Privacy Policy

1. Overview

Cellmate ("Cellmate," "we," "us") provides a bring-your-own-key (BYOK) AI add-on for Google Sheets, available at cellmate.work. This policy explains what information Cellmate collects and how it is used.

Short version: you bring your own AI provider API key and configure it in the add-on. Cellmate also operates billing (via Stripe from the Sheets sidebar) and optional formula-cache services. There is no separate website login. For product details, see the FAQ and the docs.

2. Your API key and AI requests

Your API key is stored using Google Apps Script's User Properties service, scoped to your Google account and the Cellmate script project.

With cache off (or when a call skips cache), prompts and sheet context go from Google Sheets to your configured AI provider. In that mode our servers do not receive your spreadsheet contents, prompts, API key, or provider responses for those AI calls.

With cache on(the default), formula and Run requests may call Cellmate's execute API so we can look up or store an encrypted Redis entry. On a cache miss we briefly receive the prompt, sheet context, and your provider credentials to call your AI provider on your behalf, then store an encrypted copy of the result. Cache access is authorized by a shared add-on secret plus the spreadsheet owner's email matching an active Cellmate trial or subscription.

3. Information we do collect

To operate the add-on, our website, and basic customer support, we collect a limited set of information:

• Account identifiers: your Google account email address, used to authorize the add-on and identify your installation for licensing or support purposes.
• Configuration metadata: non-sensitive settings such as which provider you've selected, default model names, and the names/prompt text of custom commands you choose to save. This is stored within your own Google account's script storage, not centrally on our servers, unless you explicitly submit it to us (for example, in a support request).
• Cached formula results: when cache is enabled, encrypted result payloads in Redis (keyed by a hash of inputs), for up to 30 days or until they expire.
• Support and contact information: anything you send us directly, such as an email through our contact page or support address.
• Basic website analytics: aggregate, non-identifying usage data about cellmate.work (e.g. page views), used to understand how the marketing site is used.

4. How we use information

We use the limited information described above to:

• Operate, maintain, and improve the Cellmate add-on and website.
• Authenticate your access to the add-on and enforce any applicable plan limits.
• Serve and store encrypted formula-cache results when you enable cache.
• Call your AI provider on your behalf when serving a cache miss through the execute API.
• Respond to support requests you send us.
• Send important service announcements, such as changes to this policy or to supported providers.

We do not use your spreadsheet contents, prompts, or API keys to train models or for advertising.

5. Third parties: your AI provider

When you use =cellmate() or a custom command, your prompt and any referenced sheet data are sent to the OpenAI-compatible provider you configured (for example, OpenAI, Azure OpenAI, Groq, or a self-hosted endpoint) — either from Google Sheets directly (cache off) or via Cellmate's execute API on a cache miss (cache on). That provider processes the request under its own privacy policy and terms, which we encourage you to review.

We may also use standard third-party service providers to run this website (such as hosting and basic analytics infrastructure) and to process payments if you subscribe to a paid plan. Those providers only receive the minimum information necessary to perform their function and are contractually restricted from using it for other purposes.

6. Data retention and deletion

Configuration data stored in your Google account's User Properties (such as your API key and command definitions) remains under your control. You can clear it at any time from the Cellmate sidebar, or remove it entirely by uninstalling the add-on from Google Sheets' Extensions → Add-ons → Manage add-ons menu.

Encrypted cache entries expire by TTL (up to 30 days). Account identifiers and support correspondence that we hold are retained only as long as needed to operate the service or as required by law, and deleted or anonymized afterward.

7. Your rights (including under GDPR)

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar data protection laws, you have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of that information.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority.

Much of your configuration data lives in your own Google account, and you can act on it directly through the add-on or Google's account tools. For anything we do hold (including account and cache data), contact us and we will respond within a reasonable time.

8. Children's privacy

Cellmate is intended for business and professional use and is not directed at children. We do not knowingly collect information from children under the age required by applicable law to consent to data processing.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the product or applicable law. We will post the revised policy here and update the "Last updated" date above; material changes will be communicated through the add-on or by email where appropriate.

10. Contact us

Questions about this policy or how Cellmate handles data can be sent to our support address.