Privacy Policy

Effective 22 September 2026

1. Who we are

Sheetsli is a business operating system that businesses and schools (“Customers”) use to run sales, stock, staff, learners, contacts and customer communication.

• Sheetsli Ltd, registered in England & Wales (company number 16427193), 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, owns Sheetsli and is responsible for this policy.
• Sheetsli (U) Ltd, P.O Box 802491, Ntinda Kigowa Road, Kampala, Uganda, operates Sheetsli for Customers in Uganda.

In this policy, “Sheetsli”, “we” and “us” means both companies. You can reach us at hi@sheetsli.com, on WhatsApp at +256 794 909 327, or by phone on +44 20 3917 7444.

2. Our two roles

As a controller, we decide how to use personal data about the people who hold Sheetsli accounts, visitors to sheetsli.com, and businesses we contact about our services.

As a processor, we handle the data our Customers put into Sheetsli about their own customers, staff, learners, parents and contacts, including contacts synced with Google and messages sent through WhatsApp, email and SMS. The Customer decides what is collected and why. We process it only to provide the service they asked for. If a business using Sheetsli holds your information, please contact that business first; we will help them respond.

3. Information we collect

• Account information: name, email address, phone number, role, and the organisation you belong to.
• Usage and security information: sign-in times, device and browser details, and records of actions taken in the app, which we keep to secure accounts and resolve problems.
• Customer Data: anything a Customer records in Sheetsli, such as sales, invoices, stock, staff records, learner records and reports, and contact details.
• Location data (Sheetsli Crew): when an employer uses Sheetsli Crew for attendance, we collect the precise GPS location of an employee’s device when they clock in or out, to verify they are at an approved work site. The device asks the employee for permission first. This data is available only to that employer. We do not use it for our own purposes, share it with anyone else, or sell it. Employers are responsible for telling their employees how it is used.
• Google user data: when a user connects a Google account for contact sync, we read and update the contacts in that account (names, phone numbers, email addresses and related contact fields). See section 5.
• Messaging data: when a Customer sends WhatsApp, email or SMS messages through Sheetsli, we process the recipients’ names, phone numbers or email addresses, the message content, and delivery status. See section 6.
• Payment information: card payments are handled by a PCI DSS-certified payment processor, and we do not store full card numbers. For mobile money payments, we receive the payer’s name, phone number and transaction details.
• Business prospect data: publicly listed business details (name, address, phone number, website) from Google Maps, used for our own sales outreach.

4. How we use information

• To provide, operate, secure and support Sheetsli.
• To process payments, bill Customers and communicate with them about their account and our services.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To meet legal obligations.

We do not sell personal data. We do not use Customer Data, Google user data or messaging data for advertising.

Optional AI features. Some Sheetsli features use artificial intelligence. They are switched off unless a Customer chooses to enable them. When enabled, only the data needed for that feature is sent to our AI service provider, and the provider is not permitted to use it to train its models. Google user data is never sent to AI features.

5. Google user data

If you choose to connect a Google account, Sheetsli requests permission to read and update your Google Contacts so it can keep them in sync with your Sheetsli workspace in both directions, for the contact group you choose:

• contacts you add to that group on your phone or in Google appear in Sheetsli; and
• contacts you add in Sheetsli are added to that group in your Google account, so they appear on your phone.

We use this access only to provide this sync. We only change your Google contacts as part of the sync you set up.

• We store synced contacts in your organisation’s workspace in our database.
• We do not transfer this data to others except as needed to provide the sync, for security, or to comply with the law.
• Our staff do not read this data unless you ask us to (for example, for support), it is needed for security, or the law requires it.
• We never use it for advertising, never sell it, never send it to AI features, and never use it to train artificial intelligence or machine learning models.

You can disconnect at any time in Sheetsli or at myaccount.google.com/permissions. When you disconnect, syncing stops in both directions straight away. Contacts already synced stay in your Google account and in your Sheetsli workspace until you delete them or ask us to (see our Data Deletion page).

6. WhatsApp, email and SMS

Customers can connect a WhatsApp Business account to Sheetsli through Meta’s WhatsApp Business Platform, and can send email and SMS through Sheetsli. These messages pass through the providers listed in section 7, which process them under their own terms and policies. We keep message history in the Customer’s workspace for as long as the Customer’s account is active, unless the Customer deletes it sooner. Customers are responsible for getting any consent their recipients’ laws require before messaging them.

7. Who we share information with

We share personal data only with service providers that help us run Sheetsli, under agreements that protect it:

• Google Cloud and Firebase: hosting, database and application servers.
• Google Workspace: configuration spreadsheets used to set up each Customer’s workspace.
• Meta Platforms: WhatsApp message delivery.
• An email delivery provider.
• SMS delivery providers.
• A PCI DSS-certified payment processor: card payments.
• Mobile money operators: mobile money payments.
• AI service providers: only for Customers who enable AI features.
• Google Maps Platform: public business listings for our sales outreach.
• Google Analytics: website visit statistics, only if you accept analytics cookies.

We may also disclose information if the law requires it, to protect people’s rights and safety, or as part of a merger or sale of our business, in which case this policy continues to apply.

8. Where data is stored

Our main database is hosted by Google Cloud in London, United Kingdom. Our team works from Uganda and the United Kingdom, and some of our providers process data in other countries. Where data moves between countries, we rely on the safeguards available under applicable law and our providers’ contractual commitments.

9. How we protect data

• Data is encrypted in transit (HTTPS) and at rest.
• Each Customer’s records are kept in a separate partition of our database. Every request is checked against the user’s role and permissions before any data is returned.
• Only authorised staff can access production systems, and only when needed.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

10. How long we keep data

We keep account and Customer Data while the Customer’s account is active. After an account closes, we delete Customer Data within 90 days, unless the law requires us to keep it longer. We keep payment and security records only as long as the law and the protection of the service require.

11. Your rights

Depending on where you live, you can ask to access, correct or delete your personal data, object to or restrict how we use it, receive a copy of it, or withdraw consent you have given. Email hi@sheetsli.com to make a request. You can also complain to the Personal Data Protection Office in Uganda or, in the UK, the Information Commissioner’s Office.

12. Children and learners

Sheetsli is not directed at children. Schools that use Sheetsli Campus may record information about learners, including children. The school is responsible for this information and for any notice or consent that parents or guardians require. We process it only on the school’s instructions.

13. Cookies

We use cookies and browser storage that are needed to keep you signed in and to secure the service. These are always on.

With your permission, we also use Google Analytics to count visits to sheetsli.com and see which pages people read. These analytics cookies are switched off until you accept them, and you can change your choice at any time using the “Cookies” link at the bottom of any page. We do not use advertising cookies, and we do not sell this data.

14. Changes to this policy

If we make material changes, we will update the date above and notify Customers.

15. Contact

Sheetsli Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Sheetsli (U) Ltd, P.O Box 802491, Ntinda Kigowa Road, Kampala, Uganda
hi@sheetsli.com · +44 20 3917 7444 · +256 794 909 327

Sheetsli Ltd (England & Wales, 16427193) · Sheetsli (U) Ltd, Kampala · hi@sheetsli.com