Privacy

This Privacy Policy applies to the Sheetz public site at https://usesheetz.com, the product application at https://sheetz.carneloot.com, account creation and authentication flows, optional Google Drive import flows, and the choir, document, audio, setlist, and share-link data created inside the product.

It does not apply to third-party services you access separately, including WorkOS, Google, or other sites and platforms that publish their own terms and privacy notices.

Google Drive is a trademark of Google Inc. Use of this trademark is subject to Google Permissions.

Depending on how you use Sheetz, we may collect information you provide directly, information generated through your use of the service, and information received from third-party providers that are necessary to operate the product.

• Account information such as your name, email address, and identifiers received during sign-in.
• Choir data such as member invites, roles, setlists, piece titles, notes, comments, and related settings.
• Document and audio data such as uploaded files, metadata, document content, multitrack information, and sharing settings.
• Technical and usage data such as browser, device, IP address, security logs, and performance and navigation information.
• Information received from WorkOS, which may include user ID, email, first name, last name, profile picture, locale, email verification status, and authentication-related data.
• Information received from Google if you choose to use Google Drive import.

• Provide, maintain, secure, and improve Sheetz.
• Create and manage accounts and control access to choir data.
• Store, organize, and deliver documents, audio, setlists, and share links.
• Allow owners and administrators to invite members and manage roles.
• Enable optional Google Drive import flows.
• Monitor performance, detect abuse, investigate problems, and prevent fraud.
• Comply with legal obligations and enforce our terms.

We do not use account or choir content to train public machine learning models.

If Brazilian data protection law applies, we process personal data under one or more of the following legal bases:

• performance of a contract or steps taken before entering into a contract;
• legitimate interests in operating, securing, and improving Sheetz;
• compliance with legal or regulatory obligations;
• consent, when a specific feature depends on it.

Sheetz may use Plausible Analytics as a privacy-focused analytics tool to understand visits to the site and general product usage.

If Sheetz later adopts cookies, advertising technologies, or more invasive forms of tracking, this policy and any required consent mechanism will be updated before those tools go live.

We may share personal data with infrastructure and service providers needed to operate Sheetz, including Convex for backend and storage, WorkOS for authentication, Cloudflare for hosting and edge delivery, Plausible for analytics, and Google if you choose to use Google Drive import.

• when required by law, court order, or legal process;
• to protect the rights, safety, and integrity of Sheetz, its users, or others;
• in connection with a merger, acquisition, reorganization, financing, or sale of assets.

We do not sell personal data.

Some providers used by Sheetz may process data outside Brazil or outside your country of residence. By using Sheetz, you understand that your data may be transferred to and processed in other jurisdictions where our providers operate.

Where required, we will use appropriate safeguards for international data transfers.

We retain data for as long as reasonably necessary to provide the service, preserve security, comply with legal obligations, and resolve disputes.

• account records may be retained while the account remains active and for a reasonable period afterward;
• choir, library, document, and setlist data may be retained until users delete them or they are removed from the service;
• share links and related metadata may be retained until they expire, are deleted, or are removed by internal retention processes;
• logs, diagnostics, and security records may be retained for different periods depending on operational and legal needs.

Backups and cached copies may remain for a limited period after deletion.

We use reasonable technical and organizational measures to protect personal data. Those measures may include access controls, authentication, managed infrastructure, signed file-delivery flows, and provider-level security features.

No system is completely secure, and we cannot guarantee absolute security.

Depending on the law that applies to you, you may have the right to:

• confirm whether we process your personal data;
• access your personal data;
• correct incomplete, inaccurate, or outdated data;
• request anonymization, blocking, or deletion of unnecessary or excessive data;
• request portability where applicable;
• obtain information about sharing with third parties;
• withdraw consent where consent is the legal basis;
• object to certain processing activities.

To exercise your rights, email privacy@usesheetz.com. We may need to verify your identity before completing your request.

Sheetz is designed for choirs and their organizers and is not intended for unsupervised use by children. We do not knowingly collect personal data directly from children in violation of applicable law. If you believe a child provided information improperly, contact us so we can review and address the issue.

Based on the current repository state, Sheetz does not yet include a live production payment flow. If paid plans or one-time purchases are activated in the future, this Privacy Policy will be updated to identify the payment processor, the billing data involved, and the applicable commercial terms.

We may update this Privacy Policy from time to time. If we make material changes, we will update the last updated date and, where required, provide additional notice.

• Product: Sheetz
• Website: https://usesheetz.com
• App: https://sheetz.carneloot.com
• Privacy email: privacy@usesheetz.com

For privacy questions, requests, or complaints, contact privacy@usesheetz.com.