Privacy Policy

Last updated: 2026-09-28

Square Checker ("we", "our", "the add-on") is a Google Workspace add-on that imports order data from your Square account into a Google Sheet that you control. This policy explains what data the add-on handles, where that data is kept, and why.

What we collect

• Your Google account email address, which we use to look up your subscription.
• The sign-in tokens Square issues when you choose Sign in with Square, together with that Square account's merchant ID and business name. The tokens let the add-on read your orders; the name and ID show you which Square account a connection uses.
• Your connection settings: each connection's name, the Square locations it covers, the sheet tab it writes to, whether continuous import is on, and its progress (such as the newest and oldest order it has imported and when it last synced).
• Usage records: how many rows you have imported in the current 30-day period, a short history of recent imports, and how much background run time the add-on has used, so it can apply plan limits and stay within Google's quotas.
• Subscription records, if you start a trial or subscribe (see Payments).
• Diagnostic logs (see Diagnostic logs).

Your sign-in tokens, connection settings, and usage records are stored in your Google account's private per-user storage for this add-on (Apps Script User Properties). Google encrypts that storage at rest, and only Square Checker's code running as you can read it. Your browser also keeps your light or dark theme preference and a short-lived copy of your plan status so the sidebar opens quickly.

Your Square data

Square Checker asks Square for read-only access and cannot change anything in your Square account. The permissions it requests are MERCHANT_PROFILE_READ (your business name and locations), ORDERS_READ (your orders), PAYMENTS_READ and CUSTOMERS_READ (to fill in the customer on each order), and ITEMS_READ (the reporting category and SKU of each item sold).

For each order, the add-on writes the order ID, location ID, date, the customer's name, Square customer ID, email address and phone number, discount, tip, total, payment method, items, each item's reporting category and SKU, your customers' answers to any custom fields on your items, and when and by which connection it was imported, into a tab of the spreadsheet you use Square Checker in. Order data goes from Square's API straight into that spreadsheet. We do not copy it to any storage we operate.

How signing in with Square works

When you choose Sign in with Square, Square asks you to approve access and then sends an authorization code to a small sign-in service we run on Google Apps Script. That service exchanges the code with Square for your sign-in tokens and holds them in a temporary cache for at most 10 minutes, until the add-on collects them and saves them to your per-user storage. Collecting them removes them from the cache. The service keeps no other copy; its logs record only the merchant ID of the account that signed in.

Payments

Subscriptions and purchases are processed by Stripe. You enter card details into Stripe's own checkout form, and they never reach us. To manage your plan, our billing service (also run on Google Apps Script) looks up your Stripe customer record by email and keeps a record in a private spreadsheet we operate: your email address, plan, status, price and amounts paid, Stripe customer and subscription IDs, any coupon or dispute, and related dates. See Stripe's privacy policy for how Stripe handles your information.

Diagnostic logs

The add-on and our sign-in and billing services write diagnostic logs to Google Cloud Logging: timings, counts, error messages, connection names, Square merchant and location IDs, and, for billing, your email address and Stripe IDs. Secret keys and sign-in tokens are redacted. We use these logs to diagnose problems and answer support requests. They are kept for up to 30 days and then deleted automatically.

Google permissions

Square Checker requests only the Google permissions it needs:

• userinfo.email, to match your subscription to your account.
• script.container.ui, to show its menu and sidebar in Google Sheets.
• script.external_request, to reach Square, Stripe, and our sign-in and billing services.
• spreadsheets.currentonly, to add and update its import tabs in the spreadsheet you use it in.
• drive.file, to work with files Square Checker itself created. It cannot open any other file in your Google Drive.
• script.scriptapp, to run the hourly background import.

How we use the data

• Your Square sign-in is used only to read your orders, payments, customers, and business profile and to write your orders to your spreadsheet.
• Your email address is used to look up your subscription and to answer you if you contact support.
• Usage records are used to apply plan limits and keep background imports within Google's quotas.
• Diagnostic logs are used to find and fix problems.

What we do not do

• We do not store your Square order data on any infrastructure we operate.
• We do not receive or store payment card details.
• We do not sell, rent, or share your data with advertisers, data brokers, or other third parties.

Data protection and security

• All communication with Google, Square, Stripe, and our services uses HTTPS (TLS).
• Sign-in tokens and settings are stored in Google's encrypted per-user storage, separated from other add-ons and other users.
• Square access is read-only, and Google access is limited to the permissions listed above.
• Square Checker and its supporting services run entirely on Google Apps Script. We operate no other servers.

Artificial intelligence and machine learning

Square Checker does not use artificial intelligence or machine learning to process your data, and it does not integrate with any third-party AI or ML service. We do not use, transfer, or sell Google user data (raw, aggregated, anonymized, or derived) to create, train, or improve any generalized or foundational AI or ML model. AI features you may see in Google Sheets, such as Gemini, are part of Google Workspace itself and are not used or accessed by Square Checker.

Compliance with the Google API Services User Data Policy

Square Checker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access only the Google account data needed to provide the add-on's features: your email address, to match your subscription, and the spreadsheets you use the add-on in. We do not use this data for advertising, and we do not sell it or transfer it to others except as needed to provide the service.

Third parties

• Google hosts the add-on, our sign-in and billing services, your spreadsheet, and the diagnostic logs.
• Square, Inc. provides the API the add-on reads your orders from.
• Stripe, Inc. processes subscription payments.

Data retention

• Sign-in tokens, connection settings, and usage records stay in your per-user storage until you remove them (see Your choices).
• The sign-in service holds tokens for at most 10 minutes.
• Subscription records are kept for accounting and support, and by Stripe under its own policies.
• Diagnostic logs are kept for up to 30 days.

Your choices

• Delete a connection in the sidebar to remove its settings. The rows it imported stay in your spreadsheet, which you own and can delete.
• Remove a saved Square sign-in from the add-on. When you add a connection and choose Sign in with Square, the add-on lists the Square accounts you have already signed in with; hover one and click its × (Forget this account).
• Revoke Square Checker's access to your Square account at any time from your Square Dashboard, where Square lists the apps you have connected. Forgetting an account inside the add-on does not revoke that access.
• Remove Square Checker's access to your Google account at myaccount.google.com/connections, or uninstall it from the Google Workspace Marketplace. Either one stops it from running.
• Cancel a subscription in the sidebar under Settings, then Manage subscription.
• Email support@wilford.dev to ask us to delete your subscription records or anything else we hold about you.

Changes

If we materially change this policy, we will update the "Last updated" date at the top of this page and, where required, notify you in the add-on.

Contact

Questions or concerns? Email support@wilford.dev.