Privacy Policy

1. Who we are

SheetsBoss ("SheetsBoss", "we", "us") builds SheetsBoss Contact, an add-on for Google Sheets available on the Google Workspace Marketplace. This policy covers the add-on only. Our website, sheetsboss.com, is covered by a separate site-wide Privacy Policy.

For the purposes of the UK and EU GDPR, SheetsBoss is the controller of the small amount of data described in section 2 that we collect directly — your account email address. For the contents of your spreadsheet, you are the controller; the add-on acts on your instructions, inside your own Google session, and we never receive that content.

You can reach us any time at getsheetsboss@gmail.com.

2. What data we handle

It is worth separating two different things, because they do not end up in the same place.

What we do not collect

• We do not copy, export, sync or back up your spreadsheets, contact lists or outreach notes.
• We do not read the emails or texts you write, and we never see their contents — they are composed in Gmail or your own messaging app, not by us.
• We do not ask for, and cannot see, your Google password. Authentication is handled entirely by Google.
• We do not build advertising profiles, and we do not sell personal data to anyone.

3. Google user data and Limited Use

When you install SheetsBoss Contact, Google shows you a consent screen listing the scopes the add-on requests. Here is what each one is actually for:

• See, edit and create the spreadsheet you open with this add-on. Needed to read the row you clicked and to write your note back into your notes column. Scoped to the file you currently have open, and only while the sidebar is running.
• Display and run third-party web content in dialogs and sidebars. The sidebar and its dialogs are the add-on. This is the standard Workspace permission for any add-on with a user interface, and does not let the add-on read or modify your data beyond what the first scope already covers.
• See your primary Google Account email address. Needed before you can use the add-on, so we can contact you about it (see section 4).

SheetsBoss' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely, that means:

• We only use Google user data to provide and improve the features you see in the add-on.
• We do not transfer Google user data to third parties except as described in section 5.
• We do not use Google user data for advertising of any kind.
• We do not allow humans to read Google user data, unless you have given explicit permission for a specific support request, it is necessary for security purposes or to comply with applicable law, or the data is aggregated and anonymised.
• We do not use Google user data to develop, improve or train generalised or generative AI or machine-learning models.

4. How we use data

• To make the add-on work. Reading the selected row so the sidebar can offer you the right actions, and writing your outreach notes back into your own column.
• To email you. We use your account email address to send occasional updates about SheetsBoss Contact and general SheetsBoss news. You can opt out at any time — see section 8.
• To keep the service running and secure.Diagnosing errors, preventing abuse and keeping the add-on's backend available.

We do not use your data for automated decision-making that produces legal or similarly significant effects.

5. Who we share data with

We do not sell personal data and we do not share it for cross-context behavioural advertising. We use a short list of service providers (processors) to run the add-on:

Each processor is bound by a written agreement to use the data only on our instructions. We may also disclose data if we are legally required to, or if it is necessary to protect the rights, safety or property of SheetsBoss or others. If SheetsBoss is ever involved in a merger, acquisition or sale of assets, we will give notice on this page before your data becomes subject to a different policy.

6. How long we keep things

• Spreadsheet content: not retained at all. Held in memory in the sidebar while you use it and released when the sidebar closes.
• Your account email address: kept until you ask us to delete it from our server, for example when you no longer need to use the add-on. You can ask us to delete it at any time.
• Server logs: retained by our hosting providers on their standard schedules, typically no more than 30 days.

7. Security

All traffic between the add-on and Google, and between the add-on and our backend, is encrypted in transit with TLS. Data we store is encrypted at rest by our database provider. Access to our production systems is restricted to the people who operate the add-on and protected by multi-factor authentication.

No system is perfectly secure. If we ever become aware of a breach affecting your personal data, we will notify you and the relevant regulator where the law requires it.

8. Your choices and rights

Removing the add-on

You can uninstall SheetsBoss Contact at any time from Extensions → Add-ons → Manage add-ons in Google Sheets, or from your Google account permissions page. That revokes every permission you granted. Your notes stay where they are — they are ordinary cell text in your own column, so removing the add-on changes nothing in the sheet.

Opting out of email

Every email we send about the add-on includes an unsubscribe link, or you can email getsheetsboss@gmail.com and ask us to stop.

Your data rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent. California residents have the rights to know, delete, correct and opt out of sale or sharing under the CCPA/CPRA — we do not sell or share personal data, and we will never discriminate against you for exercising a right.

To exercise any of these, email getsheetsboss@gmail.com from the Google account you use with the add-on. We answer within a working day and complete requests within 30 days. If you are in the EEA or UK and think we have got it wrong, you may complain to your local supervisory authority.

9. Children

SheetsBoss Contact is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, write to us and we will delete it.

10. Changes to this policy

When we change this policy we update the "Last updated" date at the top of the page. If a change materially affects how we handle your data, we will say so prominently on this page — and, where we hold your email address, by email — before it takes effect.

11. How to reach us

Privacy questions, data requests and complaints all go to the same place: getsheetsboss@gmail.com, or through the contact form. A real person reads it.