Privacy Policy

Last updated: 2026-11-07

LedgerLeaf (“the add-on”, “the service”) is operated by [Business name - Rob to fill in] (“we”, “us”), Canada. Contact: [support email - Rob to fill in].

In short: Your Shopify data stays in your Google spreadsheet and your Google account. The add-on fetches it directly from Shopify; it never passes through our servers. Our server stores only your email address and subscription status.

1. What the add-on does

LedgerLeaf is a Google Workspace add-on for Google Sheets. It reads data from a Shopify store you connect and writes it into the spreadsheet where you opened the add-on, and builds Canadian sales-tax and profit reports from that data.

2. Data we access and where it goes

Data	Where it is processed / stored	Sent to our server?
Shopify orders, line items, products, customers (including names, email and address fields Shopify returns), inventory	Fetched by Google Apps Script running in your Google account straight from Shopify’s API; written to your spreadsheet.	No
Shopify client ID, client secret and short-lived access token	Your Google account’s private add-on storage (User Properties). Not in the sheet.	No
Spreadsheet contents	Only the spreadsheet in which you open the add-on (Google permission “current document only”).	No
Your Google account email address	Sent over HTTPS to our licensing server together with your licence key to check your plan.	Yes
Subscription information (status, trial/billing period dates, Stripe customer and subscription IDs)	Our server database (SQLite), populated from Stripe webhooks.	Yes
Payment card details	Handled solely by Stripe. We never receive or store card numbers.	No

We do not receive, store, view or have access to your Shopify data, your customers’ personal information or your spreadsheet contents. If you contact support, we only see what you choose to send us.

3. Google user data and the Limited Use requirements

LedgerLeaf’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We use Google user data only to provide and improve the user-facing features of the add-on described here.
We do not transfer Google user data to others except as necessary to provide the service (for example, Stripe for billing), to comply with law, or as part of a merger or sale with notice to you.
We do not use Google user data for serving advertisements, and we do not sell it.
No humans read Google user data, because it never reaches us. Our server holds only your email address and subscription status.
We do not use Google user data to develop, improve or train generalized AI/ML models.

Google permissions requested

spreadsheets.currentonly — read and write the one spreadsheet where you use the add-on.
script.container.ui — show the sidebar and menu.
script.external_request — call Shopify’s API and our licensing check.
script.scriptapp — create the optional scheduled-sync trigger (Pro).
script.send_mail — email you (only you) if a scheduled sync fails.
userinfo.email — identify your licence.

We never request access to your wider Google Drive, other spreadsheets, Gmail contents or contacts.

4. How we use the information we hold

Your email and subscription status are used to: unlock Pro features, process billing through Stripe, send service messages about your subscription or support requests, and prevent fraud or abuse. We do not use them for advertising and do not sell them.

5. Service providers

Stripe — payment processing and subscription management (see stripe.com/privacy).
Hosting provider — runs the website and licensing server.
Google — hosts the add-on runtime and your spreadsheet; governed by your agreement with Google.
Shopify — the add-on contacts Shopify’s API directly using the credentials you provide.

6. Retention

We keep your email and subscription record while you have an active or recent subscription and for as long as needed for billing, tax and legal records (typically up to 7 years for invoices held by Stripe). Server logs contain no Shopify data and are rotated regularly. Your Shopify data remains in your spreadsheet until you delete it.

7. Deleting your data

Spreadsheet data: in the add-on choose Settings → Delete all synced data, or delete the tabs or the spreadsheet yourself.
Shopify credentials: Settings → Disconnect store deletes them from your Google account storage. You can also revoke or rotate the secret in the Shopify Dev Dashboard.
Add-on access: remove LedgerLeaf at myaccount.google.com/permissions.
Our records: email [support email - Rob to fill in] from your account email with the subject “Delete my data”. We cancel any active subscription and delete your email and subscription record from our database within 30 days, except billing records we must keep by law (held by Stripe).

8. Security

All traffic uses HTTPS. Shopify credentials are never sent to us. Licence keys are signed, and our server stores the minimum necessary. No system is perfectly secure; we will notify affected users and regulators as required by law if a breach affects personal information we hold.

9. Your merchant responsibilities

Customer information in your Shopify store belongs to you. When you copy it into a spreadsheet, you are responsible for protecting that sheet (sharing settings) and complying with privacy laws that apply to you (such as PIPEDA, Quebec’s Law 25 and Shopify’s protected customer data requirements).

10. Your rights (Canada)

Under Canadian privacy law you may request access to, correction of, or deletion of personal information we hold about you. Contact [support email - Rob to fill in]. We respond within 30 days.

11. Children

The service is for businesses and is not directed to children under 16.

12. Changes

If we change this policy we will update the date above and, for material changes, notify subscribers by email.

13. Contact

[Business name - Rob to fill in] — [support email - Rob to fill in]