Privacy Policy

Last updated: June 9, 2026

1. Introduction

TalentSheets, LLC ("TalentSheets", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services — including the TalentSheets Chrome Extension (Manifest V3), the Google Sheets Add-On, and the website at www.talentsheets.com.

TalentSheets is a tool for marketing professionals and talent-bookers. It analyses public creator profiles on YouTube, Instagram, and TikTok, and saves those insights to a Google Sheets campaign spreadsheet.

2. Data We Collect

2.1 Google Account Information

When you sign in with Google, we receive your email address and profile picture via Google OAuth (userinfo.email and userinfo.profile scopes). Your email is stored locally in chrome.storage.local and used to identify your account and look up your credit balance. Your profile picture is stored locally only. Neither is shared with third parties.

2.2 Google OAuth Access Token

We obtain a Google OAuth access token via chrome.identity.getAuthToken to authenticate calls to Google Sheets and to the TalentSheets backend API (api.talentsheets.com). The token is stored locally in chrome.storage.local and sent only to our own API as a Bearer token. It is never logged server-side.

2.3 Public Creator Profile Data

When you open the extension on a YouTube, Instagram, or TikTok profile page, we scrape publicly visible data from that page (follower count, engagement metrics, bio, etc.) to generate an analytics card. This data is:

  • Cached locally in chrome.storage.local for up to 30 days to avoid redundant lookups.
  • Retained in TalentSheets' master creator database (api.talentsheets.com / Supabase), which aggregates every creator profile analysed across all users. This shared database lets all users benefit from recent scrapes without re-spending search credits, and forms TalentSheets' proprietary creator dataset. It contains only public social-media data about creators — not about the extension's users.

We only collect data from pages where you actively open the extension. We do not track your browsing history.

2.4 Search Credit Usage

We track per-user search credit usage server-side in our database (Supabase/Postgres) to enforce monthly platform-search allowances per tier. We store only: user_id, platform, period_start, used, and overage_used. No profile content is stored — only counts.

2.5 Google Sheets & Workspace Data (Extension + Add-On)

When you click "Add to Sheet", the Chrome extension writes scraped creator data into a Google Sheet managed by TalentSheets (created under a TalentSheets service account and shared with you). The data written to your sheet is the same creator data already held in the master creator database. The extension does not read any other content in your spreadsheets beyond what it writes.

The TalentSheets Google Sheets Add-On additionally uses SpreadsheetApp, DocumentApp, and DriveApp to generate PDF contracts from templates within your Google Workspace. All document and file operations occur entirely within your own Google Drive — TalentSheets does not receive, store, or retain copies of any documents or contracts generated.

What We Do NOT Collect

  • Your browsing history
  • Your own social media accounts or content
  • Payment information (billing is handled by Stripe — we never see your card details)
  • Any data from pages where you do not actively open the extension

3. How We Use Your Data

We use the data described above to:

  • Identify you as a signed-in user and display your name and avatar in the extension popup
  • Authenticate your requests to the TalentSheets API
  • Write creator analytics into your Google Sheet when you request it
  • Enforce monthly credit allowances per your subscription tier
  • Generate AI-written creator bios and niche classifications using Google Gemini (using public profile data only)
  • Serve recent profile data from the shared cache to all users, reducing redundant scraping
  • Respond to support requests and communications

4. Third-Party Services

We use the following third-party services to operate TalentSheets. User personally identifiable information (PII) is never shared with any third party for advertising or profiling purposes.

  • Google (OAuth, Sheets API, Docs API, Drive API, YouTube Data API v3) — user authentication; writing to Google Sheets; generating PDF contracts via Google Docs and Drive (add-on only, within your own Google Workspace); fetching YouTube channel data. Google Privacy Policy
  • Apify — server-side scraping of public Instagram and TikTok profiles. Only public creator usernames and profile data are sent — no user PII. Apify Privacy Policy
  • Google Gemini (Generative Language API) — generating AI bios and classifying creator niche from public profile data. No user PII is sent to Gemini. Google Privacy Policy
  • Supabase — backend database (user records, credit usage, shared profile cache), hosted on AWS US-East. Supabase Privacy Policy
  • Vercel — serverless hosting for api.talentsheets.com. Vercel Privacy Policy
  • Stripe — payment processing. TalentSheets never sees your full card details. Stripe Privacy Policy

5. Google API Limited Use Disclosure

TalentSheets uses the following Google OAuth scopes:

  • https://www.googleapis.com/auth/spreadsheets — to read/write the user's Google Sheets
  • https://www.googleapis.com/auth/documents — to create and populate Google Docs contract templates (add-on only)
  • https://www.googleapis.com/auth/drive.file — to save generated PDF contracts to the user's Google Drive (add-on only)
  • userinfo.email — to identify the user
  • userinfo.profile — to display the user's name and avatar

Limited Use Disclosure
TalentSheets' use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. TalentSheets does not use Google user data to serve advertisements, and does not sell or transfer Google user data to third parties.

6. Data Retention

  • Local cache (chrome.storage.local): Creator profile data expires after 30 days. The OAuth token expires with your Google session. All local data is cleared when you sign out or uninstall the extension.
  • Server-side user record: Your email address and subscription tier are retained while your account is active. You may request deletion at any time by emailing info@talentsheets.com.
  • Credit usage counters: Monthly usage counts only (no content). Rotated each calendar month.
  • Master creator database: Public creator profile data aggregated from all users' searches. This is TalentSheets' proprietary dataset and is retained indefinitely. It contains public social-media data about creators — not about our users — and no personally identifiable information.

7. Your Rights

You may exercise any of the following at any time:

  • Sign out — revokes the Google OAuth token and clears all locally stored data.
  • Clear local cache — via Chrome's extension storage settings or by uninstalling the extension.
  • Request account deletion — email info@talentsheets.com to delete your server-side record (email + credits row). We will respond within 30 days.
  • Access or portability — request a copy of the data we hold about you.
  • Rectification — request correction of inaccurate data.

Depending on your jurisdiction (e.g. EU/GDPR, UK, South Africa/POPIA), additional rights may apply.

8. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.