Privacy policy
Last updated 15 September 2026
Storesheet moves product data between a spreadsheet you own and a Shopify store you own. This page says exactly what it touches, and what it never sees.
The short version. Storesheet has no servers and no database. Your catalog is never copied to us, because there is nowhere for us to copy it to. The add-on runs inside Google Apps Script, in your own Google account, and talks to your Shopify store directly.
The three permissions it asks for
| scope | what it allows |
|---|---|
| spreadsheets.currentonly | Read and write the one spreadsheet you have open. It cannot list, open or read any other file in your Google Drive. |
| script.external_request | Make outbound requests. Used to call the Shopify Admin API of the store you connected, and to check a licence key on the Pro plan. |
| script.container.ui | Show the menu item and the sidebar. |
When you authorise the add-on, Google's consent screen also lists the two standard
sign-in scopes, userinfo.email and userinfo.profile. Google uses them
to show you which account you are authorising. Storesheet does not read, store or transmit
your email address or profile through them; it does not ask for Drive access, Gmail,
contacts or calendar. That is the complete list.
How sensitive data is protected
Google classifies script.external_request and script.container.ui
as sensitive scopes. The sensitive data involved is your Shopify credentials and your product
catalog. This is how each is protected, described as the add-on actually works:
| safeguard | what Storesheet does |
|---|---|
| Encryption in transit | Every network request the add-on makes is HTTPS (TLS). The only destinations are
https://<your-store>.myshopify.com and, for licence checks,
https://api.lemonsqueezy.com. The store address is validated against the
pattern *.myshopify.com before any request is sent, so credentials cannot be
posted to an arbitrary host. |
| Encryption at rest | Credentials are stored with Google Apps Script's PropertiesService
(user properties) and catalog data with Google Sheets; both are held on Google
infrastructure and are encrypted at rest by Google. Storesheet keeps no copy anywhere else. |
| Access control | User properties are readable only by this add-on running as you, in your Google account. Other people you share the spreadsheet with cannot read them, other add-ons cannot read them, and the developer cannot read them — there is no server, no service account, no administrative console and no support tooling that could reach them. The spreadsheet itself is protected by the sharing settings of your Google account. |
| Credential handling | With the Client ID and Client secret you supply, the add-on obtains a short-lived Shopify access token (valid 24 hours) directly from Shopify, caches it in your user properties, and refreshes it before expiry. Secrets and tokens are never written into the spreadsheet, never included in the job log, never sent to any host other than your own store, and never printed to execution logs. |
| Minimum access | The add-on requests the current spreadsheet only, not your whole Drive. On the Shopify side it uses the product read and write permissions you granted to your own app, nothing broader. |
| No human access, no secondary use | No person other than you reads your credentials or catalog. Data obtained through Google APIs is not used for advertising, is never sold, and is not used to develop, improve or train any AI or machine-learning model, whether generalised or personalised. |
| Incident response | If we learn of a vulnerability in the add-on that could expose credentials or catalog data, we will publish a fixed version, describe the issue on this page and notify affected users by email within 72 hours of confirming it. |
What it stores, and where
Storesheet stores the connection details for the Shopify stores you add: the store
address, a label, and either a Client ID and Client secret pair or a legacy access token.
These are saved through Google's PropertiesService, in storage that belongs to
your Google account. They are not written into the spreadsheet file, which
is why sharing the spreadsheet does not share access to your store.
Inside your spreadsheet it also keeps three hidden sheets: a snapshot of the catalog as it was last pulled, a record of previous values so a push can be undone, and a job log. These are ordinary sheets in your own file. Delete them and they are gone.
The developer of Storesheet cannot read any of this. There is no administrative console, no back end, and no mechanism by which your credentials or catalog reach the developer.
What it sends, and to whom
| recipient | what is sent | why |
|---|---|---|
| Your Shopify store | Product and variant data, and your store credentials | To read your catalog and write the changes you asked for |
| Lemon Squeezy | Your licence key only — no catalog data, no spreadsheet content | To check that a Pro licence is valid, at most once a day |
Nothing else leaves your Google account. Storesheet contains no analytics, no telemetry, no crash reporting, no advertising identifiers and no third-party trackers.
Google user data — Limited Use
Storesheet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide the features described on this site; it is not transferred to any third party except as required to provide those features — that is, to your own Shopify store; it is never sold; it is never used for advertising; and no human reads it, other than you.
Retention and deletion
- Removing a store in the sidebar deletes its stored credentials and cached token immediately.
- Uninstalling the add-on removes the properties Storesheet saved in your Google account.
- The hidden sheets live in your spreadsheet; deleting the sheets, or the file, deletes them.
- Cached Shopify access tokens expire on their own within 24 hours and are deleted when the store is removed.
- Because the developer holds no copy of anything, there is nothing further to request deletion of. If you nevertheless want written confirmation, or help removing the stored properties, email hoangvhuan@gmail.com and we will respond within 7 days. You can also revoke the add-on's access to your Google account at any time from myaccount.google.com/connections.
Children
Storesheet is a business tool and is not directed at anyone under 16.
Changes to this policy
If this policy changes, the date at the top of the page changes with it, and any change that widens what Storesheet accesses will require you to grant permission again.