1. Who We Are
Sheet Sync is developed by base:10, a sole developer based in Belgium (enterprise number 1040.204.739). Contact: email us.
2. What Data We Collect
Sheet Sync's whole purpose is keeping ranges in sync across spreadsheets you choose — so unlike a single-sheet add-on, it necessarily reads and writes the specific ranges you link, not just the file you currently have open. It never reads or writes any range you have not explicitly linked.
| Data | Why |
|---|---|
| Your Google account email address | To identify your licence and manage your subscription |
| Linked range definitions (spreadsheet IDs, sheet names, cell ranges on both sides of a link) | To know which ranges to keep in sync, and to enforce your plan's link-count allowance |
| The values of ranges you've linked, and their sync timestamps | To detect changes and propagate them to the linked range(s) — this is the core sync mechanism |
| Subscription plan, link allowance, and expiry date | To determine whether you have an active licence and how many links it covers |
| Feedback messages and optional screenshots | To respond to bug reports, questions, or feature requests you choose to submit |
| Team member email addresses (domain/team licences only) | When a domain administrator's teammate claims a seat, we store that email address and a record of who added or removed it, to manage and audit seat allocation |
We do not read, access, or store the content of any spreadsheet or range you have not explicitly linked.
3. How We Use Your Data
- Sync — reading a linked range's current value and writing it to the other side of that link, whenever a sync is triggered (on edit, on schedule, or manually);
- Licence verification — checking whether you have an active subscription and how many links it covers each time you open the add-on or create a link;
- Transactional emails — sending payment confirmations or licence expiry reminders;
- Support — replying to feedback you submit via the add-on.
We do not use your data for advertising, profiling, or any purpose other than those listed above.
4. Third-Party Services
We use the following sub-processors, each bound by their own privacy policies and a data processing agreement — we never sell your data or share it with third parties for their own marketing purposes.
| Service | Purpose |
|---|---|
| Stripe | Payment processing — handles your card details; we never see them |
| Google Firebase | Link and licence data storage (Firestore) |
| Google Cloud (Firebase Functions) | Serverless backend — sync events, licence checks, checkout, webhooks |
| Resend | Transactional email delivery — sent from our own account, not from yours |
5. Data Storage & Security
Link and licence data is stored in Google Firebase Firestore. Data is retained for as long as your account exists or as required by law — deleting a link removes its stored value/timestamp data immediately. We use industry-standard security practices and rely on Google's infrastructure, which is ISO 27001 and SOC 2 certified.
Like most cloud services, our infrastructure providers (Google Cloud, Cloudflare) automatically log IP addresses in server access logs for security and abuse-prevention purposes, retained for a limited period. We do not use these logs to identify individuals or link them to your licence.
6. Your Rights (GDPR)
You have the right to:
- Access — request a copy of the personal data we hold about you;
- Rectification — ask us to correct inaccurate data;
- Erasure — request deletion of your data (note: this will delete your links and deactivate your licence);
- Portability — receive your data in a machine-readable format;
- Objection — object to processing in certain circumstances.
These rights are guaranteed to EEA residents under GDPR — we extend the same rights to all users as a matter of policy, regardless of where you're located.
To exercise any of these rights, email us. We will respond within 30 days.
7. Cookies & Tracking
The Add-on itself does not use cookies or tracking technologies. Our public web pages (hosted on Firebase Hosting) use Cloudflare Web Analytics to measure aggregate page views. This service does not use cookies, does not track individuals across sites, and does not collect personal data.
8. Children's Privacy
The Add-on is not directed at children under 13. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Privacy Policy occasionally. Material changes will be communicated via the add-on or by email. Continued use of the Add-on after changes constitutes acceptance of the updated policy.
10. Contact
Privacy questions or data requests: email us.