Privacy Policy
Table of Contents
Effective Date: July 5, 2026
Website: https://sheetspilot.ai
Plugin: SheetsPilot – WordPress Bulk Edit Plugin
1. Introduction
SheetsPilot (“we”, “our”, or “us”) operates the website located at https://sheetspilot.ai and provides the SheetsPilot WordPress plugin (the “Plugin”). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, purchase a license, use our plugin, or interact with our support services.
We are committed to protecting your privacy and complying with applicable data protection laws worldwide, including the General Data Protection Regulation (GDPR) in the European Union and European Economic Area, the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Australia’s Privacy Act 1988, Brazil’s Lei Geral de Proteção de Dados (LGPD), and other applicable regional privacy laws.
Please read this policy carefully. By using our website or plugin, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
Data Controller:
Studio Keren Aga LTD, Israel
Operating as: SheetsPilot
Website: https://sheetspilot.ai
For all privacy-related inquiries, requests, or complaints, please get in touch with us. We aim to respond within 30 days of receiving your request.
3. What Information We Collect
3.1 Information You Provide Directly
Account and Purchase Information
When you purchase a SheetsPilot license, we collect your name, email address, billing address, and payment details. Payment information (credit card numbers, PayPal details) is processed directly by our payment processors and is never stored on our servers.
Support and Contact Information
When you contact us for support or submit an inquiry, we collect your name, email address, and the content of your message.
License Information
When you activate the SheetsPilot plugin on your WordPress site, we collect your license key, the domain name of the WordPress installation, and the WordPress version running on that site.
3.2 Information Collected Automatically
Website Usage Data
When you visit sheetspilot.ai, we automatically collect your IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and the date and time of your visit. This data is collected through cookies and analytics tools described in Section 5.
Plugin Telemetry (Only with Consent)
The SheetsPilot plugin does not collect any data from your WordPress site, your posts, pages, products, or custom fields. The plugin operates entirely within your own WordPress installation. No content data is transmitted to our servers.
If you opt in to our anonymous usage reporting feature powered by the Freemius SDK – we collect the opted-in user’s first and last name and email address, product version, product state (active, inactive, or uninstalled), WordPress version, PHP version, and MySQL version, WordPress locale (country and language), website URL, website IP address, and, optionally, a list of installed plugins and themes. This data is collected solely to improve the product, provide support, and notify you of security updates or feature announcements.
If you opt in solely by activating a license key, no additional personal data is collected beyond what we already hold from the purchase process.
3.3 OpenAI API Usage
SheetsPilot’s AI features are powered by the OpenAI API. To use AI features, you must provide your own OpenAI API key in the plugin settings. Your API key and the content you process through AI features are sent directly from your WordPress installation to OpenAI’s servers. We do not store, access, or transmit your OpenAI API key or any AI-processed content through our servers. Please review OpenAI’s Privacy Policy at https://openai.com/privacy for details on how they handle data.
4. How We Use Your Information
We use your information for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Processing your purchase and delivering your license | Performance of a contract |
| Sending purchase confirmations and license keys | Performance of a contract |
| Providing customer support | Performance of a contract |
| Verifying license validity and managing activations | Performance of a contract |
| Sending product updates, security notices, and changelog notifications | Legitimate interests |
| Improving our website and plugin based on usage analytics | Legitimate interests |
| Complying with legal obligations (tax records, fraud prevention) | Legal obligation |
| Sending marketing emails (only with your consent) | Consent |
| Preventing fraud and ensuring security | Legitimate interests |
We will never sell your personal information to third parties. We will never use your information for purposes incompatible with those stated above without first obtaining your consent.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to operate correctly and to understand how visitors use the site.
5.1 Types of Cookies We Use
Strictly Necessary Cookies
These cookies are essential for the website to function. They enable core functionality such as security, session management, and checkout. These cannot be disabled.
Analytics Cookies
We use analytics tools to understand how visitors interact with our website. Analytics cookies collect anonymous information about page visits, traffic sources, and user behaviour. You can opt out of analytics cookies via our cookie consent banner.
Preference Cookies
These cookies remember your choices on our website, such as your billing toggle preference (Annual vs Lifetime) on the pricing page.
Marketing Cookies
We may use marketing cookies to understand which channels drive traffic to our website. These are only set with your explicit consent.
5.2 Managing Cookies
You can control and manage cookies in several ways. Most browsers allow you to refuse or delete cookies through their settings. You can also manage your cookie preferences through our cookie consent banner displayed on your first visit to the website. Note that disabling certain cookies may affect the functionality of the website.
6. Third-Party Services and Data Sharing
We share your data with the following categories of third parties only where necessary to provide our services:
6.1 Payment Processors
We use third-party payment processors to handle all financial transactions. We accept Visa, Mastercard, American Express, and PayPal. These processors receive your billing information and payment details to complete transactions. They are independently responsible for their own data practices. All transactions are protected by 256-bit SSL encryption.
6.2 License Management
We use a license management system to issue, validate, and manage plugin licenses and activations. This system receives your email address, license key, and the domain of your WordPress installation.
6.3 Email Service Providers
We use a third-party email service to send transactional emails (purchase confirmations, license keys, support replies) and, where you have consented, product update notifications.
6.4 Analytics Providers
We use website analytics tools to understand site traffic and user behaviour. Analytics data is collected in anonymised or pseudonymised form where possible.
6.5 Freemius
Where you opt in to anonymous usage reporting (see Section 3.2), the data described there is processed through the Freemius SDK, which provides licensing and usage-analytics infrastructure for WordPress plugins. Freemius acts as a data processor on our behalf.
6.6 OpenAI
As described in Section 3.3, AI features in the plugin route content directly from your WordPress site to OpenAI. We are not a party to that data exchange.
6.7 Legal Disclosure
We may disclose your personal information if required to do so by law, in response to a valid legal request, or to protect the rights, property, or safety of SheetsPilot, our users, or the public.
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
7. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.
| Data Type | Retention Period |
|---|---|
| Purchase and license records | 7 years (legal and tax compliance) |
| Support correspondence | 3 years from last interaction |
| Website analytics data | 26 months |
| Marketing consent records | Until consent is withdrawn + 3 years |
| Cookie data | As defined by each cookie’s expiry |
When your data is no longer required, we will securely delete or anonymise it.
8. Data Security
We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.
8.1 Account and Access Security
We require multi-factor authentication (MFA) for all access to collaboration and communication tools, code repositories, software deployment tools, backend administrative tools, and remote server access via SSH. We also enforce strong password complexity standards, use authentication backoff mechanisms, and apply automatic account lockouts after a specified number of failed login attempts to prevent unauthorised access and account takeovers.
8.2 Software Update and Patch Management
We maintain all third-party software and antivirus tools by regularly monitoring for security updates and patches. Updates are prioritised based on severity using industry-standard scoring systems and applied promptly. Antivirus software updates are automated, and patches are tested before deployment to avoid disruptions.
8.3 General Safeguards
Additional measures include 256-bit SSL/TLS encryption for all data in transit, access controls limiting who within our team can access personal data, regular security reviews of our systems and processes, and use of reputable third-party services with their own security certifications.
While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.
9. International Data Transfers
SheetsPilot is operated from Israel. If you are located in the European Union, European Economic Area, or United Kingdom, your personal data may be transferred to and processed in countries outside your jurisdiction, including countries that may not offer the same level of data protection as your home country.
Where we transfer data outside the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions where applicable, and contractual obligations on recipient third parties to protect your data.
10. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
10.1 Rights for EEA, UK, and Swiss Residents (GDPR / UK GDPR)
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request deletion of your personal data where there is no legitimate reason for us to continue processing it.
- Right to Restriction: You have the right to request that we restrict processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.
California residents have the right to know what personal information we collect, use, disclose, and sell; the right to delete personal information we hold about you; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); the right to limit use of sensitive personal information; and the right not to be discriminated against for exercising your privacy rights.
To exercise any of these rights, contact us. We will verify your identity and respond within the timeframes required by applicable law (generally 30 days, with a possible 30-day extension where required).
11. Children’s Privacy
SheetsPilot is a professional WordPress plugin intended for use by adults. Our website and services are not directed at children under the age of 16 (or 13 in jurisdictions where that is the applicable minimum age). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete that information promptly.
12. Do Not Track
Some browsers include a “Do Not Track” (DNT) feature that signals to websites that you do not want your online activity tracked. Our website currently does not respond to DNT signals. You can manage your tracking preferences through our cookie consent banner and your browser settings.
13. Links to Third-Party Websites
Our website may contain links to third-party websites, including WordPress.org, OpenAI, Unlimited Elements, and payment processors. These websites have their own privacy policies and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party website you visit.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this policy and, where appropriate, notify you by email or via a notice on our website.
We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of our website or plugin after any changes constitutes your acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please get in touch with support.
Website: https://sheetspilot.ai
Response Time: We aim to respond to all privacy requests within 30 days.