Sheetah Privacy Policy

Effective October 22, 2026

Sheetah is a free tool made by Searchbloom, 10808 S. River Front Parkway, Suite #3116, South Jordan, UT 84095. It saves the forms people fill out on a website to a Google Sheet owned by that website's owner. Questions about this policy go to [email protected].

This policy covers two groups: account owners, who sign in to Sheetah, and website visitors, who fill out a form on a site that uses Sheetah.

Account owners

When you sign in with Google, Sheetah receives your name, email address, profile picture, and Google account ID. It uses them to identify your account and to email you about your account (for example, when your Sheet cannot be written to).

When you add a website, Sheetah asks for one Google permission: drive.file, which lets an app see and edit only the files it creates or that you open with it. Sheetah uses it to create a Google Sheet in your Drive and to add and update lead rows in that Sheet. It cannot see or open any other file in your Drive. Sheetah stores the access and refresh tokens Google issues, encrypted, so it can write leads while you are away.

Use of Google user data

Sheetah's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Sheetah:

• uses Google data only to create and write to your lead Sheets and to run your account;
• does not sell Google data or use it for advertising;
• does not use Google data to train AI or machine learning models;
• does not let people read it, except with your permission, to fix a problem you report, for security, or when the law requires it.

Website visitors

Sheetah works on behalf of the website owner. The website owner decides to use it and is responsible for telling their visitors how form information is used. When a visitor submits a form on a site that uses Sheetah, the script on that site sends:

• the values typed or chosen in the form, except passwords, payment card fields, hidden fields, and captcha tokens, which the script never reads;
• the page address and title, the landing page and referring site of the visit, and ad click IDs and UTM parameters in the page address;
• the visitor's time zone and how long the form took to fill out (used to stop automated spam).

The script reads a form only when it is submitted, or when a step button on a multi-step form is pressed. It does not record keystrokes, mouse movement, or anything typed into a form that is never submitted.

The script sets no cookies. It keeps two items in the visitor's own browser storage on that website: how the visitor arrived (kept 90 days), and any lead not yet delivered (kept up to 7 days so it can be resent).

How long data is kept

• A submitted lead is encrypted and held only until it is written to the owner's Sheet, then deleted from Sheetah. If it cannot be written within 30 days, it is deleted.
• A submission rejected as spam is discarded right away; only the reason is kept.
• Delivery records (time, status, and an error message, with no contact details) are kept 180 days, then deleted.
• Leads already in a Sheet belong to the Sheet's owner and are controlled by Google's terms and that owner.

Sharing

Sheetah sends lead data only to Google, to write it into the owner's Sheet. It runs on servers rented by Searchbloom. It does not sell or share personal data with anyone else, except when the law requires it.

Security

All traffic uses HTTPS. Google tokens and leads waiting to be written are encrypted at rest. Access to the servers is limited to Searchbloom staff who run the service.

Deleting your account

You can delete your account from the Account page at any time. Deleting it removes your sites and delivery records from Sheetah and revokes Sheetah's Google access. Your Sheets stay in your Drive. You can also remove Sheetah's access from your Google Account settings.

Children

Sheetah is a business tool and is not directed to children under 13.

Changes

Changes to this policy are posted on this page with a new effective date. Material changes are also emailed to account owners.