Privacy Policy

Last updated: 2026-08-15

Square Checker ("we", "our", "the add-on") is a Google Workspace add-on that imports order data from your Square account into a Google Sheet that you control. This policy explains what data we handle and why.

What we collect

• Your Google account email: read from Session.getActiveUser().getEmail() so the paywaller library can match your subscription to your account.
• Your Square API credentials (Application ID, Access Token, Location ID), provided by you when you create a connection. Stored encrypted in your Google account's private per-user storage (Apps Script User Properties), readable only by this add-on's code running as you.
• Connection configuration (connection name, the sheet tab it imports into, starting date, sandbox flag, auto-import on/off, last-run timestamp), also stored in your per-user storage.
• Subscription metadata: payment status, plan tier, Stripe customer ID. Handled by Stripe and the Stripe Paywaller library; we do not receive or store payment card details.
• Operational logs: execution traces (success / failure / execution IDs) written to Google Cloud Logging via the standard Apps Script Stackdriver integration, retained for diagnostic and support purposes.

What we do not collect

• We never copy your Square order data to our servers. Orders flow directly from Square's API into your sheet.
• We do not collect payment card details. All billing is handled by Stripe.
• We do not sell, rent, or share your data with marketers or third parties.

How we use the data

• The Square API credentials are used solely to call Square's SearchOrders endpoint on your behalf and write the results to your sheet.
• Your email is used to look up your subscription status when gating Pro features.
• Operational logs are used to diagnose import failures when you contact support.

Data protection & security

Square Checker is built to protect the sensitive data it handles, chiefly your Square API credentials, at every step:

• Encryption in transit: all communication with Google, Square, and Stripe uses HTTPS/TLS. Your credentials and order data are never transmitted over an unencrypted connection.
• Encryption at rest: your Square API credentials and connection configuration are stored in your Google account's private per-user storage (Apps Script User Properties), which Google encrypts at rest. They are readable only by this add-on's code running as you.
• Isolation & access control: stored data is namespaced per user and per add-on, isolating it from other add-ons and from other users. Square Checker runs entirely within Google Apps Script; it operates no external servers of its own and never copies your Google or Square data to infrastructure we control. Order data flows directly from Square's API into the single "Square Checker imports" spreadsheet the add-on creates for you.
• Least privilege: we request the narrowest scopes that let the add-on work. spreadsheets.currentonly limits access to the spreadsheet you have open, and drive.file lets the add-on create and write only the one "Square Checker imports" spreadsheet it makes for you, never any other file in your Google Drive.
• Revocable at any time: you can erase your stored credentials by deleting the connection in the sidebar, or remove all access by uninstalling the add-on (see Your rights below).

Artificial intelligence and machine learning

Square Checker does not use artificial intelligence or machine learning to process your data, and it does not integrate with any third-party AI or ML service. We do not use, transfer, or sell Google user data — whether raw, aggregated, anonymized, or derived — to create, train, or improve any generalized or foundational AI/ML models. Any AI features you may see within the Google Sheets interface (for example, Google's built-in “Gemini” tools) are part of Google Workspace itself and are neither used nor accessed by Square Checker.

Compliance with the Google API Services User Data Policy

Square Checker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access only the minimum Google account data needed to provide the add-on's features (your email address, to match your subscription, and the "Square Checker imports" spreadsheet the add-on creates for you). We do not use this data for advertising, and we do not sell it or transfer it to others except as needed to provide the service.

Third parties

• Google: hosts the add-on and your Google Sheet.
• Square, Inc.: the API the add-on calls to fetch your orders.
• Stripe, Inc.: processes subscription payments via the Stripe Paywaller library. See Stripe's privacy policy.

Data retention

• Connection configuration and credentials remain in your Google account's per-user storage until you delete the connection or uninstall the add-on.
• Subscription records are retained by Stripe and the paywaller per their own policies.
• Operational logs are retained for up to 30 days in Google Cloud Logging, then automatically deleted.

Your rights

To delete the data Square Checker holds about you:

• Delete a connection from the sidebar (removes its credentials and configuration).
• Uninstall the add-on from the Google Workspace Marketplace.
• Cancel your subscription via the sidebar's Manage button (removes Stripe-side records subject to legal retention requirements).
• Email support@wilford.dev to request deletion of any residual records.

Changes

If we materially change this policy we will update the "Last updated" date at the top of the page and, where required, notify you through the add-on sidebar.

Contact

Questions or concerns? Email support@wilford.dev.