Privacy Policy

Last updated 5 November 2026

SheetTamer is operated by GG Consulting, LLC ("we", "us"). This policy explains what we collect, why, and what we do not collect. We have tried to write it plainly rather than defensively.

The short version

When you use the portal, the files you add are uploaded to us and stored in your workspace. That means receipts, statements, and bank or card exports. Receipts and statements are read by an AI model (Anthropic's Claude, run on Amazon Bedrock inside our Amazon Web Services account) to pull out the vendor, date, amounts and the last 4 digits of the card. A spreadsheet you check is read on your device and is not uploaded; only the findings are sent to us.

When you check a spreadsheet, it is read on your device. The file is not sent to us. We keep the findings: file name, sheet, cell, type of issue and, unless you turn it off in settings, the amount involved and the plain English note, which can quote figures from the file.

What we collect

Until 5 November 2026 our public spreadsheet check page also recorded, for each check, the kind of workbook, how many sheets and cells were reviewed, counts of the findings, whether the sample file was used, the session identifier, a keyed fingerprint of the network (IP) address, and the country and network operator of that address. That page is closed and we no longer collect these. You can ask us to remove records already made at hello@sheettamer.com.
If you answer the quiz, we keep your answers, the steps you took and how long they took, the campaign details you arrived with, and the session identifier. We do not keep an email address with the quiz.

If you create a workspace

Your name and email address. The new portal signs in with a one time code we email you, so it stores no password. The classic workspace signs in with a password, which we store only as a one way hash (bcrypt) and never in readable form.
Your organization name and the industry you select.
For each check you run: the file name, when it ran, who ran it, and the findings. Findings include the sheet name and cell reference of each issue.
An audit log of security relevant events such as sign in and member changes, together with the IP address they came from.
The files you add to your workspace: receipts, spreadsheets, and bank or card exports. They are kept for as long as your workspace is open, as described under How long we keep it.
Your books. Each money line you import or enter: date, amount, description, note and category. Also your tips, the share you set aside for tax, your answers about each card reader, and your fixed costs.
Tax papers you record. 1099 K forms, other income papers, estimated tax payments with their dates and confirmation numbers, and the car method you chose each year.
Trips you log. Date, place, purpose, miles and odometer readings.
Meal receipts. The words you add to a meal receipt, and a history of every change made to a receipt and who made it.
What the AI model did. A record of each time it read a file, what it decided, and any correction a person made.
Your signed in devices. A device label and the IP address. We also keep each sign in code with the email address and IP address it was requested from.
If you subscribe. The Stripe customer and subscription numbers for your workspace.
Accountant access. If you connect an accountant or bookkeeping firm, the connection, the requests and comments you exchange, and the period checklists you share.

What we never keep or collect

Card data in SheetTamer. Subscriptions are paid through Stripe, and SheetTamer stores no card data. We give Stripe the workspace owner's email address and a workspace number so it can match the payment. This is separate from receipts you add, where we read the last 4 digits of the card.

Turning off finding details

Findings normally include a short explanation that quotes figures from your workbook, because that is what makes the finding useful. If you would rather we did not keep that text, an owner or admin can switch finding details off in Settings. We then store only the structural facts of each finding: sheet, cell, and category. This does not change the files you add to your workspace, which are stored as described above.

Site analytics

We count our own visitors. When you view a page we record the page, the time, where you came from, and a random session identifier that lives only in your browser tab. If you arrive from an advert or a campaign link, we also record the campaign details and the advertising platform's click identifier from that link, and keep them with your visit for the rest of that browser session. If you turned advertising off (see Your choices about advertising), we keep the campaign details and drop the click identifier. We also use advertising and remarketing tags from Google, Microsoft and TikTok on our public pages, such as the home page and the Money Leak Check. This privacy page does not load them. These set cookies or similar identifiers in your browser so that we can measure which adverts brought you here and show you our adverts again on those platforms. They do not receive your spreadsheet, your findings, or the contents of any document. If you create a workspace or start a subscription after clicking a Google advert, our server tells Google Ads that the click led to a sign up or a subscription. This happens on our server, not in your browser, and only if Google's click identifier came with your visit. We send that identifier, the time, and the subscription value when there is one. We never send your name, email or any document. If advertising is off, or your browser sends a Global Privacy Control signal, at the moment you create your workspace, we send neither the sign up report nor the subscription report. Turning advertising off after your workspace exists does not stop a later subscription report. If that applies to you, write to hello@sheettamer.com. The counts tell us which pages matter. If you give us your email on one of our pages, it is kept with that session identifier, so it is linked to that session's visits. We also send your email, the answers you gave, and the page and campaign details you arrived with to our internal lead system, so we can follow up. When you create a workspace, we send that system your email and whether you signed up as an owner or a firm. You can ask us to remove your details from that system at any time at hello@sheettamer.com.

Why we collect it

To run the service, which is the basis for account and check data.
To keep accounts secure, which is the basis for audit logs and sign in records.
With your consent, to email you the code that opens your findings and to contact you about the product. You can withdraw this at any time by replying to any message or writing to us.

Who else sees it

We do not sell personal information for money. We do share limited online identifiers with advertising platforms for remarketing, which some laws, including the California Consumer Privacy Act, treat as "sharing for cross-context behavioural advertising". You can opt out at any time: see Your choices about advertising below. We use a small number of providers to operate the service.

Inside SheetTamer, the people in your workspace see what their role allows. An accountant or bookkeeping firm you give access to sees your workspace's books, files and reports, and can send you requests and comments. They keep that access until it ends. Our own staff see workspace names, plan status and activity counts so we can run the service and help you.

We use these providers:

Amazon Web Services. Stores your files and our database backups, sends our email and sign in codes, and runs Amazon Bedrock, which runs the AI model (Anthropic's Claude) that reads receipts and statements you add.
Oracle Cloud Infrastructure. Hosts the application and the database.
Stripe. Handles subscription payments.
Google Fonts. Every page on this site, this one included, loads its fonts from Google. Google sees your IP address and browser details when the fonts load.
Google, Microsoft and TikTok. Advertising measurement, as described under Site analytics.

We disclose information if required by law, and we will tell you unless we are prohibited from doing so.

Your choices about advertising

You can turn our advertising tags off for this browser at any time, and we will remember the choice. Nothing else about the service changes if you do: the checker, the quiz and your workspace all work exactly the same.

Turning advertising off does three things. It stops the advertising tags in your browser. It stops our server from telling Google Ads about your sign up or subscription, if advertising was already off when you created your workspace. It clears any click identifiers we kept for this browser session, and we keep no new ones.

Our server checks your choice once, when a workspace is created with Google's click identifier. Turning advertising off after that does not stop a later subscription report for that workspace. If that applies to you, write to hello@sheettamer.com.

Your browser's Global Privacy Control signal does the same, with nothing to press. We check for it in your browser and on our server. For the Google Ads reports, we honor the signal only if your browser is sending it when you create your workspace.

This choice applies to this browser only. It is saved in the browser's storage and in one cookie, st_ao=1, on sheettamer.com. The cookie lasts one year. We set it only when you turn advertising off, so your choice also reaches app.sheettamer.com, where the portal runs. You can also opt out at the source: Google Ads settings, Microsoft advertising preferences, and TikTok.

How long we keep it

Spreadsheets you check: never received. Findings: kept in your office.
Account and check history: for as long as your workspace is open. If you close your workspace, write to hello@sheettamer.com and we will delete your records and files from SheetTamer. Copies can remain in our backups until those backups are removed. Reports you have issued from SheetTamer, the correction history behind them, and the receipt totals they rely on are kept as a record after a deletion request, because a lender, landlord or accountant may have relied on them.
Receipts and other files you add to your books: for as long as your workspace is open.
Audit logs: kept as the record of who did what in a workspace. Entries that belong to no workspace and contain an email address are deleted after 90 days. When a workspace is deleted, the notes in its entries are replaced and their details trimmed 2 years later, and the entries themselves are deleted 7 years later. For a workspace that was never claimed, those times run from when each entry was made. These checks run daily.
Leads from the former public spreadsheet check page: we have not set an end date. When the lead file reaches its size limit, the oldest entries are removed first. You can ask us to remove yours at any time.
Quiz answers: we have not set an end date.
Free check records and page visit records: we have not set an end date. If you gave us your email, you can ask us to remove everything linked to it.
Sign in codes and signed in device records: deleted 7 days after a code is used, voided or expires, or a device is signed out. The check runs hourly.
If you opt out of our email: we keep a scrambled fingerprint of your address, made with a secret key, for as long as we send email. That way we never write to you again, and we do not need to keep the address itself.

Your rights

Whatever jurisdiction you are in, you may ask us to show you what we hold, correct it, export it, or delete it. Write to hello@sheettamer.com and we will respond within 30 days.

We will not hold your records hostage. If your subscription lapses, your workspace becomes read only and stays exportable. We do not delete your history to pressure you into paying.

Security

The new portal signs in with a one time code sent to your email. The classic workspace signs in with a password, kept only as a one way hash. Traffic is encrypted in transit with TLS. Sessions can be revoked immediately, and are revoked automatically when a member is suspended or removed. Access to each workspace is scoped so that one organization cannot read another's data.

Children

SheetTamer is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.

Changes

If we change this policy materially we will say so on this page.

Contact

GG Consulting, LLC, 700 S Rosemary Ave #204, West Palm Beach, FL 33401
hello@sheettamer.com