Privacy Policy

Plain-language summary

Duplicate detection, preview calculations, formula generation, and conditional-formatting changes run within Google Apps Script for the spreadsheet you have open. Codeprint does not receive or store your cell values, formulas, sheet names, A1 ranges, spreadsheet IDs, duplicate groups, or generated matching formulas.

Codeprint receives the Google identity needed to connect your account, product and installation records, the number of successful applies, and subscription status. We do not sell Google user data, use it for advertising, or use it to create, train, evaluate, or improve generalized artificial-intelligence or machine-learning models.

The public website does not currently use advertising cookies, analytics cookies, behavioral profiling, or third-party tracking scripts.

Information we collect

• Account information: Google user identifier, email address, Codeprint account and membership records.
• Installation information: product, Google Workspace add-on surface, installation status, product version, credential hash, and security timestamps.
• Usage information: operation identifier, successful-apply metric, sidebar or Quick Apply source, reservation and outcome state, timestamps, and safe diagnostic or performance details.
• Billing information: Stripe customer and subscription identifiers, plan, price, billing status, billing email, renewal dates, cancellation state, and webhook processing records. Codeprint does not receive or store complete payment-card numbers.
• Support information: messages and contact details you choose to send to us.
• Website and security logs: ordinary hosting metadata such as IP address, browser information, request time, route, and security events generated by infrastructure providers.

Spreadsheet data stays inside Google

The add-on may read the current selection's values and formulas in its Google Apps Script execution so it can preview duplicate groups and create a rule. It may read and change conditional-formatting rules in the open spreadsheet for Apply, Quick Apply, Clear, and Undo. It does not upload spreadsheet contents to Codeprint, Supabase, Stripe, or the public website.

Codeprint usage records deliberately exclude cell contents, formulas, sheet names, spreadsheet IDs, sheet IDs, A1 ranges, and derived duplicate keys. Applying a rule does not delete, reorder, merge, or rewrite cell values.

Google OAuth permissions

Duplicate Highlighter requests the following Google OAuth scopes for the user-facing purposes shown:

Duplicate Highlighter does not request Google Drive scope or broad access to every spreadsheet. It uses @OnlyCurrentDoc and the spreadsheets.currentonly scope for the open spreadsheet.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Our use of raw or derived data received from Google Workspace APIs also adheres to the Google Workspace API User Data and Developer Policy, including its Limited Use requirements.

How we use information

We use account, installation, usage, billing, and technical information to authenticate users, activate or revoke a product installation, enforce the three-use lifetime allowance, grant confirmed Pro entitlements, process checkout and subscription changes, prevent duplicate charging or metering, protect against abuse, diagnose failures, answer support requests, maintain financial records, and comply with law.

We do not sell personal information or Google user data. We do not use Google user data for personalized advertising, credit decisions, lending, or surveillance.

Who we share, transfer, or disclose Google user data to

We disclose information only to the recipients below and only for the described product purpose:

• Google: processes Google identity, the current spreadsheet, Apps Script execution, add-on interface, and OAuth permissions. Spreadsheet contents used by the add-on remain in Google's environment.
• Supabase: provides authentication and stores Codeprint account, membership, product, installation, credential hash, usage, entitlement, subscription, webhook, security, and audit records. Supabase does not receive spreadsheet cell contents from Duplicate Highlighter.
• Stripe: hosts checkout and the billing portal and processes the billing email, internal Codeprint account identifier, selected plan, subscription metadata, invoices, payment method, and transactions. Stripe does not receive spreadsheet contents or duplicate matches from Codeprint.
• Vercel: hosts and delivers the public website and may process IP addresses, request metadata, browser information, and ordinary hosting and security logs. The website does not receive spreadsheet contents.

These providers operate under their applicable terms and privacy commitments. We do not transfer Google user data to advertising platforms, data brokers, AI model providers, or unrelated third parties.

We may disclose information when required by law, valid legal process, or a good-faith need to protect users, Codeprint, or the public from fraud, abuse, or security threats. If the service is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may transfer to a successor only where legally permitted, subject to this policy and any required notice or consent.

No AI or machine-learning use

Duplicate Highlighter does not integrate with or transfer Google Workspace user data to artificial-intelligence or machine-learning model providers, aggregators, gateways, model hubs, downstream models, or self-hosted models. Neither raw, aggregated, anonymized, nor derived Workspace data is used or sold to create, train, fine-tune, evaluate, or improve foundational or generalized models.

Retention and deletion

Account, installation, lifetime-usage, entitlement, subscription, audit, and security records are retained while needed to operate the product, enforce the lifetime allowance, prevent fraud, resolve disputes, maintain accounting records, and meet legal obligations. Short-lived usage reservations expire automatically; operational records may remain for a limited period to support reliability and billing integrity. Revoked credential hashes may be retained for security auditing, but raw installation credentials are not stored.

To request account information or deletion, email jacob@codeprint.io from the associated Google account. We may verify your identity. Deletion does not include records we must retain for law, accounting, security, fraud prevention, or to document completed transactions.

Security and international processing

We use encryption in transit, product-scoped authorization, hashed installation credentials, access controls, signed billing webhooks, service-side secret management, replay protection, and logging restrictions designed to protect information. No online service can guarantee absolute security. Providers may process information in countries other than your own under their legal and contractual safeguards.

Your choices and rights

You may uninstall the add-on, revoke its Google authorization, disconnect the Codeprint installation, cancel a subscription through the Stripe billing portal, or request access, correction, deletion, restriction, portability, or objection where applicable. Revoking Google access or uninstalling the add-on does not automatically cancel a paid subscription.

Contact and policy changes

Duplicate Highlighter for Google Sheets is operated by Codeprint. Privacy questions and requests can be sent to jacob@codeprint.io.

We may update this policy as the product, providers, or legal requirements change. The revised policy will be posted here with a new effective date, and additional notice will be provided when required.