Privacy notice

Import Cleaner for Xero is a Google Workspace™ editor add-on for Google Sheets™, published by AppGarden. This notice sets out exactly which Google user data the add-on accesses, how it uses that data, who it is shared with, how it is protected, and how long it is kept and how to delete it. It is not affiliated with, endorsed by or sponsored by Xero Limited.

1. What Google user data the add-on accesses

The add-on accesses only the following Google user data, and nothing else:

• The contents of the one spreadsheet you have open, through the spreadsheets.currentonly scope: cell values, number formats, the header row, sheet (tab) names and which rows and columns are hidden, on the sheet you choose to scan. It cannot see any other spreadsheet or file in your Google Drive™.
• The spreadsheet's name, shown in the sidebar and in the report you can export.
• Apps Script™ user properties (storage tied to your Google account, for this add-on only): your licence record, your saved settings (date convention and direction per import type) and whether you have seen the welcome screen.
• Apps Script™ document properties (storage tied to the spreadsheet, for this add-on only): the list of Undo restore points for fixes you have applied.

The add-on does not access your name, email address, contacts, Gmail™, Calendar, Google Drive™ files other than the open spreadsheet, or any other Google service.

Scopes requested, and why

That is also why XE-08 (whether the range is already a native Sheets Table) is advice rather than an automatic fix: detecting it reliably would need broader access than this add-on asks for.

2. How the add-on uses Google user data

• Spreadsheet contents are read only when you run a scan, to check the sheet against Xero's export and import rules and show you what was found. They are written only when you click to apply a fix, and only to the cells and new columns the preview showed you.
• Restore points: before every fix, the add-on makes a hidden copy of the sheet inside the same spreadsheet (a tab named __xic_restore_…) so that Undo can put your data back. These copies never leave your spreadsheet.
• Report: if you export a report, it is written to a tab named “Import cleaner report” in the same spreadsheet. It is never uploaded anywhere.
• User properties are used to remember your licence, settings and the welcome-screen flag across spreadsheets.

All processing happens inside Google: in the add-on's sidebar in your browser and in Google Apps Script™ on your own account. Your spreadsheet content is never transmitted to any server AppGarden operates and never seen by anyone but you. The one exception is an error message, described under how data is protected: it can name the sheet involved, but never includes cell values.

This add-on's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the add-on's user-facing features described above. It is not used for advertising, is not sold, and is not used to develop, improve or train generalised or non-personalised AI or machine-learning models. No human reads it.

3. Who Google user data is shared with, transferred to or disclosed to

No one. AppGarden does not share, transfer, sell or disclose Google user data to any third party. Your spreadsheet content, spreadsheet name, sheet names and file identifiers are never sent outside Google.

The add-on's only network traffic is a licence check to AppGarden's licence server. It sends your licence key (if you have one), an anonymous install id generated by the add-on, and the host (“Google Sheets™”). Starting or checking the 30-day trial sends the same install id and host, with no key. None of these is Google user data, and no spreadsheet content is ever included. The only exceptions to “no one” would be where the law requires disclosure, and even then AppGarden holds no Google user data to disclose.

Paddle.com Market Limited is the merchant of record for purchases and handles payment, tax and refunds under its own privacy policy. Paddle receives what you enter at checkout; it receives no Google user data from the add-on.

4. How Google user data is secured and protected

• Least privilege. The add-on requests only spreadsheets.currentonly, so it can reach only the spreadsheet it is opened in, never the rest of your Drive.
• Data stays inside Google. Spreadsheet data is processed only within Google Sheets™, Google Apps Script™ and the sidebar in your browser. It is not stored on any AppGarden server, so there is no copy of it outside Google to leak.
• Google's own protection. Your spreadsheet, the hidden restore copies and the Apps Script™ properties are stored by Google, encrypted in transit and at rest, and protected by your Google account's access controls. User properties are readable only by this add-on running as you; document properties only by this add-on in that spreadsheet.
• Encrypted connections. The licence check uses HTTPS (TLS) only.
• Restricted access to licence records. AppGarden's licence server runs on Cloudflare's infrastructure, which encrypts stored data at rest. Only AppGarden can reach its records, through its own Cloudflare account, and they hold a licence key, an anonymous install id, the host and the tier — never Google user data. Payment keys are held as encrypted secrets on the server, never in the add-on's code.
• Error logs. If the add-on hits an error, Google records the error message in the add-on's own Google Cloud™ logs so faults can be fixed. A message can name the sheet involved, but never includes cell values. Only AppGarden can see these logs, Google deletes them automatically after its standard retention period, and they are never exported or shared.
• Safe exports. Every report field beginning =, +, - or @ is prefixed so it cannot run as a formula.
• No sensitive data collected. AppGarden holds no spreadsheet content, no Google account identifiers and no card details (Paddle handles payment).
• If something goes wrong. If AppGarden becomes aware of a security incident affecting any data it holds, it will notify affected users without undue delay, and the UK Information Commissioner's Office where the law requires it.

5. Retention and deletion of Google user data

• Spreadsheet contents read during a scan are held only in memory for as long as the sidebar is open, and are discarded when you close it. AppGarden retains none.
• Restore copies stay in your spreadsheet until you choose Keep changes (which deletes every hidden copy and restore point at once) or use Undo (which deletes the copy it restored from). You can also delete the __xic_restore_… tabs and the “Import cleaner report” tab yourself at any time.
• User properties (licence record, settings, welcome flag) are kept until you remove them. Uninstalling the add-on does not erase them, but they hold no spreadsheet content and nothing can read them unless you install the add-on again. You can remove the add-on's access at any time at myaccount.google.com/permissions, or email us and we will tell you how to clear them.
• AppGarden's licence server keeps your licence key, install id, host, tier and trial dates for as long as the licence or trial is in use, and for up to 12 months afterwards so a trial cannot be restarted. This is not Google user data. Email support@appgarden.co.uk to see or delete it; deletion requests are completed within 30 days.

Your rights

Email support@appgarden.co.uk to ask what is held against a licence key or install id, to correct it, or to have it deleted.

Changes to this notice

If this notice changes materially, the date below is updated and the change is described here.

Last updated: 24 September 2026.

Google, Google Sheets™ and Google Workspace™ are trademarks of Google LLC. Not affiliated with, endorsed by or sponsored by Xero Limited. Xero is a trademark of Xero Limited. Import Cleaner for Xero is not affiliated with or endorsed by Google.