You: Verify your identity via Google Workspace ID token
2. Execute Data Transfers: Connect to your Redshift cluster and load your sheet data
3. Provide Job Tracking: Show you the status of each push (running, completed, failed)
4. Troubleshoot Failures: Capture error details so you can fix schema or permission issues
5. Monitor System Health: Track error rates and performance to identify problems
6. Comply with Law: Respond to legal requests or enforce our Terms of Service

We do not use your data for:

• Personalization or marketing
• Secondary analytics or resale
• Training machine learning models
• Sharing with third parties (except as required by law)

4. Data Security

4.1 Encryption in Transit

All communication between your browser, Google Sheets, SheetBridge, and AWS uses HTTPS/TLS 1.2 or higher. Data is encrypted in transit.

4.2 Encryption at Rest (Mode B)

If you use Mode B (direct database credentials), your Redshift password is encrypted at rest using a dedicated AWS KMS key. Encryption context binds the credentials to your user email, preventing unauthorized decryption.

4.3 Memory-Only Decryption

Credentials are decrypted only in Lambda memory and never persisted in plaintext. No credentials are logged or returned to your browser.

4.4 Temporary S3 Credentials

Every push generates temporary, scoped credentials to access staging data in our S3 bucket:

• TTL: 15 minutes (then automatically revoked)
• Scope: Read-only; restricted to your specific job's S3 prefix
• Visibility: Credentials appear in your Redshift query history (see Important Disclosures)

4.5 Credential Redaction

All logs and error details are processed through a credential-redaction filter that removes:

• AWS access keys, secret keys, session tokens
• Database passwords and connection strings
• Any CREDENTIALS clause content in SQL statements

Redacted value: ***REDACTED***

5. Data Retention

Note: Your sheet data that successfully loads into Redshift is stored in your Redshift cluster and retained according to your cluster's retention policy. We do not delete or archive data in your Redshift.

6. Important Disclosures

6.1 DISCLOSURE: Temporary Credentials in Query History (Mode B)

When you push data via Mode B (direct credentials), temporary S3 credentials appear in your Redshift query history.

The COPY statement executed by SheetBridge includes inline credentials:

COPY public.data FROM 's3://...' CREDENTIALS 'aws_access_key_id=ASIA...;...'

Your Redshift cluster admins can view this statement in the STL_QUERYTEXT system table.

Security Properties:

• Credentials are temporary (15-minute TTL)
• Credentials are read-only (s3:GetObject only)
• Credentials are scoped to your specific job prefix in S3
• Credentials expire before staging data is cleaned up (24 hours)

Recommendation: Use Mode A (cross-account IAM role) if query-history visibility is a concern. Mode A credentials belong to your AWS account, not ours.

6.2 DISCLOSURE: Staging Data Ownership

SheetBridge creates temporary staging tables in your Redshift cluster during each push:

• Naming: {target_table}_staging_{job_id_short}
• Ownership: Tables belong to your Redshift cluster; you have full ownership
• Cleanup: Dropped automatically on success; may remain on failure
• Access: Only you and your Redshift admins can access these tables

If a push fails and the staging table is not dropped:

• You can drop it manually: DROP TABLE schema.{target_table}_staging_...;
• It poses no security risk (your cluster, your data)
• SheetBridge's job record (persisted for 30 days) includes details to help you troubleshoot

6.3 DISCLOSURE: Data Handling & No Long-Term Retention

SheetBridge does not retain your sheet data beyond the push operation:

• During push: Data flows from Google Sheets → SheetBridge staging bucket (S3) → Your Redshift cluster
• After push: If the push succeeds, your data is in Redshift (you control retention). Staging data in S3 is deleted after 24 hours.
• If push fails: Your sheet data remains in S3 for 24 hours; failure details are captured in the job record (30-day retention)
• No archives: SheetBridge does not maintain historical backups of your sheet data

The only data SheetBridge retains:

• Job metadata: {job_id, status, start time, end time, error_detail} — 30 days
• User configuration: {user_email, connection_mode, cluster_name, schema, ...} — until you disconnect
• Access logs: Request timestamps, user identity, routes called — 30 days

7. Your Rights & Choices

7.1 Access Your Information

You can access your configuration and job history through the SheetBridge add-on sidebar or via the API at /v1/tenant-config and /v1/status/{job_id}.

7.2 Delete Your Information

You can delete your account and all associated data by:

1. Opening the SheetBridge add-on
2. Clicking Settings → Disconnect
3. Confirming the deletion

This will:

• Delete your tenant configuration (Mode A role, Mode B credentials, cluster settings)
• Delete your job history (but job records older than 30 days are already deleted)
• Reset your external ID (Mode A) — if you reconnect later, you'll need a new external ID

7.3 Opt Out

You can stop using SheetBridge at any time by:

• Removing the add-on from your Google Workspace
• Revoking SheetBridge's access in Google Account settings (Manage your Google Account → Security → Third-party apps & services)

7.4 Correct Your Information

You can update your connection configuration at any time by:

1. Clicking Settings → Edit Connection
2. Updating cluster details, schema, or table names
3. Clicking Save

For Mode B, you can update your password by clicking Edit Connection and re-entering your credentials.

8. Sharing & Disclosure

8.1 Third-Party Services

SheetBridge integrates with:

• Google Workspace: Your email and access tokens are used for identity verification
• AWS Services: Your Redshift cluster, S3, DynamoDB, KMS, and IAM are accessed on your behalf
• AWS CloudWatch: Logs are sent to your CloudWatch logs (not accessible to SheetBridge outside your AWS account)

We do not share your data with other third parties.

8.2 Legal Requests

If required by law (subpoena, government order, etc.), we may disclose:

• Your email address
• Connection configuration (region, cluster name, schema, db user — but not passwords)
• Job records (status, timestamps, error messages)

9. Children & COPPA

SheetBridge is not intended for use by children under age 13. We do not knowingly collect information from children under 13. If we learn that we have collected information from a child under 13, we will promptly delete it.

10. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA, as amended by the CPRA) provides you with specific rights regarding your personal information:

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you. As described in Section 2, this is limited to identifiers (your email address), connection configuration you provide, and service activity (job metadata and access logs).
• Right to Delete: You may request deletion of your personal information. You can do this yourself at any time via Settings → Disconnect in the add-on (see Section 7.2), or by emailing us.
• Right to Correct: You may correct inaccurate information at any time via Settings → Edit Connection (see Section 7.4).
• Right to Opt Out of Sale or Sharing: We do not sell your personal information, and we do not share it for cross-context behavioral advertising. There is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, use the in-product controls described in Section 7 or contact us at admin@inlyt.io. We verify requests using your authenticated Google account identity. We respond to verifiable requests within 45 days.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following applies:

11.1 Roles

• For account and service data (your email address, connection configuration, job metadata, and access logs), Inlyt Solutions LLC acts as a data controller.
• For the spreadsheet content you transfer through the Service, you (or your organization) are the controller and Inlyt Solutions LLC acts as a data processor, handling that data only transiently and only on your instruction, as described in Sections 2.3 and 6.3.

11.2 Lawful Bases

• Performance of a contract: processing needed to provide the Service you request (authentication, executing data transfers, job tracking).
• Legitimate interests: security monitoring, troubleshooting, and abuse prevention (access and error logs, retained 30 days).
• Legal obligation: responding to valid legal requests as described in Section 8.2.

11.3 Your Rights

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. The in-product controls in Section 7 let you exercise access, correction, and erasure directly; for anything else, contact admin@inlyt.io. You also have the right to lodge a complaint with your local supervisory authority.

11.4 International Transfers

The Service is operated from the United States and data is processed on AWS infrastructure in the United States. Where you connect the Service to infrastructure in another region, your sheet data is delivered to the destination you configure.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email (to your Google Workspace account email) or by posting the updated policy in the add-on.

Continued use of SheetBridge after a privacy policy update constitutes your acceptance of the new policy.

13. Contact Us

For questions or concerns about this Privacy Policy, please contact us:

Email: admin@inlyt.io