Privacy policy
1. Introduction
This Privacy Policy describes how we collect, use, and handle your personal information when you use our Growth System 2.0 product, and its associated Google Sheets template management service (the "Service"). By using our Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Email Address: When you purchase our Service, we collect and store your email address for account management, service delivery, and communication purposes.
- Google Account Information: We access your Google account through OAuth authentication to perform spreadsheet operations on your behalf.
2.2 Google Sheets Data
- We access and modify only the current Google Sheets spreadsheet you authorize us to work with
- We create new worksheets within the current spreadsheet as part of our template management service
- We copy data and formatting between worksheets to deliver core functionality
2.3 Technical Information
- Service usage logs and error reports generated by our Firebase Cloud Functions
- Authentication tokens necessary for Google API access
3. How We Use Your Information
We use your personal information solely to:
- Deliver our template management service
- Create and manage Google Sheets templates within your current spreadsheet
- Communicate with you about your service
- Provide technical support
- Process payments (where applicable)
4. Data Storage and Security
4.1 Storage Locations
- Email addresses are stored securely in our Firebase database
- Authentication credentials are stored in Google Cloud Secret Manager
- No spreadsheet content is permanently stored on our servers
4.2 Security Measures
- All data transmission occurs over encrypted connections (HTTPS/SSL)
- Access credentials are stored using industry-standard encryption
- Our Firebase Cloud Functions operate in Google's secure cloud environment
5. Google Services Integration
5.1 OAuth Permissions
Our Service requires the following Google OAuth scopes:
- Google Sheets API (
https://www.googleapis.com/auth/spreadsheets.currentonly): To access and modify only the current spreadsheet you're working with - External Requests (
https://www.googleapis.com/auth/script.external_request): To communicate between our Firebase Functions and Google services
5.2 Spreadsheet Access
By using our Service, you consent to:
- Our system accessing only the current spreadsheet you authorize
- Modification of the current spreadsheet's content, formatting, and structure
- Creation of new worksheets within the current spreadsheet
- Temporary restriction of edit access during processing operations
6. Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties, except:
- Google Services: We interact with Google APIs to provide our core functionality
- Legal Requirements: When required by law, regulation, or legal process
- Service Providers: To trusted third parties who assist in operating our Service (bound by confidentiality agreements)
7. Data Retention
- Email addresses are retained for the duration of your account and may be kept for up to 30 days after account deletion for administrative purposes
- Authentication tokens are automatically managed by Google's OAuth system
- Service logs are retained for up to 90 days for technical support and debugging purposes
8. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate personal information
- Request deletion of your personal information (subject to legal retention requirements)
- Withdraw consent for data processing (which may limit service functionality)
- Revoke OAuth permissions through your Google Account settings
9. Third-Party Services
Our Service integrates with:
- Google Workspace: For spreadsheet management and user authentication
- Firebase: For cloud functions and data storage
- Google Cloud Platform: For secure credential management
Each service has its own privacy policy governing their data handling practices.
10. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to remove that information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States where Google Cloud services operate. We ensure appropriate safeguards are in place for such transfers.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the new Privacy Policy.
13. Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us.
This Privacy Policy is effective as of the date listed above and applies to all users of our Service.