1. Who We Are
Custom Count & Sum is developed by base:10, a sole developer based in Belgium (enterprise number 1040.204.739). Contact: email us.
2. What Data We Collect
We collect and store only the minimum data necessary to provide the
service. The Add-on uses the most restrictive access scope available
(spreadsheets.currentonly), meaning it can only access
the specific spreadsheet file you have currently open and active.
| Data | Why |
|---|---|
| Your Google account email address | To identify your licence and manage your subscription |
| Subscription plan and expiry date | To determine whether you have an active licence |
| Feedback messages (optional) | To respond to bug reports, questions, or feature requests you choose to submit |
| Contact form submissions (name, email, message) | To respond when you reach out via our website's contact form; processed through Google reCAPTCHA for spam/bot protection (see Third-Party Services below) |
| Team member email addresses (domain/team licences only) | When a domain administrator assigns a seat, we store the assigned member's email address and a record of who added or removed it, to manage and audit seat allocation |
We do not read, access, or store the content of any other spreadsheets in your Google Drive.
3. How We Use Your Data
- Licence verification — checking whether you have an active subscription each time you use a licensed feature;
- Transactional emails — sending payment confirmations or licence expiry reminders;
- Support — replying to feedback you submit via the add-on sidebar or our website's contact form.
We do not use your data for advertising, profiling, or any purpose other than those listed above.
4. Third-Party Services
We use the following sub-processors, each bound by their own privacy policies and a data processing agreement — we never sell your data or share it with third parties for their own marketing purposes.
| Service | Purpose |
|---|---|
| Stripe | Payment processing — handles your card details; we never see them |
| Google Firebase | Licence data storage (Firestore, EU region) |
| Google Cloud (Firebase Functions) | Serverless backend — licence checks, checkout, webhooks |
| Resend | Transactional email delivery (EU region) — sent from our own account, not from yours |
| Google reCAPTCHA | Spam/bot protection on our website's contact form — analyzes your IP address and browsing behavior to compute a risk score; no separate account or login required |
5. Data Storage & Security
Licence data is stored in Google Firebase Firestore in the Europe West region. Data is retained for as long as your account exists or as required by law. We use industry-standard security practices and rely on Google's infrastructure, which is ISO 27001 and SOC 2 certified.
Like most cloud services, our infrastructure providers (Google Cloud, Cloudflare) automatically log IP addresses in server access logs for security and abuse-prevention purposes, retained for a limited period. We do not use these logs to identify individuals or link them to your licence.
6. Your Rights (GDPR)
You have the right to:
- Access — request a copy of the personal data we hold about you;
- Rectification — ask us to correct inaccurate data;
- Erasure — request deletion of your data (note: this will deactivate your licence);
- Portability — receive your data in a machine-readable format;
- Objection — object to processing in certain circumstances.
These rights are guaranteed to EEA residents under GDPR — we extend the same rights to all users as a matter of policy, regardless of where you're located.
To exercise any of these rights, email us. We will respond within 30 days.
7. Cookies & Tracking
The Add-on itself does not use cookies or tracking technologies. Our public web pages (hosted on Firebase Hosting) use Cloudflare Web Analytics to measure aggregate page views. This service does not use cookies, does not track individuals across sites, and does not collect personal data.
8. Children's Privacy
The Add-on is not directed at children under 13. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Privacy Policy occasionally. Material changes will be communicated via the add-on or by email. Continued use of the Add-on after changes constitutes acceptance of the updated policy.
10. Contact
Privacy questions or data requests: email us.