Privacy Policy
Information You Provide Us
Last updated: September 15, 2026
This Privacy Policy describes how Gigasheet, Inc. ("Gigasheet," "we," "our," or "us") collects, uses, and shares information when you use gigasheet.com, our hosted services, and related software (the "Service"). It should be read together with our Terms of Use at gigasheet.com/terms-of-use. Capitalized terms not defined here have the meanings given in the Terms of Use.
Account and contact information. When you sign up as a user, customer, vendor, or partner, request a demo, or register for an event, we collect information such as your name, email address, company, job title, phone number, and billing details. We use this information to provide the Service, process payments, respond to your requests, provide support, and send Service-related notices. We may also send you marketing email about Gigasheet products, features, events, and offers. You can opt out at any time using the unsubscribe link in any marketing message or by contacting support@gigasheet.com. Opting out does not stop Service-related notices.
Payment information. Online purchases are processed by Stripe, and Gigasheet does not store full payment card numbers. Customers under a signed Order Form typically pay by invoice or ACH, and we retain the billing details needed to invoice and collect payment. Stripe's handling of your information is governed by its own privacy policy.
Your Content. You may upload data to the Service. You retain ownership of Your Content as described in the Terms of Use. We do not claim ownership of any text, data, information, or files that you upload, share, or store in Gigasheet. You control who can access your files, and we will not share Your Content with others except as described in this Policy. The Service is not intended to receive protected health information unless a business associate agreement is in place, so please do not upload PHI without one.
Artificial Intelligence (AI) use. Your personally identifiable information is not shared with third-party AI providers. If you use Gigasheet's AI-powered features, such as Sheet Assistant, the prompts you compose and metadata about your file (such as column names, data types, and a small sample of rows) may be sent to a third-party AI provider, currently including OpenAI, to process your request. Your full dataset is not sent to an AI provider without your explicit action, such as sharing a file or running an enrichment that uses an AI provider. We do not use your data to train AI models. See the Terms of Use for details.
Integration with Google products (Google Analytics, Drive, Workspace). The only data gathered from Google's APIs are the elements you specifically select through the Gigasheet app. No other records, documents, or data within your Google Analytics, Google Drive, or Google Workspace are accessed. A copy of the selected data or file is made so that it can be analyzed in Gigasheet. None of the data gathered is used for marketing purposes or given to affiliates. Gigasheet adheres to Google's Limited Use Requirements.
Retention. We retain personal information for as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law. Files and analyses in your account remain until you delete them or close your account. As described in the Terms of Use, we may remove stored data from free-tier, cancelled, or downgraded accounts, so export anything you need before downgrading or cancelling. You may request deletion of your data by contacting support@gigasheet.com.
Publicly Available Healthcare and Provider Information
Gigasheet collects and processes healthcare information that government agencies, health plans, health insurance issuers, hospitals, and other organizations make publicly available. Sources may include the National Plan and Provider Enumeration System, or NPPES; Transparency in Coverage machine-readable files; Hospital Price Transparency machine-readable files; provider directories; publicly available review and ratings sites; and other government or publicly accessible healthcare datasets. Our use of this information is also described in the Gigasheet Data section of our Terms of Use.
This information may include provider names, National Provider Identifiers, taxonomy codes, professional contact information, practice locations, organizational affiliations, billing codes, payer and hospital pricing information, negotiated rates, and related file metadata.
We use this information to:
- Organize, normalize, clean, combine, and enrich public healthcare data
- Operate the Price Transparency Explorer and related products and services
- Calculate benchmarks, market comparisons, rate scores, and other analytical results
- Provide healthcare research, market intelligence, and data-analysis tools
- Identify and correct data-quality or attribution issues
Some information displayed by Gigasheet is taken directly from a public source, while other information, including benchmarks and market comparisons, is calculated by Gigasheet using the published source data. Providers generally do not submit the underlying provider or pricing records directly to Gigasheet.
Public source data may be incomplete, outdated, incorrectly reported, or incorrectly associated with a provider. Individuals and organizations may ask Gigasheet to review displayed provider information by submitting a request through our Request a Review of Provider Information page.
When you submit a review request, we may collect the information you provide, including your contact information, relationship to the provider, the page or information at issue, the reason for your request, supporting documentation, and information used to verify your identity or authority to act for the provider. We use this information to:
- Verify the requester’s identity or authority
- Investigate the relevant source data and Gigasheet’s processing
- Communicate with the requester
- Correct, annotate, or suppress information where appropriate
- Prevent fraudulent or abusive requests
- Maintain records of our review and response
We may share information submitted with a review request with our service providers, legal or professional advisers, or the publisher of the underlying source data when reasonably necessary to investigate or resolve the request. We retain review-request information for as long as reasonably necessary to process the request, document our response, comply with applicable law, and protect Gigasheet and its users.
Submitting a request does not guarantee that information will be removed. Subject to applicable law, Gigasheet may continue to display accurate professional and pricing information obtained from public sources. We may correct, annotate, or suppress information when appropriate, including in response to inaccurate attribution, outdated information, personal contact information, substantiated safety concerns, or applicable legal requirements.
A correction or suppression by Gigasheet does not change the information maintained by CMS, a health plan, hospital, government agency, or other original publisher. Where appropriate, the requester may also need to correct the information directly with the original source.
Nothing in this section limits any rights available under applicable privacy or data-protection law.
CMS treats NPPES information as FOIA-disclosable and directs providers to correct source records through NPPES. Transparency in Coverage rules separately require applicable files to be publicly accessible to any person without charge or access conditions.
Information About How You Use Our Services
When you use the Service, we automatically collect records of your activity, such as files uploaded, queries run, analyses performed, filters applied, and features used. This information is stored on our servers until you delete it or close your account. If you share results with others, copies remain viewable by the people you shared them with even after you delete the original. We do not share your queries or data with anyone unless you direct us to through the Service.
Gigasheet does not sell personal information, does not maintain files on individuals' purchases, and does not collect consumer information to target advertising. We do not provide consumer marketing databases or the means to produce them.
When you visit gigasheet.com, we and our service providers place cookies and similar technologies on your device. We use them for authentication, security, and performance, and for analytics and marketing, including Google Analytics, HubSpot, and social sharing tools, to understand how visitors use the site and to measure our marketing. Where required by law, we ask for your consent through the cookie banner before setting analytics or marketing cookies, and you can change your choice at any time through the banner or your browser settings. Cookies used for authentication and security are required for the Service to work. The exact cookies we use change from time to time.
When you access any Gigasheet website, network, server, or other electronic asset, our servers automatically record information that your browser sends whenever you visit a website. These logs may include the nature and content of your web request, your Internet Protocol address (and approximate geographic location), browser type and version, browser language, the date and time of your request, and one or more cookies that may uniquely identify your browser. In the event of an actual or attempted unauthorized or malicious access to our website or servers, we may use this information to conduct investigations and to protect the integrity of your information. We may preserve your information if we believe it is reasonably necessary to protect our systems, enforce our Terms of Use, or address any security or technical issues.
Your Communications With Us
When you contact us by email, chat, support ticket, web form, or phone, or when you request a demo or attend a webinar, we collect the contents of those communications and your contact details. We use them to respond to you, provide support, improve the Service, and, where permitted, follow up about Gigasheet products. Our customer relationship and support tools (for example, HubSpot) store these communications on our behalf. We do not share your communications with third parties except as described under "When We Share."
Gigasheet may collect information about sites that have linked to our sites, or sites that we link to. Therefore, Gigasheet may collect information about the website you came from when you were directed to us, or the website you visit as a result of a link on our site.
The Service is intended for business users and is not directed to anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it. To request deletion of any such information, contact us at privacy@gigasheet.com.
How We Protect Your Information
While no measures can ever guarantee absolute security, Gigasheet takes commercially reasonable and appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data, including data that relates to your personally identifiable information, which we update to stay consistent with industry standards. These include internal reviews of our data collection, storage and processing practices and security measures, as well as physical security measures to guard against unauthorized access to systems where we store personal data. We restrict access to personal information to Gigasheet employees, contractors and agents (including third party hosting platforms) who need to know that information in order to operate, develop or improve our services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.
Gigasheet processes personal information only for the purposes for which it was collected and in accordance with this Privacy Policy. We review our data collection, storage and processing practices to ensure that we only collect, store and process the personal information needed to provide or improve our services or as otherwise permitted under this Policy. We take reasonable steps to ensure that the personal information we process is accurate, complete, and current, but we depend on our users to update or correct their personal information whenever necessary.
Gigasheet regularly reviews its compliance with this Privacy Policy. Please feel free to direct any questions or concerns regarding this Privacy Policy or Gigasheet’s treatment of personal information by contacting us by email to privacy@gigasheet.com. When we receive formal written complaints at this address, it is Gigasheet’s policy to contact the complaining user regarding his or her concerns. We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that cannot be resolved between Gigasheet and an individual.
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy of it, or object to or restrict certain processing. You can also opt out of marketing email at any time. To exercise any of these rights, contact us at privacy@gigasheet.com. We will verify your request and respond within the time required by applicable law. We do not sell personal information, and we will not discriminate against you for exercising your rights. If you are an employee or user of one of our customers, we may direct your request to that customer, since they control the account.
Information about healthcare providers that we obtain from public sources is described under "Publicly Available Healthcare and Provider Information." Providers who wish to review displayed information may use the request process described there.
Gigasheet is based in the United States, and the Service is hosted and operated there. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country. By using the Service, you acknowledge this transfer. Where required, we rely on appropriate safeguards for international transfers.
This Privacy Policy may change from time to time. We will post changes on this page and update the "Last updated" date at the top. If we believe the changes are significant, we will provide more prominent notice, which may include email notification. By continuing to use the Service after notice of a change, you accept the updated Policy. Questions about this Policy can be sent to privacy@gigasheet.com.
