Privacy Policy
Last updated: September 16, 2026
Rowvoice ("Rowvoice", "we", "us") is a Google Sheets add-on that turns spreadsheet rows into PDF invoices. It is operated by [LEGAL NAME / COMPANY]. This policy explains what data the add-on and this website use, where that data goes, and the choices you have.
The short version
- Your spreadsheet data and invoices stay in your Google account. The add-on runs inside Google Apps Script, and PDFs are saved to your own Google Drive.
- The only things that leave Google go to our license server: your Google account email (so we can tell whether you're on Pro) and a count of how many invoices you created this month.
- We don't sell your data, use it for advertising, or use it to train AI models.
Data the add-on uses
| Data | Why | Where it's stored |
|---|---|---|
| Contents of the spreadsheet you open Rowvoice in: headers and the rows you select | To build invoices and write the invoice number, status and PDF link back to the sheet | Processed inside Google Apps Script. Never sent to us. |
| Business profile: name, email, address, tax ID, currency, tax rate, payment instructions, template, number prefix, email template | To show your details on invoices | Google Apps Script user properties, tied to your Google account |
| Column mapping and invoice counter (per spreadsheet, or per account if you choose one sequence across spreadsheets) | To remember your setup and number invoices in sequence | Google Apps Script document properties of that spreadsheet |
| Your logo and generated invoice PDFs | To put your logo on invoices and give you the PDF | A "Rowvoice" folder in your Google Drive |
| Monthly invoice count | To apply the free plan limit | Google Apps Script user properties, and a count on our license server (a number per Google account per month, deleted automatically after about two months) |
| Client email address, invoice total, due date and PDF (Pro, only when you choose to email an invoice) | To send the invoice to your client | Sent through your own Gmail account by Google. Never sent to us. A note with the recipient and time is added to the row's Status cell. |
| Your Google account email address | To check your plan, and to fill in the email field at checkout if you upgrade | Sent to our license server (see below). Stored by us only if you buy Pro. |
Google permissions (OAuth scopes)
| Permission | What it lets Rowvoice do |
|---|---|
See, edit, create and delete only the specific Google Drive files you use with this app (drive.file) | Create the Rowvoice folder, invoice PDFs and your logo. It can't see any other file in your Drive. |
View and manage spreadsheets that this application has been installed in (spreadsheets.currentonly) | Read the rows you select and write back the invoice details, only in the spreadsheet where you open the add-on. |
Display and run third-party web content in prompts and sidebars (script.container.ui) | Show the Rowvoice sidebar and the invoice preview. |
Connect to an external service (script.external_request) | Check your plan, count invoices for the free plan limit and open the billing portal, all through our license server. |
Send email as you (script.send_mail) | Send an invoice to your client when you click "Email" (Pro). Rowvoice cannot read your email. |
See your primary Google Account email address and associate you with your personal info on Google (userinfo.email, openid) | Prove to our license server which Google account is asking, so nobody else can use or look up your plan. |
The license check
When the sidebar opens or you create an invoice, the add-on may send a Google-signed identity token to our license server. The token includes your Google account email and account ID. The server runs on Cloudflare Workers. It checks the token and replies "free" or "pro", along with your invoice count for the month. When you create an invoice, the add-on tells the server to add one to that count. The add-on caches the plan for up to a few hours. We don't send any spreadsheet contents, client details or invoice contents to the license server.
Payments
Stripe processes Pro subscriptions. When you check out, you give your payment details to Stripe, not to us. Stripe's privacy policy applies to them: stripe.com/privacy. From Stripe we receive and keep these details, so we know your Google account has Pro:
- Your email address
- Your Stripe customer and subscription IDs
- Your subscription status and renewal date
We never receive your card number. When you click "Manage billing", our server asks Stripe for a one-time link to Stripe's billing portal for your customer ID.
Google API Services User Data Policy
Rowvoice's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google user data to provide and improve the invoicing features you see in the add-on.
- We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition.
- We do not use it for advertising.
- We do not let humans read it unless you ask us to (for example, for support), it is needed for security or to comply with law, or it has been aggregated and anonymized.
Service providers
- Google runs the add-on (Apps Script) and stores your data in your account (Drive and script properties).
- Cloudflare hosts the license server and this website. Cloudflare may process technical request data such as IP addresses and timestamps, and keeps short-term logs.
- Stripe processes payments.
This website
This website doesn't use cookies, analytics or tracking scripts.
Retention and deletion
- Data in your Google account. You control it. Delete the "Rowvoice" folder in Drive to remove PDFs and your logo. To remove stored settings, uninstall the add-on, or remove its access at myaccount.google.com/permissions.
- Subscription records. We keep them while your subscription is active and for as long as tax and accounting law requires after that.
- Other requests. Email us to ask for a copy of what we hold, or for deletion where the law allows.
Security
Everything sent between the add-on, our license server and Stripe is encrypted in transit (HTTPS). The license server only accepts identity tokens signed by Google, and it only accepts payment events with a valid Stripe signature.
Children
Rowvoice is a business tool and isn't directed at children under 13, or under 16 in the EEA and UK.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how it's processed. To use any of these rights, contact us at the address below. You can also complain to your local data protection authority.
Changes
If we change this policy, we'll update the date above. If the change is significant, for example new data use, we'll say so in the add-on before it takes effect.
Contact
[LEGAL NAME / COMPANY], [POSTAL ADDRESS]
Email: support@rowvoice.com