DocMerge is a Google Sheets add-on made by AddonNordic ApS. It makes one document per row of your spreadsheet from a Google Docs template you choose, saves the documents as Google Docs and/or PDF in a Google Drive folder you choose, and can email each PDF to the address in its row.
Who is responsible
AddonNordic ApS, Solvangen 15, 9210 Aalborg SØ, Denmark. Company registration (CVR): 46495985. Contact: [email protected].
What DocMerge can access
DocMerge asks Google for the smallest set of permissions that lets it do its job:
| Permission | What it lets DocMerge do |
|---|---|
The open spreadsheet (spreadsheets.currentonly) | Read the rows of the spreadsheet you have open and write a status and links back into it. DocMerge cannot open your other spreadsheets. |
Files you create or choose (drive.file) | Read the template you pick, use the folder you pick, and create the documents and PDFs. DocMerge cannot see the rest of your Google Drive or your other documents. |
Show the panel (script.container.ui) | Show the DocMerge panel and dialogs in Google Sheets. |
Send email as you (script.send_mail) | Only if you switch on "Email each PDF": send one email per row from your own Gmail, with that row's PDF attached. DocMerge cannot read your email. |
Your email address (userinfo.email, openid) | Check which plan you have. |
Connect to an external service (script.external_request) | Turn documents into PDF through Google's Drive API and check your plan with our licence server. Google only lets DocMerge contact the addresses listed in its manifest. |
DocMerge does not ask for permission to see all your documents, spreadsheets or Drive files, and it cannot read your email.
Where your data is processed
Your spreadsheet rows, template and documents are processed inside Google's own systems (Google Apps Script and the Google Docs and Drive APIs), under your Google account. Row values, document contents, file names and email addresses from your sheet are never sent to AddonNordic's servers.
Images you put in a template with an {{image:…}} field are fetched by Google Docs from the web address in your sheet.
DocMerge stores its settings and the progress of a run in the spreadsheet itself (Apps Script document properties), and your monthly usage count in your own Google account (Apps Script user properties).
What AddonNordic's server receives
Our licence server only receives:
- your email address, proven by a Google sign-in token, to look up your plan;
- for paid plans: your Stripe customer ID, subscription status, number of seats and renewal date;
- for team plans: the email addresses the team owner adds to the team.
We use this only to give you the plan you paid for. We do not sell it, use it for advertising or share it with anyone except the sub-processors below.
Sub-processors
| Company | What for | Where |
|---|---|---|
| Google LLC / Google Ireland | Runs DocMerge inside your Google account | Your Google Workspace region |
| Stripe (Stripe Payments Europe Ltd. and Link) | Payments, receipts and VAT as seller of record (Stripe Managed Payments) | EU (Ireland), with transfers covered by Stripe's standard contractual clauses |
| Railway Corporation | Hosts the licence server | EU West (Amsterdam, Netherlands) |
Google API Services User Data Policy
DocMerge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. DocMerge does not use Google user data to train AI or machine-learning models, and no person at AddonNordic reads your spreadsheets or documents.
How we protect your data
- Your spreadsheet rows, templates and documents never leave Google. DocMerge works on them inside your own Google account, so they stay under Google's own security and your account's sharing settings.
- All traffic between DocMerge, Google's APIs, our licence server and Stripe uses HTTPS (TLS). Google only lets DocMerge contact the addresses listed in its manifest.
- Our licence server accepts only a sign-in token issued and signed by Google. It checks the signature and that the token was issued to DocMerge. We never see or store your Google password.
- If you are on the free plan, the server checks your email address and stores nothing. It only keeps a record for paid and team plans.
- Card details go straight to Stripe. AddonNordic never sees or stores card numbers.
- The licence database runs in the EU (Amsterdam). Only AddonNordic's own administrator account can reach it, and secret keys are kept in the hosting provider's encrypted settings, never in code.
AI and machine learning
DocMerge does not use AI or machine-learning models. Google user data is never used to develop, improve or train AI or machine-learning models, and it is never sent to any AI service.
How long we keep data
Licence records are kept while you have a subscription and for 5 years after it ends, because Danish bookkeeping law requires us to keep records of sales. Team member addresses are deleted when the owner removes them or the team plan ends. Data stored in your Google account stays there until you delete it or uninstall DocMerge.
To have your licence record deleted, cancel your subscription and email [email protected] from the address you use with DocMerge. We delete everything except what bookkeeping law makes us keep within 30 days and confirm by email. The settings DocMerge keeps in a spreadsheet are deleted when you delete that spreadsheet. The usage count in your Google account is one number per month and holds no content from your sheets or documents.
Your rights
Under the GDPR you can ask to see, correct, export or delete the data we hold about you, and object to how we use it. Write to [email protected]. You can also complain to the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk).
To remove DocMerge's access, uninstall it in Google Sheets or remove it at myaccount.google.com/permissions. The documents and PDFs it created stay in your Drive and belong to you.
Changes
If we change this policy, we update the date at the top. If a change affects what data we receive, we tell paying customers by email first.