SheetApps User Guide

Backups & data recovery

SheetApps protects your workspace data with backups, restore, a recycle bin, and — on higher plans — hosted automated backups. Workspace admins manage all of it from the Admin console → Data tab, which also shows storage used and a per-app breakdown.

• Backup workspace (free, every plan) downloads a .zip of every app's data, schema and a manifest to your own device — nothing is stored on SheetApps. Sensitive fields (SSN / card / rule-flagged) are written as encrypted ciphertext when field-encryption is on, otherwise masked; card numbers are always reduced to their last 4 digits, so a full number is never in a backup.
• Restore from file (free, every plan) uploads such a .zip and rebuilds the workspace in one step. It is non-destructive: each record is matched to its own row by Record ID, matching records are updated, new ones are inserted, and nothing is deleted. Apps deleted since the backup are brought back — from the recycle bin if still there, otherwise re-created from the schema stored in the backup.
• Recycle bin: deleting an app moves it here, where it stays restorable for 30 days before a sweeper purges it for good. Delete forever removes it now and frees the plan's app slot immediately.
• Delete data (per app, in the table): permanently wipes an app's records across all of its forms — and their change history — while keeping the app and its setup, so you can start it fresh. The dialog adds an opt-in Include user data checkbox (also remove non-owner users from the app — their access and saved views; the owner and admins are kept). Nothing here goes to the recycle bin, so export or back up first.
• Hosted automated backups (Max / Enterprise, annual): SheetApps captures a daily snapshot and keeps it for a retention window you choose (Max 1–7 days, Enterprise 1–30), with Backup Now and one-click restore. Retained snapshots count toward your plan's storage.
• Retention & purge: the Housekeeping tab is where you set how long the workspace keeps its audit log, billing history, and messages, and the change history of app records — and purge or export them. Each record also keeps a per-field change history you open from the record itself.