Your data: export, delete and security

Your customer list is the most valuable thing your business owns. It is yours. We do not use it for anything except running the service for you, we do not sell it, and there is no tracking or third-party code inside the app.

Export

In Settings → Your data:

• Export contacts (CSV) gives a spreadsheet of every contact: name, company, email, phone, tags, notes and last-contact date. It opens in Excel, Google Sheets and Numbers.
• Export everything (JSON) gives one file with every contact, note, follow-up and deal, and your pipeline stages. It is the complete record, in an open format any developer or other system can read.

Export as often as you like, on any plan, including after a paid plan has ended. A monthly export to your own files is a sensible habit.

Delete your account

Settings → Delete account. Type DELETE and press the button. It is permanent, so there are two safeguards:

• If you logged in more than ten minutes ago you are asked to log in again first.
• If you have a subscription that is still renewing, cancel it under Manage billing first. This is so nobody is ever charged for an account that no longer exists.

Deleting removes every contact, note, follow-up and deal, and your login, from the live system immediately. Encrypted backups are overwritten within 35 days. If you have a team, the other members lose access at once; their own logins remain, empty. Only the account owner can delete the account.

To delete individual records instead, use Delete contact on a contact's page (their notes go with them) or × on a follow-up or deal.

Where it is kept and how it is protected

• In the UK. The data is stored in Amazon Web Services' London region.
• Encrypted in transit (HTTPS everywhere) and at rest, with continuous backups that allow recovery to any point in the last 35 days.
• Separated by design. Every request is checked against your login before any code runs, and every record is stored under your account's own key. One customer cannot address another customer's data.
• Passwords are never stored by us in readable form; logins are handled by AWS's login service. Password resets go to your email address only.
• Card details never reach us. Payments are handled entirely by Stripe.
• No tracking. No analytics scripts, advertising or third-party code runs inside the app.

If you work with other people's personal data

Your customers' names and contact details are personal data, and under UK GDPR you are responsible for them; we act as your processor. The Terms of Service include the data processing agreement, and the Privacy Policy sets out what we hold and why. If a customer asks you for a copy of what you hold on them, their contact page and the export contain it. If they ask to be deleted, Delete contact removes them and their notes.

Reporting a problem

If you think someone else has access to your account, or you have found a security problem, email support@sheetsmith.co.uk straight away. A person will reply. If an incident ever affects your data, we will tell you within 48 hours of becoming aware of it.