Smartsheet

Smartsheet User Agreement: Key Terms and Risks

*This summary addresses the supplied User Agreement, last updated April 3, 2026. It is not a substitute for the separate Privacy Notice, Data Processing Addendum (DPA), Security Practices, or applicable Order.*

1. Data Collection and Usage

Customer Content

“Customer Content” includes data, images, files, and other content entered into or uploaded to Smartsheet by users or through connected third-party products, including content generated or displayed within the Services.

Smartsheet may process Customer Content:

• To provide, support, and optimize the Services;
• At the Customer’s written request or through service access controls;
• To address technical problems or agreement violations; and
• As required by law.

The Customer retains ownership of Customer Content. However, it grants Smartsheet a worldwide, non-exclusive license to process that content for these purposes.

Account and system data

“Account Information” includes payment, billing, profile, and other account information. “System Data” includes technical, statistical, usage, learned, pattern-based, configuration, workflow, and integration data generated through use of the Services.

Smartsheet acts as a data controller for Account Information and System Data, rather than merely processing it on the Customer’s instructions. The separate Privacy Notice governs personal data in these categories and should be reviewed for details about data types, cookies, retention, and legal bases.

2. User and Customer Rights

• The Customer retains intellectual-property rights in Customer Content and confidential information.
• Customers can download backup copies of Customer Content during the Term using available self-service tools or by written request.
• After termination, the Customer may request 30 days of read-only access to download content.
• Smartsheet generally promises to delete and make Customer Content unrecoverable within 180 days after termination, subject to legally required or compliance-related retention.
• Individual privacy rights—such as access, correction, deletion, objection, or portability—are not detailed here and instead depend on applicable law and the separate Privacy Notice/DPA.
• Feedback submitted to Smartsheet may be used permanently, worldwide, and without compensation.

3. Third-Party Sharing

Smartsheet may use subprocessors and other third parties to provide the Services. They must be subject to confidentiality, security, and processing obligations substantially similar to those in the Agreement. Smartsheet remains responsible for their acts concerning Smartsheet’s contractual obligations.

Subprocessors are identified on Smartsheet’s Subprocessors page. The Agreement specifically prohibits these service providers from using Customer Content to develop, improve, or train third-party foundation models.

Disclosure may also occur:

• When authorized by the Customer;
• As required by law or legal process; or
• Through third-party products, which are governed by separate third-party terms and may not be covered by Smartsheet’s warranties or liability.

Unless the Customer opts out in writing, Smartsheet may publicly identify the Customer and use its name or logo in promotional materials.

4. AI and Machine-Learning Training

The Agreement distinguishes between Customer Content and System Data:

• Customer Content may be processed to provide, support, or optimize Smartsheet’s Services.
• Smartsheet may use System Data and Account Information for lawful business purposes, including developing, improving, training, operating, and commercializing its Services for other customers.
• If System Data is generated from Customer Content, Smartsheet must aggregate, de-identify, or anonymize it so it cannot reasonably identify the Customer, a user, or customer-specific information, and Smartsheet may not attempt re-identification.
• Third-party processors may not use Customer Content to train third-party foundation models.

AI outputs are probabilistic, supplied “as-is,” and are not professional advice. Customers must ensure human oversight before making business decisions based on AI.

5. Key Obligations and Restrictions

Customers must:

• Have all rights, permissions, and consents needed to upload and process their content;
• Comply with applicable laws, policies, documentation, limits, and acceptable-use rules;
• Protect login credentials and promptly report unauthorized access;
• Ensure users comply with the Agreement;
• Maintain human review of AI-supported decisions; and
• Follow export-control and sanctions laws.

Customers may not resell, sublicense, commercially distribute, frame, or provide shared access through one login to multiple individuals. Smartsheet may suspend access for overdue payments or suspected restrictions/IP violations.

Subscriptions generally auto-renew annually unless non-renewal notice is given at least 30 days before the term ends.

6. Liability and Disputes

Washington law governs. Disputes must generally be brought exclusively in state or federal courts in Seattle, Washington.

Except for specified matters, neither party is liable for indirect, consequential, special, punitive, lost-profit, lost-revenue, or business-interruption damages. Each party’s aggregate liability is generally capped at fees paid for the relevant Services during the preceding 12 months.

The cap and exclusions do not apply to certain restrictions, indemnity obligations, intellectual-property infringement or misappropriation, payment obligations, or taxes. Free Services have especially limited protections: no promised support, security, availability, accuracy, or data preservation, and data may be permanently lost.

7. Changes to the Agreement

Smartsheet may revise the Agreement by publishing an Updated Agreement on its website. Continued use after publication generally constitutes acceptance. If the Customer objects in writing within five days, the update applies at the beginning of the Renewal Term instead.

Customers may request notifications of material changes to the Agreement, Policies, Security Practices, and Privacy Notice through Smartsheet’s notification-request process. Five days is a short objection period, so customers should monitor notices and renewal dates closely.