Privacy Policy

Last updated: October 11, 2026

RowDocs is a Google Workspace add-on operated by Tofu Labs ("we"). This policy explains what data it accesses and why.

Google data RowDocs accesses

• The spreadsheet you open RowDocs in (scope: spreadsheets.currentonly): to read the rows you merge and write back document links and status.
• Only the Drive files you pick or RowDocs creates (scope: drive.file): your template, output folder and the generated documents.
• Google Docs (scope: documents): to fill in the copies of your template. RowDocs only opens the template you chose and the documents it created; it does not browse or read your other documents.
• Google Slides (scope: presentations): to fill in copies of a Slides template, e.g. certificates. RowDocs only opens the template you chose and the decks it created; it does not browse or read your other presentations.
• Why Google's permission screen sounds broader. To fill in a Doc or Slides copy, Apps Script needs Google's Docs and Slides permissions, and Google words those as "see, edit, create and delete all your Google Docs" (or presentations). There is no narrower version of them. RowDocs uses them only on the template you picked and the files it made, as described above.
• Sending email as you (scope: script.send_mail): only when you turn on emailing, to the recipients in your sheet. RowDocs cannot read your mailbox.
• Form-submit triggers and the add-on sidebar (scopes: script.scriptapp, script.container.ui): to run automatically and show the setup panel.
• Your email address (scope: userinfo.email): to email you an alert if some rows fail to merge.
• Outside requests (scope: script.external_request): only for the Pro license check below.

All of this runs inside Google's Apps Script in your own account. Your sheet contents, templates and documents are not sent to our servers, and we do not store, sell, or use them for advertising or to train AI models.

RowDocs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What reaches us

• Purchases. Payments are handled by Paddle.com, our Merchant of Record, under its own privacy policy. We receive your email, country and order details so we can provide Pro and support.
• License check. If you activate Pro, the add-on sends your order number to our license server about once a day to confirm the subscription is active. Nothing else is sent.
• Basic server logs. Our hosting provider (Cloudflare) may log IP address and requests for security and reliability, kept for a limited time.
• Launch sign-up. If you leave your email to hear when RowDocs can be installed, we keep that address (with the date and the page you signed up on) only to send you that one email. We delete the list after it goes out, and you can ask us to remove your address sooner.
• Emails you send us. If you contact support, we keep the conversation to help you.

Your rights

You may ask us to access, correct or delete personal data we hold about you by emailing [email protected]. We reply within 30 days. Uninstalling RowDocs removes its access to your Google account.

Changes

We will post any changes on this page and update the date above.