Privacy notice

Seller Export Cleaner is a Google Workspace™ editor add-on for Google Sheets™, published by AppGarden. This notice sets out exactly which Google user data the add-on accesses, how it uses that data, who it is shared with, how it is protected, and how long it is kept and how to delete it. It is not affiliated with or endorsed by Etsy™, eBay™ or Vinted™.

1. What Google user data the add-on accesses

The add-on accesses only the following Google user data, and nothing else:

• The contents of the one spreadsheet you have open, through the spreadsheets.currentonly scope: cell values and sheet (tab) names, so it can write the ledger and its supporting tabs, re-parse its own hidden raw-data tabs on every rebuild, and detect a hand edit to the ledger before overwriting it. It cannot see or touch any other spreadsheet or file in your Google Drive™.
• Apps Script™ user properties (storage tied to your Google account, for this add-on only): your licence record — tier, key and an anonymous install id.
• Apps Script™ document properties (storage tied to the spreadsheet, for this add-on only): your saved settings and column mappings, and a fingerprint of the last ledger the add-on wrote, so it can tell when you have edited it.

Your Etsy, eBay and Vinted export files are not Google user data: you choose them yourself in the sidebar's file picker (an ordinary <input type=file>), so the add-on never needs Drive access to find them, and they are read only by the sidebar in your browser. They can contain your buyers' names, usernames, postal addresses, email addresses and phone numbers; see how they are used for how those are handled. The add-on does not access your Google name, your email address, Gmail™, Calendar, Drive files other than the open spreadsheet, or any other Google service. It never asks for your Etsy, eBay or Vinted password and never signs in to or connects to any of them.

Scopes requested, and why

The add-on does not request Drive-wide access, Gmail™ access, access to any other Google service, or access to any Etsy, eBay or Vinted account.

2. How the add-on uses Google user data

• Spreadsheet contents are read and written only when you build or rebuild the ledger, to produce the Sales ledger, Shop costs, Payouts, Import log and, on Pro, Tax year summary tabs, and to re-attach your own Cost, Notes and other columns by Sale ID.
• Buyers' details from your export files are left out of every output tab by default. You can choose to keep the buyer's username in the ledger; addresses, email addresses and phone numbers are never copied into it, whatever you choose. So the ledger can be rebuilt when you add next month's files, the rows of each file (which can include buyer details) are kept as they came in hidden tabs in the same spreadsheet, named sec_raw_1, sec_raw_2 and so on. Hidden is not private: anyone who can open the spreadsheet can unhide them. Remove raw data in the sidebar deletes them at any time, free in every tier; the ledger you have already built stays. Buyer details never reach AppGarden; you remain responsible for them under UK GDPR, as you already are for the files the platforms give you.
• Apps Script™ user properties are used to remember your licence across spreadsheets.
• Apps Script™ document properties are used to remember your settings and column mappings, and to detect a hand edit to the ledger before a rebuild would overwrite it.
• Export CSV (Pro) copies the ledger to your clipboard so you can paste it into a file for your accountant. Where it goes from there is up to you; the add-on sends it nowhere.

All processing happens inside Google: in the add-on's sidebar in your browser and in Google Apps Script™ on your own account. Your spreadsheet content and export files are never transmitted to any server AppGarden operates and never seen by anyone but you and the people you share the spreadsheet with. The one exception is an error message, described under how data is protected: it can name a tab or a column heading, but never includes sales rows or buyer details.

This add-on's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the add-on's user-facing features described above, and only with your knowledge and action — choosing files and building the ledger. It is not used for advertising, is not sold or rented, and is not used to develop, improve or train generalised or non-personalised AI or machine-learning models. No human reads it.

3. Who Google user data is shared with, transferred to or disclosed to

No one. AppGarden does not share, transfer, sell or disclose Google user data to any third party, and none of it is transferred to any third-party AI service. Your spreadsheet content, sheet names and export files are never sent outside Google.

The add-on's only network traffic is to AppGarden's licence server, and only when you activate or refresh a Pro licence: your licence key, an anonymous install id generated in your browser, and the host (“sheets”); a refresh also sends the activation id the server issued. None of these is Google user data, and no sales rows, buyer details, file names or spreadsheet content are ever included. The Free tier makes no network request at all. The only exceptions to “no one” would be where the law requires disclosure, and even then AppGarden holds no Google user data to disclose.

Paddle.com Market Limited is the merchant of record for purchases and handles payment, tax and refunds under its own privacy policy. Paddle receives what you enter at checkout; it receives no Google user data from the add-on.

4. How Google user data is secured and protected

• Least privilege. The add-on requests only the two scopes listed above. It can reach the one spreadsheet you have open and nothing else in your Google account — not your Drive, your email or any other file.
• Data stays inside Google. Your spreadsheet content and export files are processed only by the sidebar in your browser, which runs inside Google's HtmlService sandbox, and by the add-on's Apps Script™ code, which runs as you on Google's servers. None of it is stored on any AppGarden server, so there is no copy of it outside Google to leak.
• No third-party code. The sidebar loads no external scripts, fonts, analytics or trackers. Everything it runs is bundled into the add-on.
• Google's own protection. Your spreadsheet, its hidden raw-data tabs and the Apps Script™ properties are stored by Google, encrypted in transit and at rest, and protected by your Google account's access controls. User properties are readable only by this add-on running as you; document properties only by this add-on in that spreadsheet.
• Encrypted connections. The licence check is the only request the add-on makes outside Google, and it uses HTTPS (TLS) only.
• Restricted access to licence records. AppGarden's licence server runs on Cloudflare's infrastructure, which encrypts stored data at rest. Only AppGarden can reach its records, through its own Cloudflare account, and they hold a licence key, an anonymous install id, the host and the tier — never Google user data. Payment and signing keys are held as encrypted secrets on the server, never in the add-on's code.
• Error logs. If the add-on hits an error, Google records the error message in the add-on's own Google Cloud™ logs so faults can be fixed. A message can name a tab or a column heading, but never includes sales rows or buyer details. Only AppGarden can see these logs, Google deletes them automatically after its standard retention period, and they are never exported or shared.
• No sensitive data collected. AppGarden holds no spreadsheet content, no buyer details, no Google account identifiers and no card details (Paddle handles payment).
• If something goes wrong. If AppGarden becomes aware of a security incident affecting any data it holds, it will notify affected users without undue delay, and the UK Information Commissioner's Office where the law requires it.

5. Retention and deletion of Google user data

• Output tabs (Sales ledger, Shop costs, Payouts, Import log and, on Pro, Tax year summary) and hidden raw-data tabs stay in your spreadsheet until you remove them. Remove raw data deletes the hidden raw tabs; Remove add-on tabs deletes every tab the add-on made. Both are free in every tier, and neither is ever gated. Deleting the spreadsheet deletes everything.
• Document properties (settings, column mappings, the ledger fingerprint) are deleted along with the tabs they describe, or when you delete the spreadsheet.
• User properties (the licence record) are kept until you remove them. Uninstalling the add-on does not erase them, but they hold no spreadsheet content and nothing can read them unless you install the add-on again. You can remove the add-on's access at any time at myaccount.google.com/permissions, or email us and we will tell you how to clear them.
• AppGarden's licence server keeps your licence key, install id, host and tier for as long as the licence is in use. This is not Google user data. Email support@appgarden.co.uk to see or delete it; deletion requests are completed within 30 days.

Your rights

Email support@appgarden.co.uk to ask what is held against a licence key or install id, to correct it, or to have it deleted.

Changes to this notice

If this notice changes materially, the date below is updated and the change is described here. Continuing to use the add-on after a change means you accept the update.

Last updated: 25 September 2026.

Google, Google Sheets™ and Google Workspace™ are trademarks of Google LLC. Etsy™ is a trademark of Etsy, Inc., eBay™ of eBay Inc. and Vinted™ of Vinted, UAB. Depop™, Shopify™ and Xero™ are trademarks of their respective owners. They are named only to say which files the add-on reads or works with. Seller Export Cleaner is not affiliated with or endorsed by Google, Etsy, eBay or Vinted.