Privacy Policy

1. Overview

Welcome to Effortless Flow. We are fully committed to protecting your privacy and Google user data. This privacy policy clearly discloses how our Google Sheets Add-on accesses, uses, stores, or shares Google user data.

2. Google User Data Accessed (Data Accessed)

To deliver document automation and OCR features, Effortless Flow requires access to the following Google user data via authorized OAuth scopes:

• Google Sheets™ (spreadsheets scope): The application reads configuration data and automatically writes extracted invoice metadata (such as invoice number, date, amount, vendor details, and items) directly into your active spreadsheets.
• Google Documents (documents scope): The application accesses template documents to read structure and automatically generates/writes new document drafts or PDF invoice exports from row details approved by you.
• Google Drive™ (drive.file scope): The application only accesses specific folders and files created by this app (such as the default template document and the generated invoice PDFs) to edit, copy, and export them.
• Gmail Service (script.send_mail scope): The application utilizes Google's mailing service to send automated processing reports, billing receipts, and status logs to your email address. The application does not read, retrieve, or collect any incoming emails in your inbox.
• External Network Request (script.external_request scope): The application connects to external servers to call the secure Google Gemini API for OCR analysis and to validate subscription licenses.

3. How Google User Data is Used & Processed (Data Usage)

We process your Google user data according to the following strict principles:

• Invoice images or PDF files loaded from your designated Google Drive™ are converted temporarily into binary streams in order to execute the OCR request.
• Extracted metadata text returned by the Google Gemini API is solely used to format your spreadsheet rows and match bank records.
• Email addresses are only utilized to transmit operational log reports and verify license status.

4. Data Storage Policies (Data Storage)

• Zero-File Retention: We do not own, copy, clone, or store any of your invoice documents on our external servers. All data assets remain fully on your own Google Drive™ storage.
• Configuration metadata (such as Folder IDs or mapping preferences) is stored in the script's `UserProperties` scope managed securely by Google.

5. Data Sharing with Third Parties (Data Sharing)

Effortless Flow **never shares, sells, transfers, or rents your Google user data to any third-party services**.

The only data transfer is the invoice binary stream transmitted to the secure Google Gemini API endpoint (to execute the core OCR feature) and to the electronic invoice portal API (e.g. MISA, VNPT, Viettel) that you manually configure in your settings. All data transfers are strictly encrypted using HTTPS protocols.

6. Google API Limited Use Disclosure

Our app's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Under these requirements, we strictly prohibit using, transferring, or selling Google user data—including raw, aggregated, or derived data—to create, train, or improve foundational or generalized machine learning and artificial intelligence models.

7. User Rights and Controls

You have complete control over your credentials and can uninstall the Effortless Flow Add-on from your Google Workspace™ dashboard at any time. Once uninstalled, all locally saved credentials and configurations are permanently erased.

8. Support Contacts

If you have questions regarding this policy or the add-on data interaction, please reach out via: