Privacy Policy

1. Introduction

TalentSheets Holdings LLC ("TalentSheets", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services — including the TalentSheets Chrome Extension (Manifest V3), the Google Sheets Add-On, and the website at www.talentsheets.com.

TalentSheets is a tool for marketing professionals and talent-bookers. It analyses public creator profiles on YouTube, Instagram, and TikTok, and saves those insights to a Google Sheets campaign spreadsheet.

2. Data We Collect

2.1 Google Account Information

When you sign in with Google, we receive your email address and profile picture via Google OAuth (userinfo.email and userinfo.profile scopes). Your email is stored locally in chrome.storage.local and used to identify your account and look up your credit balance. Your profile picture is stored locally only. Neither is shared with third parties.

2.2 Google OAuth Access Token

We obtain a Google OAuth access token via chrome.identity.getAuthToken to authenticate calls to Google Sheets and to the TalentSheets backend API (api.talentsheets.com). The token is stored locally in chrome.storage.local and sent only to our own API as a Bearer token. It is never logged server-side.

2.3 Public Creator Profile Data

When you open the extension on a YouTube, Instagram, or TikTok profile page, we scrape publicly visible data from that page (follower count, engagement metrics, bio, etc.) to generate an analytics card. This data is:

• Cached locally in chrome.storage.local for up to 30 days to avoid redundant lookups.
• Retained in TalentSheets' master creator database (api.talentsheets.com / Supabase), which aggregates every creator profile analysed across all users. This shared database lets all users benefit from recent scrapes without re-spending search credits, and forms TalentSheets' proprietary creator dataset. It contains only public social-media data about creators — not about the extension's users.

We only collect data from pages where you actively open the extension. We do not track your browsing history.

2.4 Search Credit Usage

We track per-user search credit usage server-side in our database (Supabase/Postgres) to enforce monthly platform-search allowances per tier. We store only: user_id, platform, period_start, used, and overage_used. No profile content is stored — only counts.

2.5 Google Sheets & Workspace Data (Extension + Add-On)

When you click "Add to Sheet", the Chrome extension writes scraped creator data into a Google Sheet managed by TalentSheets (created under a TalentSheets service account and shared with you). The data written to your sheet is the same creator data already held in the master creator database. The extension does not read any other content in your spreadsheets beyond what it writes.

The TalentSheets Google Sheets Add-On additionally uses SpreadsheetApp, DocumentApp, and DriveApp to generate PDF contracts from templates within your Google Workspace. All document and file operations occur entirely within your own Google Drive — TalentSheets does not receive, store, or retain copies of any documents or contracts generated.

What We Do NOT Collect

• Your browsing history
• Your own social media accounts or content
• Payment information (billing is handled by Stripe — we never see your card details)
• Any data from pages where you do not actively open the extension

3. How We Use Your Data

We use the data described above to:

• Identify you as a signed-in user and display your name and avatar in the extension popup
• Authenticate your requests to the TalentSheets API
• Write creator analytics into your Google Sheet when you request it
• Enforce monthly credit allowances per your subscription tier
• Generate AI-written creator bios and niche classifications using Google Gemini (using public profile data only)
• Serve recent profile data from the shared cache to all users, reducing redundant scraping
• Respond to support requests and communications

4. Third-Party Services

We use the following third-party services to operate TalentSheets. We never sell your personal information, and we never share your name or your Google account data with any third party for advertising or profiling purposes. The one exception to advertising is the Reddit Pixel described below: if you accept advertising cookies, it shares a scrambled copy of an email address or phone number you enter on this website with Reddit.

• Google (OAuth, Sheets API, Docs API, Drive API, YouTube Data API v3) — user authentication; writing to Google Sheets; generating PDF contracts via Google Docs and Drive (add-on only, within your own Google Workspace); fetching YouTube channel data. Google Privacy Policy
• Apify — server-side scraping of public Instagram and TikTok profiles. Only public creator usernames and profile data are sent — no user PII. Apify Privacy Policy
• Google Gemini (Generative Language API) — generating AI bios and classifying creator niche from public profile data. No user PII is sent to Gemini. Google Privacy Policy
• Supabase — backend database (user records, credit usage, shared profile cache), hosted on AWS US-East. Supabase Privacy Policy
• Vercel — serverless hosting for api.talentsheets.com. Vercel Privacy Policy
• Stripe — payment processing. TalentSheets never sees your full card details. Stripe Privacy Policy

Cookies, Analytics and Advertising (website only)

Our website uses essential cookies and browser storage to keep you signed in and to process payments. These are always on.

If you click Accept on our cookie banner, we also use the tools below. Visitors in the United States are treated differently: see Visitors in the United States.

• Microsoft Clarity — records how visitors use our website (pages viewed, clicks and scrolling) so we can improve it. Microsoft Privacy Statement
• Google Analytics — counts visits to our website and shows how visitors find and use it: which pages they view, which website or ad brought them here, and whether they went on to create an account, start a trial or make a purchase. We use it to improve the website and our marketing. Google receives your IP address, browser and device details, the pages you visit on our website and a cookie identifier. We do not send Google your name, email address or any data from your Google account, and it never runs on the account, billing, admin or support pages. Google Privacy Policy
• Reddit Pixel — tells Reddit when a visitor who saw or clicked one of our Reddit ads visits the website, creates an account, starts a trial or makes a purchase, so we can measure whether our ads work. Reddit receives your IP address, browser details, the pages you visit on our website, a cookie identifier, and a reference number for each sign-up, trial or purchase so that none is counted twice. If an email address or phone number is entered into a form on this website, Reddit's script also reads it and sends it to Reddit as a scrambled code (a hash) so Reddit can tell whether it belongs to an existing Reddit account; Reddit does not receive the address or number itself. This happens only if you accepted advertising cookies or, in the United States, haven't opted out, and never on the account, billing, admin or support pages, where no ad measurement runs at all. We do not send Reddit your name or any data from your Google account. Reddit Privacy Policy
• Google Ads conversion tag — tells Google when a visitor who clicked one of our Google ads goes on to create an account, start a trial or make a purchase, so we can measure which ads work. Google receives your IP address, browser details, the pages you visit on our website and a cookie identifier. We do not send Google your name or any data from your Google account. Google Privacy Policy

If you click Decline, none of them are loaded. None of them is used in the Chrome extension or the Google Sheets add-on. You can change your choice at any time: Cookie settings.

Visitors in the United States: your privacy choices

If your device is set to a United States time zone, we don't wait for you to accept. Google Analytics, the Reddit Pixel and the Google Ads conversion tag, described above, load when a page opens, and a notice at the bottom of the page tells you so. Microsoft Clarity still waits until you click Accept. If your device's time zone is outside the United States, or we can't tell, we ask first as described above.

Letting Reddit and Google measure our ads this way may count as "selling" or "sharing" personal information for targeted advertising under some US state privacy laws. You can opt out at any time:

• click Opt out on the notice, or Your privacy choices at the bottom of any page: Your privacy choices; or
• turn on Global Privacy Control in your browser. We treat it as an opt-out: none of these tools load unless you click Accept.

Opting out stops these tools on our website and deletes the identifiers they left here: Reddit's and Google's cookies and our record of the Reddit ad you clicked. Your choice is remembered in this browser, so if you use another browser or clear your browser's data, you'll need to opt out again there. Opting out doesn't affect the Chrome extension or the Google Sheets add-on, which use none of these tools.

5. Google API Limited Use Disclosure

TalentSheets uses the following Google OAuth scopes:

• https://www.googleapis.com/auth/spreadsheets — to read/write the user's Google Sheets
• https://www.googleapis.com/auth/documents — to create and populate Google Docs contract templates (add-on only)
• https://www.googleapis.com/auth/drive.file — to save generated PDF contracts to the user's Google Drive (add-on only)
• userinfo.email — to identify the user
• userinfo.profile — to display the user's name and avatar

6. Data Retention

• Local cache (chrome.storage.local): Creator profile data expires after 30 days. The OAuth token expires with your Google session. All local data is cleared when you sign out or uninstall the extension.
• Server-side user record: Your email address and subscription tier are retained while your account is active. You may request deletion at any time by emailing info@talentsheets.com.
• Credit usage counters: Monthly usage counts only (no content). Rotated each calendar month.
• Master creator database: Public creator profile data aggregated from all users' searches. This is TalentSheets' proprietary dataset and is retained indefinitely. It contains public social-media data about creators — not about our users — and no personally identifiable information.

7. Your Rights

You may exercise any of the following at any time:

• Sign out — revokes the Google OAuth token and clears all locally stored data.
• Clear local cache — via Chrome's extension storage settings or by uninstalling the extension.
• Request account deletion — email info@talentsheets.com to delete your server-side record (email + credits row). We will respond within 30 days.
• Access or portability — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate data.

Depending on your jurisdiction (e.g. EU/GDPR, UK, South Africa/POPIA), additional rights may apply.

8. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: info@talentsheets.com
• Website: www.talentsheets.com

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.