Privacy notice
AI Readiness Scanner and Fixer is a Google Workspace™ editor add-on for Google Sheets™, published by AppGarden. This notice covers what it does with your data, and how it meets Google's API Services User Data Policy.
What never leaves Google
Your spreadsheet content — cell values, formulas, sheet names, everything the scan reads — is never transmitted anywhere. Every rule runs inside the sidebar, in your browser, reading and writing through the Google Sheets™ API within the one spreadsheet you have open. Nothing is copied to a server this add-on or AppGarden operates, logged, or seen by anyone but you.
The only network traffic this add-on makes
Activating or checking a licence sends two things to AppGarden's licence server: your licence key, and an anonymous install id generated on your machine. That is the entire network footprint of this add-on. No spreadsheet content, no cell values, no sheet names and no file identifiers are ever included in that request.
The licence record — the key, the install id and which tier it activates — is stored in your own Google Apps Script™ user properties, scoped to your account. AppGarden's licence server keeps a matching record so a key can be checked and revoked, but nothing about your spreadsheets.
Google API Services User Data Policy
This add-on's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Data accessed through the Sheets API is used only to run the scan and apply the fixes you request, inside your own browser session.
- No data from Google Workspace™ APIs is transferred to any third party.
- No data from Google Workspace™ APIs is sold, rented or otherwise monetised.
- No data from Google Workspace™ APIs is used for advertising, and none of it is used to train AI or machine-learning models, generalised or otherwise.
- Data is used only to provide or improve this add-on's own user-facing features, and only with your knowledge and action — running a scan or a fix.
Scopes this add-on requests, and why
spreadsheets.currentonly |
See, edit, create and delete only the spreadsheet it is used in. This is what lets the add-on read cell values and formatting to score a sheet, and write changes when you apply a fix. It cannot see or touch any other spreadsheet in your Drive. |
script.container.ui |
Display and run third-party web content in prompts and sidebars. This is what lets the add-on show its sidebar and dialogs at all. |
The add-on does not request Drive-wide access, Gmail™ access, or access to any other Google
service. That is also why STR-06 (whether the sheet is already a native Sheets
Table) is a manual check rather than an automatic one: detecting it reliably would need
broader Drive access than this add-on asks for.
Payment information
Paddle.com Market Limited is the merchant of record for all purchases and handles payment processing, tax and refunds. AppGarden never sees or stores your card details. Paddle's own privacy policy covers what it collects during checkout.
Google user data: accessed, used, stored, shared, deleted
- Accessed: the cell values, formulas, number formats, merges, sheet
names and row/column visibility of the one spreadsheet the add-on is opened in, through
the
spreadsheets.currentonlyscope. Nothing else in your Google account. - Used: only to score the sheet, explain the findings and, when you click a fix, change the cells that fix names. All of it runs in the sidebar in your browser.
- Stored: nowhere outside Google. Before a fix, the add-on saves a hidden copy of the tab inside the same spreadsheet so Undo can restore it; you remove those copies with Keep changes. Your licence key is kept in your Apps Script™ user properties.
- Shared: never. No Google user data is sent to AppGarden or to any third party, sold, used for advertising, or used to train AI models.
- Retained and deleted: AppGarden holds no Google user data, so there is nothing to retain. The restore copies stay in your spreadsheet until you keep the changes or delete them.
How Google user data is secured and protected
- It stays on Google's infrastructure. Spreadsheet data travels only between Google's servers and the add-on's sidebar in your browser, over Google's own encrypted (HTTPS/TLS) connections. The sidebar runs inside Google's Apps Script™ HtmlService sandbox. AppGarden operates no server that receives, processes or stores Google user data, so there is no copy of it outside Google to be breached.
- Least-privilege access. The add-on requests only the
spreadsheets.currentonlyscope, so it can reach the one spreadsheet you open it in and nothing else in your Drive or Google account. It runs only when you open it, and reads the sheet only when you start a scan or a fix. - Protected by your own Google permissions. The restore copies taken before a fix are hidden tabs inside the same spreadsheet, so they carry exactly the same sharing permissions and Google security as the spreadsheet itself: anyone who can open the spreadsheet can see them, and no one else can. Keep changes deletes them. The licence record is held in Apps Script™ user properties, which Google stores against your account and makes readable only to this add-on running as you.
- No third-party code in the sidebar. The sidebar loads no analytics, advertising, tracking or externally hosted scripts; all of its code ships with the add-on.
- The licence server is encrypted and holds no Google data. Licence checks go over HTTPS only. The server stores the licence key, install id and tier and nothing from your spreadsheets or Google account. Its payment and email credentials are held as encrypted secrets, never in source code, and administrative access is limited to AppGarden.
- If something goes wrong. If AppGarden becomes aware of a security incident affecting any user's data, it will notify the affected users, and Google where required, without undue delay and take steps to contain it.
What AppGarden itself stores
A licence key, an anonymous install id, and which tier that key activates. No name, no email address beyond what Paddle needs to process payment and send a receipt, and no spreadsheet content of any kind. When you buy, the licence server looks up your email address from Paddle once to send your key, through the email provider Resend; the address is not stored.
Your rights
Email support@appgarden.co.uk to ask what is held against a licence key, or to have it deleted. You can also revoke the add-on's access to your Google account at any time from myaccount.google.com/permissions.
Changes to this notice
If this notice changes materially, the date below is updated and the change is described here. Continuing to use the add-on after a change means you accept the update.
Last updated: 23 September 2026 — added how Google user data is secured and protected.
Google, Google Sheets™, Google Workspace™ and Gemini™ are trademarks of Google LLC. ChatGPT is a trademark of OpenAI; Copilot is a trademark of Microsoft Corporation. AI Readiness Scanner and Fixer is not affiliated with or endorsed by Google, OpenAI or Microsoft.