Privacy Policy

Last updated: August 3, 2026

1. Overview

Cellmate ("Cellmate," "we," "us") provides a bring-your-own-key (BYOK) AI add-on for Google Sheets, available at cellmate.work. This policy explains what information Cellmate collects and how it is used, including how we handle Google user data accessed through Google Workspace APIs.

Short version: you bring your own AI provider API key and configure it in the add-on. Cellmate also operates billing (via Stripe from the Sheets sidebar) and optional formula-cache services. There is no separate website login. Product help (pricing, docs, FAQ) lives in the Cellmate sidebar in Google Sheets.

For Google OAuth and Workspace Marketplace reviewers: see Section 5 (Limited Use) and Section 6 (Data protection mechanisms).

2. Your API key and AI requests

Your API key is stored using Google Apps Script's User Properties service, scoped to your Google account and the Cellmate script project.

With cache off (or when a call skips cache), prompts and sheet context go from Google Sheets to your configured AI provider. In that mode our servers do not receive your spreadsheet contents, prompts, API key, or provider responses for those AI calls.

With cache on(the default), formula and Run requests may call Cellmate's execute API (POST /api/cellmate/execute) so we can look up or store an encrypted Redis entry. On a cache miss we briefly receive the prompt, sheet context, and your provider credentials to call your AI provider on your behalf, then store an encrypted copy of the result. Cache access is authorized by a shared add-on secret plus the spreadsheet owner's email matching an active Cellmate trial or subscription.

3. Information we do collect

To operate the add-on, our website, and basic customer support, we collect a limited set of information:

Account identifiers: your Google account email address (spreadsheet owner email), used to authorize the add-on, enforce trial/subscription entitlement, and identify your installation for licensing or support.
Billing profile data: email, Stripe customer and subscription identifiers, trial/referral status, and related billing metadata stored in our database to operate subscriptions.
Configuration metadata:non-sensitive settings such as which provider you've selected, default model names, and the names/prompt text of custom commands you choose to save. This is stored within your own Google account's script storage, not centrally on our servers, unless you explicitly submit it to us (for example, in a support request).
Google user data used to run AI features: when you invoke Cellmate formulas or commands, the add-on may read spreadsheet content and ranges you reference (and write results you request). With cache on and a cache miss, prompts derived from that sheet data and related context are briefly processed by our execute API to call your chosen AI provider.
Cached formula results: when cache is enabled, encrypted result payloads in Redis (keyed by a hash of inputs and scoped per user), for up to 30 days or until they expire.
Support and contact information: anything you send us directly, such as an email through our contact page or support address.
Basic website analytics: aggregate, non-identifying usage data about cellmate.work (e.g. page views), used to understand how the marketing site is used.

4. How we use information

We use the limited information described above to:

Operate, maintain, and improve the Cellmate add-on and website (product and infrastructure improvements that do not involve training AI/ML models on Google user data — see Sections 5 and 6).
Authenticate your access to the add-on and enforce any applicable plan limits.
Serve and store encrypted formula-cache results when you enable cache.
Call your AI provider on your behalf when serving a cache miss through the execute API.
Process payments and manage subscriptions via Stripe.
Respond to support requests you send us.
Send important service announcements, such as changes to this policy or to supported providers.

We do not sell Google user data or spreadsheet contents. We do not use your spreadsheet contents, prompts derived from sheet data, API keys, or provider responses to train, create, or improve foundational or generalized machine learning or artificial intelligence models, and we do not transfer or sell that data to third parties for such purposes. We do not use Google user data for advertising.

5. Limited Use / Google Workspace API User Data Policy

Cellmate's use of information received from Google APIs (including Google Workspace APIs and Google Sheets) complies with the Google User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

In practical terms for Cellmate:

Google user data (including spreadsheet content and prompts derived from sheet data) is used only to provide or improve user-facing features that are prominent in the Cellmate add-on's user interface — namely running AI prompts against sheet data you choose, writing results back when you request them, and optional encrypted caching of formula results to reduce repeat provider calls.
That data is notused to train, create, or improve generalized / foundational AI or ML models (ours or anyone else's), and is not sold or transferred for those purposes.
Human reading of Google user data is limited to cases needed to operate or secure the service (for example, investigating abuse, responding to a support request you initiate, or complying with law), consistent with Limited Use.
When cache is off, prompts and sheet context are sent from Google Sheets directly to the AI provider you configure; Cellmate servers do not receive that payload for those calls. When cache is on, our execute API may briefly process the same class of data on a cache miss solely to call your chosen provider and optionally store an encrypted result.
Your chosen AI provider receives prompts and related context under that provider's own terms; Cellmate does not control how that provider uses data after you choose to send it there. You should review your provider's policies (including any training/opt-out settings they offer).

6. Data protection mechanisms

We apply the following technical and organizational measures to protect sensitive and Google user data we process:

Encryption in transit: cellmate.work and Cellmate API endpoints are served over HTTPS/TLS.
Encryption at rest (formula cache): when cache is enabled, formula/run results stored in Redis are encrypted with AES-256-GCM before write. Encryption keys are derived per user from a server-side secret combined with the user identifier, so ciphertext is not reusable across accounts. Plaintext exists on our servers only briefly while serving a request or calling your AI provider on a cache miss.
Access controls: add-on APIs that touch entitlement, billing, or the execute/cache path require a shared add-on secret (CELLMATE_ADDON_SECRET as a Bearer token) plus the spreadsheet owner's email. Email alone is not trusted. Execute and cache use also require an active Cellmate trial or subscription for that owner email. API keys for AI providers remain in Google Apps Script User Properties on your account (BYOK); they are not stored as a standing server-side secret except when transiently sent to the execute API on a cache miss.
Retention / TTL: encrypted formula-cache entries expire automatically by Redis TTL (up to 30 days, capped by the server). Short-lived entitlement lookup cache entries (~45 seconds) store billing status only, not spreadsheet contents. Billing profile and support records are retained only as needed to operate the service or as required by law.
No sale of data: we do not sell personal data or Google user data. We do not transfer Google user data for advertising or for training foundational / generalized AI/ML models.
Least privilege in product design: the add-on scopes which ranges it may read or write based on your use of formulas and commands; configuration and API keys stay under your Google account unless you enable cache and a miss routes a request through our execute API.

7. Third parties and subprocessors

When you use =cellmate() or a custom command, your prompt and any referenced sheet data are sent to the OpenAI-compatible provider you configured (for example, OpenAI, Azure OpenAI, Groq, OpenRouter, or a self-hosted endpoint) — either from Google Sheets directly (cache off) or via Cellmate's execute API on a cache miss (cache on). That provider processes the request under its own privacy policy and terms, which we encourage you to review.

We use the following categories of service providers to operate Cellmate. They receive only what is needed for their function:

Stripe — payment processing and subscription management (billing email and payment-related data; not your spreadsheet contents).
Scaleway — hosting for cellmate.work / application infrastructure, and transactional email for operational alerts (for example, Marketplace review verification notices).
Redis — optional encrypted formula-result cache and short-lived entitlement status cache.
PostgreSQL database — billing profiles and related account metadata (not formula prompts or sheet contents as a primary store).
Your chosen AI provider — prompts and related sheet context when you run AI features (BYOK).

These providers are restricted to using data as needed to provide their services to us. Cellmate does not authorize them to use Google user data to train foundational or generalized AI/ML models on our behalf.

8. Data retention and deletion

Configuration data stored in your Google account's User Properties (such as your API key and command definitions) remains under your control. You can clear it at any time from the Cellmate sidebar, or remove it entirely by uninstalling the add-on from Google Sheets' Extensions → Add-ons → Manage add-ons menu.

Encrypted cache entries expire by TTL (up to 30 days). Account identifiers, billing profile data, and support correspondence that we hold are retained only as long as needed to operate the service or as required by law, and deleted or anonymized afterward.

9. Your rights (including under GDPR)

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar data protection laws, you have the right to:

Access the personal information we hold about you.
Request correction or deletion of that information.
Object to or restrict certain processing.
Request a copy of your data in a portable format.
Lodge a complaint with your local data protection authority.

Much of your configuration data lives in your own Google account, and you can act on it directly through the add-on or Google's account tools. For anything we do hold (including account and cache data), contact us and we will respond within a reasonable time.

10. Children's privacy

Cellmate is intended for business and professional use and is not directed at children. We do not knowingly collect information from children under the age required by applicable law to consent to data processing.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the product or applicable law. We will post the revised policy here and update the "Last updated" date above; material changes will be communicated through the add-on or by email where appropriate. The privacy policy URL for the Google OAuth consent screen remains https://cellmate.work/privacy.

12. Contact us

Questions about this policy or how Cellmate handles data can be sent to our support address.