Scheduled PDF Reports for Google Sheets™ is an add-on for Google Sheets™ that emails a tab or a range as a PDF (or Excel/CSV) on a schedule. It is made by AddonNordic ApS, Solvangen 15, 9210 Aalborg SØ, Denmark, CVR 46495985 ("we"). This policy explains what the add-on can see and what happens to your data. For our website and our other products, see our main Privacy Policy.
The short version
- Your spreadsheet data stays in your Google account. It is never sent to our servers.
- Reports are made by Google Sheets™ and sent from your own Google account to the people you choose.
- Our licence server only sees your email address, so it can tell whether you have Pro.
- We do not sell data, show ads or use your data to train AI models.
What the add-on can access, and why
- See the spreadsheet you are using it in (
spreadsheets.currentonly): to read tab names and the cell values you put in the email or in a "send only when" condition. This only covers the spreadsheet in which you open the add-on, never your other spreadsheets. - Files you select with the add-on (
drive.file): the first time, you select the spreadsheet in Google's file picker. That gives the add-on access to that one file, so Google Sheets™ can turn it into a PDF, Excel or CSV file, also on schedule while the spreadsheet is closed. It gives no access to any other file in your Google Drive™. - Send email as you (
script.send_mail): to send the reports, test emails and failure notices to you and the recipients you entered. The add-on cannot read your email. - Run when you are not present (
script.scriptapp): to check once an hour whether a report is due. - Connect to an external service (
script.external_request): to ask Google Sheets for the export, and to ask our licence server whether you have Pro. - Show a sidebar in Google Sheets™ (
script.container.ui) and your email address (userinfo.email,openid): to show the panel, know who owns a report, and check your licence.
The add-on cannot read your Gmail™, list your Google Drive™ or open spreadsheets you have not selected or used it in.
Where your data is stored
- Report settings and run history (name, schedule, recipients, email text, layout, condition and the last 25 runs) are stored inside the spreadsheet as add-on properties that only this add-on can read. They are deleted when you delete the report or the spreadsheet.
- Your licence status is cached in your Google account's private add-on storage.
- Our licence server (Railway, EU West region) receives a sign-in token signed by Google, from which it reads your email address, and asks Stripe whether you have an active subscription. It does not store anything. Railway keeps standard request logs (time, address, IP) for a short period for operations and abuse prevention. The server never receives spreadsheet content, file names or recipients.
How we protect your data
- Spreadsheet content never leaves Google: the add-on runs in Google Apps Script in your own account.
- All connections use HTTPS (TLS). The licence server only accepts sign-in tokens signed by Google.
- Only the company's owner has access to our Google Cloud, Stripe and Railway accounts. Keys and passwords are kept out of the source code.
- If a security incident affects your personal data, we notify you and Datatilsynet as required by GDPR (within 72 hours where it applies).
How long we keep data
- Report settings and run history: until you delete the report, remove the add-on or delete the spreadsheet.
- The cached licence status: until you remove the add-on. It is refreshed at least once a day.
- Licence-server request logs at Railway: kept for a short period, at most 30 days.
- Pro purchases: Stripe keeps payment records; we keep invoices for 5 years (Danish Bookkeeping Act).
- Support emails: deleted no later than 12 months after the case is closed.
If you buy Pro
- Payment is handled by Stripe through Stripe's Managed Payments (Link), which sells Pro to you as the merchant of record and handles VAT. Stripe collects your email, payment details and billing address and sends you receipts. We receive your email, country, the plan you bought and its status. Stripe's privacy policy: stripe.com/privacy.
- Legal basis: performing our contract with you (GDPR art. 6(1)(b)) and our legal duty to keep accounting records (art. 6(1)(c); Danish Bookkeeping Act: 5 years).
When you send reports to other people, you decide who they are and what is sent. For that content you are the data controller; Google sends it on your behalf from your account.
What we never do
We do not sell or share your data, we do not use it for advertising, and we do not use your spreadsheet data to train AI models. Scheduled PDF Reports's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. No person reads your data, unless you ask us for help and give permission, or the law requires it.
Sub-processors
- Google (Apps Script, Google Sheets™, Gmail™ sending): runs the add-on and sends the reports.
- Stripe (Stripe Payments Europe Ltd. and Link, Ireland): payments, receipts and VAT as seller of record.
- Railway Corp. (EU West region): hosts the licence server.
Your rights
You can ask for a copy of the data we hold about you, have it corrected or deleted, or object to its use: write to [email protected]. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
To remove everything: delete your reports in the side panel, then open Extensions → Add-ons → Manage add-ons in Google Sheets™ and remove Scheduled PDF Reports, and revoke access at myaccount.google.com/permissions. To end Pro, use "Manage billing" in the side panel.
Changes
If we change this policy, we update the date at the top. If a change affects Pro subscribers, we tell them by email first.
AddonNordic ApS · CVR 46495985 · Solvangen 15, 9210 Aalborg SØ, Denmark
Google Sheets™, Gmail™ and Google Drive™ are trademarks of Google LLC. Scheduled PDF Reports is made for use with Google Sheets™ and is not affiliated with or endorsed by Google.