This page documents our full compliance with Google's API Services User Data Policy and Limited Use requirements.
Docs & PDF Mail Merge's use of data obtained from Google APIs complies strictly with the Limited Use requirements. Specifically:
Google Workspace data (Sheets, Docs, Drive) is used exclusively to perform the document merge and PDF generation functionality that users directly request. No secondary uses exist.
Google Workspace data is never transferred, sold, disclosed, or made available to any third party, including data brokers, aggregators, or analytics providers.
Google Workspace data is never used for advertising purposes, targeted advertising, retargeting, or advertising-related profiling of any kind.
Google Workspace data obtained through the API is never used to train, improve, or validate any artificial intelligence or machine learning model — generalised or specific.
Since no user data is transmitted to developer servers, no developer personnel can access user document content. Human access is restricted solely to user-initiated support, security incident response, and legal obligations.
The Add-on uses the minimal OAuth scopes necessary: drive.file (not drive), documents.currentonly (not documents), ensuring access is restricted to only files the user explicitly interacts with.
"The use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements."
The following OAuth scopes are requested and are the minimum required for Add-on functionality:
| Scope | Justification | Limited to |
|---|---|---|
| drive.file | Copy template Docs, upload PDF files to Drive | Only files Add-on creates or user explicitly opens |
| documents.currentonly | Replace placeholders in document copy | Only the current document being processed |
| script.container.ui | Display Add-on sidebar within Google Sheets | UI rendering only, no data access |
| script.external_request | Call Google Drive and Docs REST APIs (within Google infrastructure) | Restricted to google.com API endpoints |
| script.locale | Read locale for date format in generated documents | Read-only locale preference, no user data |
Docs & PDF Mail Merge does not operate a backend server. All processing runs within Google Apps Script on Google's infrastructure. The urlFetchWhitelist in the project manifest restricts external network calls to Google's own API endpoints only. No user data (document content, spreadsheet values, or personal information) is ever transmitted outside of Google's infrastructure.
For questions related to our Google API compliance practices:
Email: brahim.charhoune20@gmail.com
We respond to compliance inquiries within 48 hours.