Sheets to Calendar – Two-Way Google Calendar Sync is an add-on for Google Sheets that turns rows in a tab into Google Calendar events, and imports Calendar events into a tab. It is made by AddonNordic ApS, Solvangen 15, 9210 Aalborg SØ, Denmark, CVR 46495985 ("we"). This policy explains what the add-on can see and what happens to your data. For our website and our other products, see our main Privacy Policy.
The short version
- Your sheet and your events stay in your Google account. They are never sent to our servers.
- The add-on only works in the spreadsheet you open it in. It cannot open your other spreadsheets or your Drive.
- Our licence server only sees your email address, so it can tell whether you have Pro.
- We do not sell data, show ads or use your data to train AI models.
What the add-on can access, and why
- See and edit only this spreadsheet (
spreadsheets.currentonly): to read your rows, write the event link and the sync status next to each row, and write imported events and (with two-way sync) changes made in Google Calendar. It gives no access to other spreadsheets or to Google Drive. - View and edit events on your calendars (
calendar.events): to create, update and delete the events that come from your rows, and to read events for import and two-way sync. It cannot delete or share calendars. - See the list of your calendars (
calendar.calendarlist.readonly): so you can choose which calendar the events go to. - Run when you are not present (
script.scriptapp): to sync once an hour when automatic sync (Pro) is on. - Connect to an external service (
script.external_request): to ask our licence server whether you have Pro. - Show a side panel in Google Sheets (
script.container.ui) and your email address (userinfo.email,openid): to show the panel and check your licence.
The add-on has no access to your Google Drive or your Gmail, and it cannot open other spreadsheets.
Where your data is stored
- Settings, sync history and undo (your column choices and settings, the last 25 sync runs, and the record needed to undo the latest sync) are stored inside the spreadsheet as add-on properties that only this add-on can read. They are deleted with the spreadsheet.
- The event link that ties each row to its event is kept in a hidden column in your sheet, "Event link (do not edit)".
- Your monthly change counter and licence status are kept in your Google account's private add-on storage.
- Event data stays in Google Calendar.
- Our licence server (Railway, EU West region) receives a sign-in token signed by Google, from which it reads your email address, and asks Stripe whether you have an active subscription. It does not store anything. Railway keeps standard request logs (time, address, IP) for at most 30 days for operations and abuse prevention. The server never receives sheet content or events.
How your data is protected
- Your sheet and your events are read and written by Google Apps Script inside your own Google account, under the permissions you granted. They are never copied to our servers or to anyone else.
- The only connection out of Google is the licence check. It uses HTTPS, and the server accepts only a sign-in token signed by Google for this add-on, so nobody can ask about someone else's plan.
- The licence server keeps no database. Its Stripe key is limited to the few actions it needs, and keys are kept as private settings on the server, never in the add-on's code.
How long we keep data, and how to delete it
- Settings, history, undo record and event links live in your spreadsheet until you delete them, remove the columns, or delete the spreadsheet.
- Your change counter and plan status stay in your Google account's add-on storage and hold no sheet or event data.
- Licence-server request logs are deleted after at most 30 days.
- Payment records are kept by Stripe, and by us as accounting records, for 5 years as Danish law requires.
- Revoking the add-on's access at myaccount.google.com/permissions stops all access at once. To have your email removed from our payment records where the law allows it, write to [email protected].
Guests on your events
If your rows contain guest email addresses, those people are added to the events. By default they are not emailed (the setting "Email guests" is set to "Never"). You decide who is added and whether they are notified, so for guest data you are the data controller; Google handles it on your behalf in your account.
If you buy Pro or Team
- Payment is handled by Stripe through Stripe's Managed Payments, which sells Pro and Team to you as the merchant of record and handles VAT and sales tax. For your payment and tax data Stripe is an independent data controller: it collects your email, payment details and billing address and sends you receipts. We receive your email, country, the plan you bought and its status. Stripe's privacy policy: stripe.com/privacy.
- Team plans: the subscription at Stripe also stores your company email domain and the list of team members' email addresses (up to 10), so their Pro access can be checked.
- Legal basis: performing our contract with you (GDPR art. 6(1)(b)) and our legal duty to keep accounting records (art. 6(1)(c); Danish Bookkeeping Act: 5 years).
What we never do
We do not sell or share your data, we do not use it for advertising, and we do not use your sheet or calendar data to train AI models. Sheets to Calendar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. No person reads your data, unless you ask us for help and give permission, or the law requires it.
Sub-processors
- Google (Apps Script, Google Sheets, Google Calendar): runs the add-on and stores your sheet and events.
- Stripe (Stripe Payments Europe Ltd., Ireland): payments, receipts and VAT as merchant of record.
- Railway Corp. (EU West region): hosts the licence server.
Your rights
You can ask for a copy of the data we hold about you, have it corrected or deleted, or object to its use: write to [email protected]. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
To remove the add-on: open Extensions → Add-ons → Manage add-ons in Google Sheets and remove Sheets to Calendar, and revoke access at myaccount.google.com/permissions. Events already created stay in your calendar; to remove them first, use "Undo" or tick Delete on the rows and sync. To end Pro, use "Manage billing" in the side panel.
Changes
If we change this policy, we update the date at the top. If a change affects Pro subscribers, we tell them by email first.
AddonNordic ApS · CVR 46495985 · Solvangen 15, 9210 Aalborg SØ, Denmark