Slicemail
Privacy policy
Last updated: [DATE]
Slicemail is a Google Sheets add-on that sends reports by email from data in the spreadsheet where it is installed. It is published by [LEGAL NAME], [COUNTRY]. Contact: slicemail@enayatullah.com.
What the add-on does not do
It has no server. Nothing you open, read or send through it is copied to the publisher or to any third party. It makes no analytics calls, sets no tracking identifiers, and shows no advertising. The publisher cannot see your spreadsheets, your Docs, your recipients or your emails.
What it reads
When you open it, and when a report you scheduled runs, and only inside that spreadsheet:
- The cells, their displayed text, and their formatting (fill, text colour, bold, italic, alignment) in the tabs and ranges your reports use.
- The Google Doc that holds your reports, including its tabs: the one Slicemail made, or one you chose in Google's Drive picker. It cannot open any other file in your Drive.
- Your Google account's email address, to show your sender domain and to mark recipients outside it.
What it writes
Only when you ask it to:
- Email sent from your own Google account to the recipients your report selects from your data. Mail is sent with Google's Apps Script mail service, so it counts against your daily sending quota.
- A log tab called "Slicemail Log" in your spreadsheet, one row per send: time, report, result, reason, recipients, copied addresses, and a fingerprint of what was sent. It contains email addresses taken from your own data. You can delete the tab.
- Tabs in your template Doc, when you create a report or save one from the editor.
- Demo tabs in your spreadsheet, when you choose "Create demo data".
- A Google Doc in your Drive, called "Slicemail reports" and the spreadsheet's name, when you choose "Get started". It holds your reports; you own it and can delete it.
- A scheduled run, when you schedule a report: an hourly background run, under your account, builds the report when it is due and holds it. It sends nothing to your recipients until you approve it in the sidebar. It sends one email to you when a run is held, missed or failed. Pausing or removing the schedule stops it at once; removing your last schedule removes the background run.
What it stores
Google's Apps Script storage, inside your own account, not with the publisher:
- In the spreadsheet's properties: which Doc is your template, which tab is your roster, its email and tag columns, the sender name and reply-to address if you set them, how many recipients of each report were sent so far, each report's schedule with the address of the person who set it, and a record of its last 14 scheduled runs (date, result, and a fingerprint of what was built).
- In your browser, on your device: while you edit a report in the editor, a copy of the unsaved text, so it can be offered back if you close the window. It is removed when you save or discard it, or by clearing the browser's site data. It is not sent anywhere.
Removing the add-on or deleting the spreadsheet removes it. Nothing is kept on any server.
What leaves your account
Only the emails you send, to the recipients you choose, through Google, and the alerts about your own scheduled runs, which go to you.
The add-on's sidebar and editor pages load two fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), so Google receives a normal web request from your browser to serve them. No spreadsheet content is part of that request. When you choose a Doc in Settings, Google's Drive picker loads from apis.google.com and shows your own Drive to you; the add-on learns only the Doc you pick.
Google may give the publisher aggregate error reports for the add-on, which contain error messages and stack traces. [Verify before publishing what these include for a published add-on, and edit this paragraph to match.]
Google user data
The add-on's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data is used only to provide the add-on's visible features: previewing and sending the reports you write. It is not used for advertising, not sold, not shared with third parties, and not read by people.
Permissions
| Permission | Why |
|---|---|
| See, edit, create and delete this spreadsheet (current file only) | Read the tables a report uses; write the log tab and demo tabs |
| See, edit, create and delete only the specific Google Drive files you use with this app | Read the Doc your reports are kept in, and write tabs to it when you create or save a report |
| Send email as you | Deliver the reports |
| Display and run third-party web content in prompts and sidebars | The add-on's own menu, sidebar and editor |
| See your primary Google Account email address | Show your sender domain; mark recipients outside it; name you in the log |
Your choices
- Do not send: nothing leaves until you confirm, and each send shows who gets what first.
- Delete the log tab, the demo tabs, or any template tab you no longer want.
- Revoke access at <https://myaccount.google.com/permissions>. The add-on stops working and keeps nothing.
Children
The add-on is for people who run reports at work or in an organisation. It is not directed at children.
Changes
If this policy changes, the date above changes, and a change that affects what the add-on reads or sends is described in the add-on's listing before it ships.
Contact
[LEGAL NAME], [ADDRESS OR COUNTRY]. slicemail@enayatullah.com.