Numbrate Privacy Policy and Cookie Policy

Effective Date: January 28, 2026

Numbrate ("we," "us," or "our") operates www.numbrate.com, my.numbrate.com websites, the Numbrate API, and several Google Workspace extensions including the Sensitive Data Dedector for Google Sheets™ and Google Docs™, NUM2TEXT, CellEncrypt, TextEncrypt, CellArchiver, MobileRunner, Word Cloud Ultra for Google Docs™, and the Storywords suite (collectively, the "Services").

By using any of our Services, you agree to our Terms of Use, which incorporate this Privacy Policy. We may update this Privacy Policy at any time without notice.

This Privacy Policy complies with the Google API Services User Data Policy and the Google APIs Terms of Service. We are committed to transparency in how we access, use, store, and protect your data.

1. Data Accessed: What Google User Data We Access

Our Google Workspace add-ons request specific permissions to function. Below is a comprehensive list of the Google user data accessed by each service:

Sensitive Data Dedector (Google Sheets™ and Google Docs™)

Google Sheets Content: Read and write access to spreadsheet cells, ranges, and sheets to scan for sensitive data patterns (SSN, credit cards, phone numbers, email addresses, IBAN, etc.) and to create detection logs in a hidden sheet.
Google Docs Content: Read access to document text content to scan for sensitive data patterns, and write access to apply visual highlighting (yellow background) to detected sensitive data.
User Email Address: Access to your email address for license verification and to send email alerts when new sensitive data is detected (if enabled).
Script Properties: Access to store configuration settings, detection rules, trial installation date, license information, and detection fingerprints within your document's properties.
Triggers: Permission to create time-based triggers for scheduled scanning functionality.

NUM2TEXT (Google Sheets™)

Google Sheets Content: Read access to selected cells containing numbers, and write access to insert converted text results.
User Email Address: Access to your email address for license verification.
Script Properties: Access to store license information and user preferences.

CellEncrypt (Google Sheets™)

Google Sheets Content: Read and write access to selected cells for encryption and decryption operations.
User Email Address: Access to your email address for license verification.
Script Properties: Access to store encryption keys and configuration settings.

CellArchiver (Google Sheets™)

Google Sheets Content: Read and write access to copy and archive cell data within your spreadsheet.
User Email Address: Access to your email address for license verification.
Script Properties: Access to store archiving configurations.

MobileRunner (Google Sheets™)

Google Sheets Content: Access to execute user-defined macros and App Scripts.
User Email Address: Access to your email address for license verification.
Script Properties: Access to store macro execution settings and configurations.

TextEncrypt (Google Docs™)

Google Docs Content: Read and write access to selected text for encryption and decryption. Content is encrypted locally before storage.
User Email Address: Access to your email address for license verification.
Script Properties: Access to store encrypted data blobs and keys. We do NOT store your password.

Word Cloud Ultra (Google Docs™)

Google Docs Content: Read access to document text content to extract words for word cloud generation. This includes entire document, current page, or selected text based on your choice.
User Email Address: Access to your email address for license verification and trial management.
Script Properties: Access to store license information, trial installation date, and user preferences for word cloud settings.

2. Data Usage: How We Use Google User Data

We use the Google user data accessed by our applications solely for the following purposes:

Sensitive Data Dedector

Pattern Detection: Scan spreadsheet and document content using regular expression patterns to identify sensitive data types configured by you (SSN, credit cards, phone numbers, email addresses, IBAN, etc.).
Detection Logging (Sheets Only): Record detection events in a hidden sheet within your spreadsheet for reporting and analytics purposes.
Visual Highlighting (Docs Only): Apply yellow background highlighting to detected sensitive data in Google Docs for easy identification.
Smart Detection: Use fingerprinting technology to track previously detected items and prevent duplicate alerts.
Email Notifications: Send email alerts from your Google account when new sensitive data is detected (only if you enable this feature).
License Verification: Validate your license key by sending your email address to our license server (Buy Me a Coffee/Numbrate license server).
Trial Management: Track the installation date to manage the 90-day free trial period.

NUM2TEXT

Number Conversion: Convert selected numeric values into written words in multiple languages.
License Verification: Validate your license key using your email address.

CellEncrypt

Data Encryption/Decryption: Encrypt and decrypt selected cell content using your provided encryption keys.
License Verification: Validate your license key using your email address.

CellArchiver

Data Archiving: Copy and archive cell data within your spreadsheet for historical tracking.
License Verification: Validate your license key using your email address.

MobileRunner

Script Execution: Execute user-defined macros and App Scripts from mobile devices.
License Verification: Validate your license key using your email address.

TextEncrypt

Data Encryption: Encrypt selected text using your password.
Data Storage: Store encrypted text blobs safely within the document's properties.
License Verification: Validate your license key using your email address.

Word Cloud Ultra

Text Extraction: Read document text from entire document, current page, or selected text to analyze word frequency.
Word Frequency Analysis: Process extracted text locally within your browser to count word occurrences and filter common stopwords.
Word Cloud Generation: Create visual word cloud representations using canvas rendering entirely in your browser.
License Verification: Validate your license key using your email address.
Trial Management: Track the installation date to manage the 7-day free trial period.

3. Data Sharing: How We Share Google User Data

We do NOT share, sell, rent, or transfer your Google user data to any third parties, with the following limited exceptions:

License Verification

What is shared: Your email address only.
With whom: Our payment processor and license verification service (Buy Me a Coffee and Numbrate license server).
Purpose: To verify the validity of your license key and ensure you have authorized access to premium features.
Data transmitted: Only your email address and license key are transmitted. No spreadsheet or document content is ever shared.

Email Alerts (Sensitive Data Dedector Only)

What is shared: Email notifications containing detection summaries.
With whom: These emails are sent directly from your Google account using Google's MailApp service. We do not intercept, store, or have access to these emails.
Purpose: To notify you of newly detected sensitive data in your documents.

No Other Third-Party Sharing

We do not share your spreadsheet content, document content, detection logs, word cloud data, or any other Google user data with advertisers, analytics providers, data brokers, or any other third parties. All data processing occurs locally within your Google account using Google Apps Script and client-side browser processing.

4. Data Storage & Protection: How We Store and Protect Your Data

Local Storage Only

All spreadsheet and document content processing occurs entirely within your Google account. We do not store any of your Google Sheets or Google Docs content on our servers.

What We Store

Email Address: Stored on our license server for license verification purposes only.
License Keys: Stored on our license server to validate your subscription status.
Aggregated Usage Data: Non-personally-identifying data about add-on usage (e.g., installation counts, API call frequency) for service improvement. This data is anonymized and cannot be linked to individual users.

What We Do NOT Store

Spreadsheet or document content
Detected sensitive data
Detection logs or reports
Encryption keys or encrypted data
Archived cell data
Macro or script code
Email alert contents
Word cloud text or generated images
Word frequency analysis data

Security Measures

Encryption in Transit: All communications between our add-ons and our license server use HTTPS/TLS encryption.
Google's Security: Your spreadsheet and document data is protected by Google's industry-leading security infrastructure. We rely on Google Apps Script's secure execution environment.
Access Controls: Only authorized Numbrate personnel have access to our license server, which contains only email addresses and license keys (no document content).
No Unauthorized Access: We do not access your Google Sheets or Google Docs content outside of the explicit operations you initiate through our add-ons.

Limitations

While we implement commercially reasonable security measures, no online system can be 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

5. Data Retention & Deletion: How Long We Keep Your Data and How to Delete It

Data Retention Periods

Email Address & License Keys: Retained for as long as you have an active license or subscription. After your license expires or is cancelled, we retain this data for up to 12 months for customer support and renewal purposes, then permanently delete it.
Aggregated Usage Data: Retained indefinitely in anonymized form for service improvement. This data cannot be linked back to individual users.
Spreadsheet/Document Content: Never stored on our servers. All content remains in your Google account and is subject to Google's retention policies.
Detection Logs (Sheets Only): Stored in a hidden sheet within your spreadsheet. You have full control over this data and can delete it at any time by deleting the hidden sheet or uninstalling the add-on.

How to Request Data Deletion

You have the right to request deletion of your personal data at any time. Here's how:

Delete Data Stored in Your Google Account

Uninstall the Add-on: Remove the add-on from your Google Sheets or Google Docs. This will delete all Script Properties, triggers, and configurations stored in your document.
Delete Detection Logs (Sensitive Data Dedector): Manually delete the hidden "SDD_Logs" sheet from your spreadsheet, or use the "Clear All Logs" function in the add-on sidebar.
Revoke Permissions: Visit your Google Account Permissions page and revoke access for Numbrate add-ons.

Delete Data Stored on Our Servers

Email Request: Send an email to numbrate@gmail.com with the subject line "Data Deletion Request" and include the email address associated with your license.
Processing Time: We will process your request within 30 days and confirm deletion via email.
What Will Be Deleted: Your email address, license key, and any associated account information.
What Cannot Be Deleted: Anonymized, aggregated usage data that cannot be linked back to you personally.

GDPR Rights (EU Residents)

If you are a resident of the European Union, you have additional rights under GDPR, including:

Right to Access: Request a copy of all personal data we hold about you.
Right to Rectification: Request correction of inaccurate personal data.
Right to Erasure: Request deletion of your personal data (as described above).
Right to Restriction: Request limitation of processing of your personal data.
Right to Data Portability: Request a copy of your data in a machine-readable format.
Right to Object: Object to processing of your personal data for specific purposes.

To exercise any of these rights, contact us at numbrate@gmail.com.

6. Cookies and Tracking

We use cookies on our websites (www.numbrate.com and my.numbrate.com) to improve functionality and user experience. You can block or delete cookies in your browser settings without losing the core functionality of our add-ons. Our Google Workspace add-ons do not use cookies.

7. Product-Specific Information

Sensitive Data Dedector for Google Sheets™ and Google Docs™

Sensitive Data Dedector is designed to detect and protect sensitive information within your Google Sheets and Google Docs environments through real-time monitoring, scheduled scanning, and intelligent pattern matching.

Features by Platform

Google Sheets: Live detection, scheduled scans, detection logging, reports & analytics, cell comments, and email alerts for new detections.
Google Docs: Scheduled scans, visual highlighting (yellow background), and email alerts for new detections.
Both Platforms: Smart detection (no repeat alerts), custom rules, manual scanning, and background scheduled scanning.

Privacy Guarantee: Sensitive Data Dedector operates entirely within your Google Sheets and Google Docs environments. Your document data, including any detected sensitive information, is never transmitted to Numbrate servers or any third-party services. All detection, logging, and alerting happens locally within your Google account.

Word Cloud Ultra for Google Docs™

Word Cloud Ultra generates beautiful, customizable word clouds from your Google Docs text with premium features including custom shapes, color palettes, and fonts.

Key Features

Text Extraction: Extract text from entire document, current page, or selected text.
Word Cloud Generation: Create visual word clouds with 8 unique shapes, 6 color palettes, and 10+ premium fonts.
High-Resolution Export: Download word clouds as PNG images up to 3200x2400 pixels.
Custom Settings: Adjust word count (20-500), font sizes, orientation, and stopwords.

Privacy Guarantee: Word Cloud Ultra processes all text locally within your browser using client-side JavaScript. Your document text is never transmitted to Numbrate servers or any third-party services. Text extraction, word frequency analysis, and word cloud rendering all happen entirely in your Google Docs environment and browser. Only your email address is sent to our license server for verification purposes.

NUM2TEXT Google Sheets™ Add-on

Processes only the data you select for conversion. No spreadsheet data is stored or shared beyond the active session. All processing occurs locally within your Google Sheets environment.

CellEncrypt Google Sheets™ Add-on

Encryption happens entirely inside your Google Sheets environment. No spreadsheet content is sent to our servers. Encryption keys are stored in your document's Script Properties and never leave your Google account.

CellArchiver Google Sheets™ Add-on

All data copying and archiving operations occur entirely within your Google Sheets environment using Google Apps Script. No data is transmitted to external servers.

MobileRunner Google Sheets™ Add-on

Script execution settings and configurations are stored in Script Properties tied to your spreadsheet. No script code is sent to our servers. All macro execution happens within your Google Sheets environment.

TextEncrypt Google Docs™ Add-on

Uses password-based encryption (PBKDF2). All encryption and decryption happens locally within Google Docs. Your password is never stored or transmitted. Encrypted data is stored inside the document's Script Properties.

Storywords Products

Voice-based storytelling uses the Chrome Web Speech API for local processing. No audio is recorded or stored by Numbrate. All processing occurs in your browser.

8. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at numbrate@gmail.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically. Continued use of our Services after changes constitutes acceptance of the updated policy.

10. Governing Law

This Privacy Policy is governed by Swiss law. Any disputes arising from this policy shall be settled in Swiss courts.

11. Contact Us

For privacy-related questions, data deletion requests, or to exercise your GDPR rights, please contact us at:

Email: numbrate@gmail.com

Subject Line for Data Requests: "Data Deletion Request" or "GDPR Rights Request"