This Privacy Policy explains what data the SheetCourier app for Windows handles. The short version: your contacts, your Excel lists, your mailings, your emails and your sending history stay on your own PC, and your emails go out directly from your PC through your own email account (Gmail, Outlook, Microsoft 365 or another provider), never through servers of ours. The only things that ever reach a server of Bosau Digital LLC ("we", "us") are license checks, the account actions you use in the app, optional anonymous usage statistics you can switch off, the support messages or feedback notes you choose to send, and the requests that load the "What's new" list and the in-app news banner. SheetCourier adds no tracking pixels to your emails, does not rewrite the links in them, shows no advertising and builds no profile of you. This policy covers the app; for the pythonandvba.com website itself, please see the website Privacy Policy.

1. Who We Are

SheetCourier is made by Bosau Digital LLC, the company behind pythonandvba.com. For any privacy-related question, contact contact@pythonandvba.com. Bosau Digital LLC is the data controller for the data described in this policy.

2. Data That Stays on Your PC

Everything SheetCourier works with is stored locally on your computer, in the folder SheetCourier inside your Windows user folder:

• Your contacts (names, email addresses, companies, notes and fields you add) are stored in the database on this PC, together with the contact lists you put them in. They are never uploaded to us
• Your mailings: for each one, who it goes to (your contact lists, where your Excel or CSV file is, or the addresses you typed or pasted), which columns hold the email address and the other fields, the subject and email text you wrote, the Excel tables or attachments you added, and the sending settings you chose
• Your sending history: for every email, the recipient's address and name, the subject as it was sent, the row of your sheet it came from (for a contact list, the contact it came from), and the result (sent, skipped, failed or "may have been sent", with a plain-English reason)
• Your "Don't email" list (addresses SheetCourier never emails)
• The email accounts you connect: the account type, your email address and the server settings, but not your password (see section 4)
• Your settings, including the name and reply email you last typed into the support form, and your license key, which is stored encrypted with Windows DPAPI so only your Windows user account can read it
• A small machine-bound counter for the 100 free emails per computer (kept in several places, including a hidden file named .sheetcourier in your user folder and a registry entry; it holds usage counts and a signature derived from your Windows installation, no names, addresses or email text)
• A local error log, automatic daily safety copies of the database (newest seven kept) and the safety copy SheetCourier makes before you restore a backup (newest three kept)
• A webview2 folder with the working files of Microsoft Edge WebView2, the component SheetCourier uses to show email previews. Scripts and remote content are switched off in these previews, and no data leaves your PC through it
• If SheetCourier ever has to repair a damaged database, the old file may stay behind as sheetcourier.db.damaged- followed by a date. You can delete it

Your Excel and CSV files stay where they are. SheetCourier reads them from your PC each time you open or send a mailing, so every send uses the current version of your list. When an email needs a picture or a PDF of a range, SheetCourier asks Microsoft Excel on your PC to make it. Your files are never uploaded to us. If another program has your list file locked, SheetCourier reads a temporary copy in the folder %TEMP%\SheetCourier\list-copies on your PC and deletes it right after reading; if the app was closed unexpectedly, leftover copies are deleted at its next start (copies older than about an hour).

Backups. Backup files you export are ordinary zip files saved wherever you choose; they contain your data, so treat them like the original (passwords are not included in a form another PC can read, so after a restore on another PC you enter them again). Exporting and restoring a backup uses a temporary database file in your Windows temporary folder (%TEMP%), which is deleted afterwards. Backups do not contain the free-email count or the anonymous install id used for usage statistics, and restoring a backup never takes over another computer's install id.

Uninstalling keeps your data. The SheetCourier folder deliberately lives outside the app's own install location, so removing the app from Windows leaves your contacts, mailings and history in place and reinstalling later brings them back. To erase your data, use the option in SheetCourier's Settings that deletes all of its data, or delete that folder yourself. The free-email counter's hidden file and registry entry stay on purpose, so the free emails cannot be reset by reinstalling; they contain nothing about you or the people you email.

3. How Your Emails Are Sent

SheetCourier sends every email directly from your PC through the email account you connected. Your emails never pass through our servers, and we never receive their content or your recipients' addresses. Depending on the account type:

• Gmail, Google Workspace, Yahoo, iCloud, Zoho and other providers: SheetCourier connects over an encrypted connection to your provider's outgoing mail server (for example smtp.gmail.com) and signs in with the password or app password you entered.
• Outlook on this PC: SheetCourier only connects to classic Outlook when it is already open on your computer; it never starts Outlook in the background. It hands each email to Outlook, which sends it from your account (the email waits in Outlook's Outbox until Outlook sends it) and keeps a copy in your Sent Items like any email you write yourself.
• Microsoft 365 and Outlook.com: you sign in with Microsoft, and SheetCourier sends through Microsoft Graph, Microsoft's official interface. It asks for three permissions: Mail.Send, used only to send the emails you start in SheetCourier (it does not allow reading your mailbox); User.Read, to show which account is connected; and offline_access, so you stay signed in between sessions. A copy lands in your Sent Items.

Your email provider (for example Google, Microsoft or Yahoo) processes the emails you send under its own privacy policy, exactly as it does when you send email any other way. When you use "Find my settings" or the domain check for your own domain, SheetCourier looks up your domain's public internet records (the entries that say which servers may send email for your domain, known as MX, SPF, DKIM and DMARC) through your normal internet connection; no server of ours is involved. SheetCourier does not add tracking pixels, does not rewrite or redirect the links in your emails, and does not report opens or clicks to anyone. Outlook, Microsoft 365 and Excel are products of Microsoft Corporation; Gmail is a product of Google LLC. SheetCourier is an independent product and is not affiliated with, endorsed by or sponsored by them.

4. Passwords and Sign-In Data

Passwords and app passwords for your email accounts are encrypted on your PC with Windows DPAPI, so only your Windows user account can read them. They are never written into the settings file, the database or any log in readable form, and they are never sent to us. Your SheetCourier license key is encrypted the same way in the settings file; it is sent only to our license server as described in section 5. If you connect Microsoft 365 or Outlook.com, the sign-in token Microsoft issues is kept in an encrypted cache on your PC, and removing the account in SheetCourier signs it out. SheetCourier does not use Google sign-in: Gmail connects with an app password (a special password Google gives you for apps), which is stored encrypted like any other password.

5. Data That Reaches Our Server

License checks

When you enter your license key, and when the app starts while a key is stored, SheetCourier verifies the key against our license server at api.pythonandvba.com. This sends your license key, the name of your PC (to enforce the per-computer limit of your license) and the app version. It never includes your lists, email addresses or email text.

When you open the Account & help page with an active license, the app automatically sends your license key to our server to load your license details (such as your plan) for display; the same happens when you press Refresh. Stopping the use of your license on a computer sends your license key and that computer's name, so the server can free the slot. The link to your account page opens in your browser and carries your license key, so the page knows which license you mean; the website Privacy Policy applies there.

Like any web server, our license server also receives your IP address with each request. It appears, with the approximate country derived from it, in our server logs, which are deleted after 14 days (90 days for warnings and errors). The computer names registered to your license are kept with your license record (when each was first seen and last used, and the app version) for as long as the license exists, together with a count of checks and when the license was last used. If a check fails, we keep the license key, IP address, approximate country, computer name and app version for up to 90 days to detect misuse of keys.

Anonymous usage statistics (optional)

Only the Microsoft Store version of SheetCourier sends usage statistics. The first time you start it on a given day, it tells our server "one install was active today". This ping carries a random install id made on your PC the first time it is needed (nothing about you, your PC or your Windows account can be derived from it), the app version, how the app was installed, whether the install runs the free or the licensed plan, and three totals for the life of the install: how many emails it has sent, how many times mailings were run, and how many mailings used an Excel table. Each total is a single number. The ping does not include your license key, and it never includes email addresses, names, file names, list contents or email text.

On the same random install id, the app also reports a few setup steps, each one only once, together with the time it happened: the first start, opening the welcome video (with which button was used), connecting an email account (with the type of account, such as Gmail or Outlook, never the address), the first test email, the first real mailing, the first use of an Excel table (with its kind: table, picture, PDF or Excel file), using up the free emails, opening the pricing page (with which button was used), and activating a license. When the app shows its "Enjoying SheetCourier?" card, it reports that the card appeared and what you chose (rate, close, send feedback, not now, or that the rating window could not open); it never reports a rating, because the Microsoft Store does not tell the app what you gave. These steps show us where new users get stuck, so we can make that part easier.

Like every request, these arrive with your IP address, which appears in our server logs as described under License checks; the usage records themselves keep only the approximate country derived from it, not the IP address. You can switch this off: turn off Share anonymous usage statistics in SheetCourier's Settings, and neither the daily ping nor the setup steps are sent at all; steps still waiting to go out are discarded. License checks and the other requests on this page keep working.

Support messages you send

The contact form in the app sends a message only when you press the button. It includes what you typed (topic, your name, your reply email address and your message), your license key, the app version, your plan and license check result, the number of free emails left (on the free plan), how the app was installed and your Windows version. If you leave diagnostics switched on, it also includes: the types of email accounts you connected (never the addresses), how many mailings you saved (the number only), how many emails in your recent runs were sent, skipped or failed (counts only), the result of a fresh check of your email account connection, and a short excerpt of the local error log. Before anything is sent, the diagnostics are cleaned automatically: email addresses, file names of your documents, private folder paths, phone numbers, your PC's name, and any keys or passwords that appear inside a web address are removed. You can read exactly what will be sent under What's included? before you press the button. Support messages never contain your lists, your recipients' addresses, your email text or your passwords.

Feedback notes you send

Choosing Send feedback on the "Enjoying SheetCourier?" card opens a short form, and nothing is transmitted until you press Send. A note carries what you typed, the email address you optionally enter (leave it empty and the note is anonymous), the app version, your license key when one is stored, whether the install runs the free or the licensed plan, how the app was installed and the Windows version. It does not include your PC's name or any diagnostics. Rating the app from that card opens the Microsoft Store's own rating window, which is Microsoft's service, not ours.

When you send a support message or feedback note, we check that the email address you entered can receive mail with Reoon (an email verification service) and deliver the message to us by email via Postmark. For a support message, Postmark also sends you a confirmation, and we create a task in our task list (Todoist) so it gets answered. If your email address is already in our self-hosted customer database (FluentCRM), it is tagged as "contacted support". To answer faster, we look up your license and purchase records with us. Like every request, these messages arrive with your IP address, which appears in our server logs as described under License checks. We keep messages and notes as support history for up to 24 months after your last contact, then delete them; ask us to delete them sooner.

What's new and the news banner

To show the "What's new" list, SheetCourier loads the release notes from pythonandvba.com, and to show the occasional news banner in the app, it loads a short product feed from api.pythonandvba.com. These requests ask for public information and send no personal data (they arrive with your IP address like any web request). Installation and updates come from the Microsoft Store.

Nothing else

Apart from your email provider (section 3) and the requests described in this section, SheetCourier sends nothing to anyone. There is no advertising, no automatic error reporting and no analytics beyond the switchable statistics above.

6. Microsoft Store

SheetCourier is distributed through the Microsoft Store, so installation, updates and the optional in-app rating window are handled by Microsoft, which may process install and usage statistics under its own privacy statement. We only see the aggregated numbers Microsoft shows to app publishers, never anything about you personally.

7. Purchases

Licenses are bought on our own checkout at buy.pythonandvba.com, not inside the app (payments by Stripe or PayPal). Your license key is sent to you by email. We receive your name, email address, billing country and order details from the checkout, and a VAT ID if you enter one. We never see your full card details. Please see the Stripe and PayPal privacy policies and our website Privacy Policy for details.

8. Legal Basis for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process the data described above under these legal bases:

• Contract performance: validating your license and delivering the product you bought
• Legitimate interests: enforcing the per-computer license limit, detecting misuse of license keys, keeping short-lived server logs to prevent abuse and diagnose faults, counting active installs and understanding where setup is hard through the switchable anonymous statistics, and answering the support messages and feedback notes you send
• Legal obligation: keeping transaction records where the law requires it

Your own mailing lists are your responsibility: when you email people with SheetCourier, you are the controller of their data, and obligations like consent and unsubscribe handling toward them are yours. The app helps with the mechanics (the "Don't email" list is checked on every send, and an optional unsubscribe line can be added), but it cannot obtain consent for you.

9. Data Sharing

We do not sell personal data. Purchase data is shared with the payment processors named above, and license records are stored by our hosting providers on our behalf. Support messages and feedback notes are shared only with the service providers that help us deliver and answer them (Reoon, Postmark, Todoist; see Support messages you send). Your lists and emails cannot be shared by us with anyone, because they never reach us in the first place.

Bosau Digital LLC is based in the United States, so the data described in this policy is processed in the United States and/or in the countries where our service providers operate. Where personal data of EEA or UK residents is transferred internationally, we and our service providers rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.

10. Data Retention

• License and activation records: kept for as long as your license is active and as required by law; this includes the computer names registered to your license
• Server logs: deleted after 14 days (90 days for warnings and errors)
• Failed license checks: deleted after 90 days
• Usage statistics: kept as anonymous daily records keyed by the random install id, with the app version, the plan flag, the totals and setup steps described above and the approximate country; they contain no license key and nothing that identifies you. There is currently no fixed deletion date for these records
• Support messages and feedback notes: kept as support history for up to 24 months after your last contact, then deleted. Our delivery log also keeps one summary line per message (the name you entered, your plan and the topic) or per feedback note (a short preview of it), without a fixed deletion date; ask us and we delete yours
• Everything on your PC: under your control alone. The app removes only its own housekeeping copies (daily safety copies beyond the newest seven, restore safety copies beyond the newest three); deleting all data in Settings removes the rest, except the free-email counter described in section 2

11. Your Rights

If you are in the EEA or the UK, you have the right to access, correct, delete, restrict or receive a copy of the personal data we hold about you (which is limited to license, purchase and support records), and to object to processing based on legitimate interests. Contact contact@pythonandvba.com and you will receive a response within 30 days. These requests are honoured for customers everywhere, not only where the law requires it.

You also have the right to lodge a complaint with your local data protection supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in the EEA you can find your national authority through the European Data Protection Board (edpb.europa.eu). We would welcome the chance to resolve your concern first, so please consider contacting us before you do.

12. Data Security

All communication between the app, your email provider and our servers uses encrypted connections. On your PC, your email passwords, your license key and Microsoft sign-in tokens are encrypted with Windows DPAPI so only your Windows account can read them; the rest of your data is protected by your Windows user account like your other documents.

13. Children's Privacy

SheetCourier is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest change. Material changes will be visible here before they take effect.

15. Contact

Related documents: Terms & Conditions · Privacy Policy · Refund Policy · EULA