Privacy

Privacy Policy

Last updated: May 25, 2026

What we collect

  • Your Google account email, display name, and profile photo URL.
  • A Google OAuth refresh token, stored in Google Cloud Secret Manager and used only to read the resume Sheet we created on your behalf.
  • Anonymous page view counts in our own database (a single number per resume; no IP, no referrer, no user agent stored on our side).
  • Browser cookies and similar identifiers set by third-party advertising and analytics providers — only if you accept them through our cookie banner. See “Cookies and tracking” below.

Cookies and tracking

SheetCV uses a cookie consent banner that lets you choose which categories of cookies are set in your browser. Cookies fall into four categories:

  • Necessary — required for the site to work (e.g., your sign-in session). Always on.
  • Preferences — remember UI choices, including your cookie consent state itself.
  • Statistics — anonymous traffic measurement so we can understand how SheetCV is used. Set by third-party analytics providers.
  • Marketing — set by third-party advertising providers to measure ad performance and personalize ads on other sites you visit. Only loaded if you accept the marketing category.

You can change your choice at any time by re-opening the cookie consent banner from any page on the site. We also honor the Global Privacy Control (GPC) signal — if your browser sends GPC, we treat it as an opt-out of sale or sharing of personal information for cross-context behavioral advertising.

We do not have a complete list of named providers here because the set may change over time. The specific providers active for your visit are disclosed in the consent banner itself before any marketing or statistics cookies are set.

What we don't do

  • We don’t read sheets you didn’t create through SheetCV. The Google scope we request (drive.file) is scoped only to files our app touched.
  • We don’t sell your personal information for money.

Google API scopes — what each one is used for

When you sign in, SheetCV asks Google for permission to access a narrow set of APIs. Each scope below is the minimum we need to provide the service:

  • openid, email, profile — identifies your account so we can create your SheetCV record. We do not use this information for any purpose beyond authentication and displaying your name on the dashboard.
  • https://www.googleapis.com/auth/drive.file — lets SheetCV create one resume sheet in your Drive at signup time and read it back when rendering your resume page. This scope is restricted by Google to files our app created or that you explicitly opened with our app — we cannot see any of your other Drive content.
  • https://www.googleapis.com/auth/spreadsheets.readonly— lets us read the contents of the resume sheet so we can render the resume page. We do not write to the sheet.

Google API Services User Data Policy

SheetCV’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

Until you delete your account. Account deletion removes your user record, your username, your resume metadata, and your refresh token. Your Google Sheet itself stays in your Drive — we do not touch it. To delete your account, go to your dashboardand use the “Delete account” control. The deletion is immediate; there is no soft-delete or grace period.

Sharing

We don’t sell your personal information for money. If you accept marketing or statistics cookies, browser-level data (cookie IDs, pages viewed, device and browser characteristics) is shared with the third-party advertising and analytics providers active at that time, for the purpose of measuring ad performance and serving relevant ads on other sites. Under the CPRA, this counts as “sharing” for cross-context behavioral advertising even though no money changes hands. You can opt out at any time by re-opening the cookie banner and declining the marketing category.

We also share data with the infrastructure we run on (Google Cloud), and disclose information when required by law.

Your rights

You can:

  • Delete your account at any time from the dashboard.
  • Withdraw or change your cookie consent at any time by re-opening the cookie banner, or by clearing cookies for sheetcv.com in your browser.
  • Opt out of the sale or sharing of your personal information for cross-context behavioral advertising (CPRA) by declining the “Marketing” category in the cookie banner. Enabling Global Privacy Control in your browser does this automatically.
  • Revoke SheetCV’s Google access at myaccount.google.com/permissions.
  • Contact us to request a copy of the data we hold on you.

Contact

Privacy questions: support@sheetcv.com.