Privacy Policy

Last updated 27 August 2026 · Applies to the Employee Timesheet & Shift Schedule Google Sheets add-on

The short version. This add-on has no server. It runs inside Google Sheets on Google's own infrastructure. We do not receive, store or see your spreadsheet, your staff names, their hours or their pay. The only data that ever leaves your browser is a licence key, sent to our payment provider to check that it is valid.

Who we are

ShiftSheet is an independent add-on published by an individual developer. Contact: support@shiftsheet.me.

What the add-on can access

The add-on requests three permissions from Google. All three are classed by Google as non-sensitive, and each exists for one specific job:

Permission	What it allows	Why it is needed
`spreadsheets.currentonly`	Read and write only the single spreadsheet you have open while the add-on is running.	To build the schedule grid and write the report sheets.
`script.container.ui`	Display the side panel and dialog boxes inside Google Sheets.	To show the add-on's interface.
`script.external_request`	Make an outbound network request.	Used for exactly one thing: checking a licence key. See below.

Because the spreadsheet permission is currentonly, the add-on cannot see your other spreadsheets, your Google Drive, your Gmail, your Google Calendar, your contacts, or anything else in your Google Account. This is enforced by Google, not by us.

What we collect

We do not collect, receive, store or transmit your spreadsheet content. We operate no servers, no database, and no analytics.

The add-on saves two small pieces of information using Google's own storage service (PropertiesService), which keeps them inside your Google Account and your own document. We have no access to either:

Your rule settings — maximum weekly hours, minimum rest, overtime threshold and similar. Stored in the document you are working in.
Your licence key, if you buy the paid version. Stored against your Google Account so that one purchase unlocks every spreadsheet you use.

The one outbound request

If you enter a licence key, the add-on sends that key, together with an anonymous installation identifier generated by Google, to our payment provider Lemon Squeezy (privacy policy) so that it can confirm the key is genuine. This request contains no spreadsheet content, no staff names, no hours, no pay data, and no email address.

If you never enter a licence key, the add-on makes no outbound requests at all.

Google's Limited Use requirements

ShiftSheet's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we do not transfer your Google user data to third parties except as necessary to provide or improve the add-on; we do not use it for advertising; we do not sell it; and no humans read it, because it never reaches us in the first place.

Data retention and deletion

Since we hold no copy of your data, there is nothing on our side to retain or delete.

To remove your saved rule settings, delete the sheets the add-on created, or delete the spreadsheet itself.
To remove your stored licence key, open the add-on's side panel and choose Remove licence from this account.
To revoke the add-on's access entirely, uninstall it, or visit your Google Account permissions.
Everything the add-on wrote into your spreadsheet stays there afterwards as ordinary cells, readable without the add-on installed.

Children

This add-on is a business tool and is not directed at children under 13. We do not knowingly collect information from children — or, indeed, from anyone.

Changes to this policy

If this policy changes, the date at the top of this page changes with it. If a change ever meant the add-on started collecting data it does not collect today, that would require a new permission, and Google would ask for your consent before it took effect.

Contact

Questions about this policy, or about what the add-on does with anything: support@shiftsheet.me.