Privacy Policy

1. Overview

Docs & PDF Mail Merge ("the Add-on", "we", "us", "our") is a Google Workspace Add-on that operates entirely within your Google Workspace environment. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy applies to all users of the Docs & PDF Mail Merge Google Workspace Add-on. By installing and using the Add-on, you agree to the practices described in this policy.

2. Data We Access

The Add-on accesses only the minimum data necessary to provide its core functionality. We access the following Google Workspace data:

• Google Sheets data: The content (rows, columns, cell values) of the active spreadsheet you have opened and chosen to use with the Add-on. This data is used solely to populate document templates.
• Google Docs files: The content of Google Docs templates you explicitly select via the Google Picker. The Add-on reads and modifies copies of these files to replace placeholder text.
• Google Drive files: The Add-on creates, copies, and uploads files (temporary document copies and final PDF exports) within your Google Drive, using only the drive.file scope, which restricts access to files the Add-on itself creates or that you explicitly open.
• User locale: Your locale setting is used to format dates correctly in generated documents.

We do not access Gmail, Google Calendar, Google Contacts, Google Photos, or any other Google service not listed above.

3. How Data Is Processed

All processing occurs within Google's infrastructure using Google Apps Script, the Google Docs API, and the Google Drive API. Specifically:

• Your Sheets data is read in-memory within Google's servers (Apps Script runtime) to build placeholder maps.
• A temporary copy of your Docs template is created in your Drive, modified with your data via the Docs API, then exported as PDF.
• The temporary copy is moved to Trash immediately after PDF generation.
• The final PDF is saved in a folder called Docs & PDF Mail Merge – Output in your own Google Drive.
• No data is transmitted to our servers. The Add-on has no backend server that receives, stores, or processes your documents or spreadsheet data.

4. Data Storage & Retention

The Add-on stores only the following non-sensitive configuration data in Google Apps Script's UserProperties service, which is scoped to your Google account and the Add-on only:

• The Google Drive file ID of your selected template
• The name of the selected spreadsheet tab
• Your saved clause names and text content
• Your saved conditional rules (column names, match values, clause references)

This configuration data never leaves Google's infrastructure. It is not accessible to us or any third party.

Data retention: Configuration data persists in UserProperties until you uninstall the Add-on or manually clear it. Generated PDFs are stored in your Google Drive indefinitely unless you delete them. We do not retain any copies of your documents or data on external servers.

On uninstall: All UserProperties data is automatically deleted when you remove the Add-on from your Google Workspace account. Generated PDF files remain in your Google Drive under your control.

5. Data Sharing & Third Parties

We do not share your data with any third parties. There are no third-party analytics, advertising, or tracking services embedded in this Add-on.

• We do NOT sell your data to any third party.
• We do NOT share your data with advertisers or marketing companies.
• We do NOT share your data with data brokers.
• We do NOT use your data for advertising or marketing profiling.
• We do NOT transfer your Google Workspace data to any external server.
• We do NOT use your data to train or improve AI or machine learning models.
• We do NOT use your data for any purpose other than providing the document generation functionality you requested.

6. Google API Services User Data Policy

In particular, we confirm:

• Data from Google APIs is used only to provide and improve user-facing features visible within the Add-on.
• Data from Google APIs is not used for serving advertisements.
• Data from Google APIs is not shared, sold, or transferred to third parties except as necessary to provide the Add-on's core functionality, and only with your explicit action (e.g., saving a PDF to your own Drive).
• Human access to user data is limited to: (a) support requests you initiate, (b) security incident investigation, and (c) legal compliance obligations. In practice, since no data is transmitted to our servers, human access to your document or spreadsheet content is not possible.

7. Security

• All API calls are made over HTTPS/TLS using OAuth 2.0 Bearer tokens issued by Google.
• OAuth tokens are used in-memory only and are never logged or stored.
• The Add-on uses the principle of least privilege — only the minimum OAuth scopes necessary for functionality are requested.
• The drive.file scope is used instead of broader drive scopes, ensuring the Add-on can only access files it creates or that you explicitly open.
• No user credentials are ever collected, transmitted, or stored by the Add-on.

8. Children's Privacy

This Add-on is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided personal data through this Add-on, please contact us at the address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through an update notice in the Google Workspace Marketplace listing. Continued use of the Add-on after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

For any questions about this Privacy Policy or your data, please contact us at:

Email: brahim.charhoune20@gmail.com

We aim to respond to all privacy inquiries within 72 hours.