The rule is written down in our data policy and enforced in code: we keep the schema, never the volume. Our database holds which spreadsheet is connected, what each column means, who on your team maps to which owner name, when follow-ups are due (their time and row — not their text), and a log of what the app did and who asked. That is configuration, and it is small.
Your leads, notes and numbers are read from the sheet when a screen needs them and held only in a short-lived, encrypted cache that expires on its own within ten minutes and is cleared whenever the workspace is written to. Even the audit trail’s before-and-after values go into a Changes tab inside your own workbook, so the record of what a field used to say lives beside the field.
Access is Google’s narrowest Drive permission, drive.file: the app can open the spreadsheet it created for you, or one you explicitly picked, and nothing else in your Drive. If you stop using the app, the sheet simply stays where it always was — a normal Google Sheet that works without us. The FAQ covers what happens to your data when a subscription ends.