Smartsheet General Privacy Notice

Last Updated: May 17, 2019

This notice applies where we process personal data through our Sites, during events, or in any other interactions with you outside of your use of the Services.

Personal Data We Collect

How We Use Personal Data

How We Share Personal Data

Blogs; Forums

Linked Sites; Third Party Widgets

Who We Are

Your Choices

Your Rights

Personal Data Retention

How We Protect Personal Data


International Transfers and Privacy Shield Notice

Changes to this Notice

How to Contact Us

English Version Controls



Personal Data We Collect

We may collect personal data directly from you, from third parties, or automatically when you use the Sites. We collect this personal data for the purposes outlined below in ‘How We Use Personal Data’. See this table for categories of personal data we collect.


How We Use Personal Data

We will only use your personal data if we have a lawful basis to do so, as illustrated by this table. Specifically, we use your personal data at your instruction or as follows:

Providing and Personalizing our Sites. To operate and administer the Sites and to provide you with the content you choose to access or request; to tailor web content we display to you in order to offer location customization (e.g., setting a default language) and to otherwise personalize your experience using the Sites. We use cookies and similar tracking technologies to automatically collect your personal data for this purpose (see our Cookie Notice).

Personalizing Events. To tailor event invitations we send or display to you in order to offer location customization (e.g., local event offerings). We use cookies and similar tracking technologies to automatically collect your personal data for this purpose (see our Cookie Notice).

Identifying Customer Opportunities. To identify and assess potential new users through tools like LinkedIn Sales Navigator, and to engage with individuals responding to web content produced by Smartsheet.

Sending Marketing Communications. For direct marketing, promotional, and other non-transactional communications (e.g., newsletters, calls, SMS, or push notifications) in order to share information about special offers, promotions, and events or to otherwise contact you about Smartsheet products or information we think may interest you, in accordance with your marketing preferences.

Displaying, Measuring Personalized Advertisements. To provide more relevant advertising to you on the Sites or third party platforms; to conduct related marketing research (e.g., by measuring the success of targeted advertising campaigns). We use cookies and similar tracking technologies to automatically collect your personal data for this purpose (see our Cookie Notice).

Managing Event Registrations and Contests. To plan and host events or webinars you’ve registered for or attend, including sending related communications to you; and to provide contests, promotions, and sweepstakes you’ve chosen to participate in or register for (contests may have additional rules relating to how we process your personal data).

Analytics and Improvement. To better understand how you access and use the Sites and Services; and for other research and analytical purposes, such as to evaluate and improve the Sites and to develop additional services, content, and features (e.g., if you choose to participate in a survey or user-interface study, we may use your email address to reach out with follow-up questions or additional studies).

Protect Legal Rights and Prevent Misuse. To protect the Sites, Services, and the rights of users and other individuals; to prevent unauthorized access and other misuse; and where we believe necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, or violations of our terms of use or this notice. We may use machine or deep learning technologies for these purposes (e.g., for fraud prevention or detection).

Comply with Legal Obligations. To comply with the law or legal proceedings (e.g., we may disclose data in response to lawful requests by public authorities, including responding to national security or law enforcement requests).

General Business Operations. Where necessary to the administration of our general business, accounting, recordkeeping, and legal functions.


How We Share Personal Data

We will not sell your personal data to a third party or allow a third party to use personal data we provide for its own marketing purposes. We may share information about you with your consent, at your request, or as follows:

To Our Service Providers. We use third party service providers to process your personal data to assist us in business and technical operations. Smartsheet has data processing agreements with such service providers limiting their use of and access to personal data to specific purposes. They provide services relating, but not limited to fraud detection and prevention, billing, customer support, internet and connectivity, marketing (direct mail, email, lead generation), event organizing, security, user experience.

To Infrastructure Processors. We use third parties for some of the infrastructure used to host content and personal data we process, including cloud providers. Smartsheet has data processing agreements with such service providers and their use of and access to personal data is limited to specific purposes.

To Affiliates. We may share your personal data with our affiliates for marketing or lead generation and qualification purposes.

As Custom Audiences. We may share a hashed (scrambled) version of your email address, name, city, state, or similar information with advertising partners to assist us in reaching you with more relevant advertisements outside of the Sites (and to measure the success of such campaigns); these partners are not permitted to retain, use, or disclose this information for their own third-party marketing purposes. If you’d like to opt out of custom audiences, complete this form.

As Required by Law. We release information about you if we believe we must do so to comply with the law or a subpoena, bankruptcy proceeding, or similar legal process. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

To Protect Rights. We may disclose information about you, such as your name, contact information, and billing information, to enforce our agreements with you or to protect the rights and safety of Smartsheet, our customers, our users, and the general public, or as evidence in litigation in which we are involved.

As Aggregate and Anonymized Information. We may share aggregate or anonymized information about you with our third party service providers for our internal business purposes which may include marketing, advertising, research, or similar purposes.

In a Business Transaction. If Smartsheet is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred to the acquiring entity as part of the transaction (provided that we inform the buyer it must use your personal data only for the purposes disclosed in this notice), and may also be reviewed as part of the due diligence review for the transaction (e.g.,we may need to provide a list of all customer accounts and payment histories).


Blogs; Forums; Testimonials

Our Sites may contain publicly accessible blogs and interactive features (e.g., the community website). Any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your information from our blog or community forum, please complete this form. With your consent, we may publish testimonials you share with us, which could contain personal data such as your full name and other information you choose to share. If you wish to update or remove your testimonial, please complete this form.


Linked Sites; Third Party Widgets

Links to Other Websites. Our Sites may include links to other websites with privacy practices that may differ from ours. Any information you submit to a website not belonging to Smartsheet is governed by that site’s privacy statement, not this one.

Plugins and Social Media Widgets. Our Sites may include social media features and widgets (‘widgets’), such as a ‘share this’ button or other interactive mini-programs. Widgets can be used to provide you specific services from other companies (e.g., displaying the news, opinions, music, etc.). Personal data such as your email address may be collected through widgets. Cookies may also be set by widgets to enable them to function properly. Widgets displayed on our Sites are not hosted by Smartsheet and are subject to the privacy policies of the third party company providing the widget, and not this notice.