Privacy Policy

DeliverySheet (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, and the choices you have when using https://www.deliverysheet.com.

We may collect information you provide directly to us, such as your name, email address, company name, and any content you submit through the service (including demand descriptions, raw intake text, and structured fields).

We may also collect technical information automatically, including IP address, browser type, device information, usage activity, referring pages, and cookies or similar technologies.

We use your information to provide, operate, maintain, improve, and secure the service.

We may also use it to communicate with you, send service updates, respond to support requests, detect abuse, and comply with legal obligations.

DeliverySheet uses the Anthropic API to process demand intake text and generate structured content. When you submit raw text through the intake form, that text is sent to Anthropic's API to produce a first draft of structured fields.

The free request check on our website (no account needed) works the same way: the text you paste is sent to Anthropic's API for that one check and is not stored by DeliverySheet. To limit abuse we keep a short-lived, in-memory count of checks per IP address, which is discarded within a day.

Anthropic does not use API inputs and outputs to train its models by default. Under Anthropic's standard API retention policy, inputs and outputs are automatically deleted from its backend within 30 days, subject to Anthropic's stated exceptions. For details, refer to Anthropic's privacy policy at anthropic.com/privacy.

All AI processing is performed server-side. Your Anthropic-bound content is never exposed to the browser directly.

Where applicable, we process personal data based on one or more of the following: your consent, performance of a contract, compliance with legal obligations, and our legitimate interests in operating and improving the service.

We do not sell your personal information.

We use the following third-party service providers to operate the service: Supabase (database and authentication infrastructure in AWS us-east-1 (Northern Virginia)), Hetzner Online (application hosting — the servers in Germany that run the service), Google (OAuth sign-in, and Google Analytics for usage measurement), Anthropic (AI processing), Resend (email we send you: the trial-ending notice, and the optional weekly workspace summary — the weekly one only if you switch it on, and only to the workspace owner), and Stripe (subscription billing and payment processing). Each provider processes only the data necessary for its function.

We may also disclose information when required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets.

We retain personal information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods may vary depending on the type of data and the purpose for which it was collected.

We may use cookies, local storage, and similar technologies to remember preferences, maintain sessions, understand usage patterns, and improve the service. Local storage is also used to remember marketing attribution parameters (utm_source and similar) from the link you arrived through.

For usage measurement we use Google Analytics, alongside our own first-party event records. In the EEA, the UK and Switzerland, analytics storage is denied until you make a choice in the consent banner; your choice is remembered and re-applied on later visits. We run no advertising, and the advertising storage and ad-personalisation signals of Google Analytics are switched off for every visitor.

You can usually control cookies through your browser settings, though disabling them may affect functionality.

We use reasonable administrative, technical, and organizational safeguards to protect your information.

However, no method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Your information may be processed and stored in countries other than your own, including through the hosting, database and AI infrastructure named in section 6.

Where required, we take appropriate steps to ensure such transfers are protected under applicable law.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal data.

To exercise these rights, contact us at tan.gravam@gravam.com.

The service is not directed to children, and we do not knowingly collect personal information from children without appropriate legal basis.

The service may link to third-party websites. We are not responsible for their privacy practices. For the services we actively use, refer to section 6.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date shown above.

Your continued use of the service after an update means the updated policy applies.

If you have questions about this Privacy Policy, contact us at tan.gravam@gravam.com.