This Privacy Policy describes how ProductImageSync ("the Service", "we", "us", "our") handles information when you install or use our Google Sheets add-on. ProductImageSync is operated by ProductImageSync Team. For any questions about this policy or to exercise the rights described below, contact us at hello@productimagesync.com.
1. Summary
ProductImageSync is a Google Sheets add-on that converts floating images from spreadsheet imports into proper in-cell images and Google Drive-hosted URLs. The add-on runs only when you explicitly start a job from the sidebar. We do not read your spreadsheets in the background, we do not access Google Drive files we did not create, and we do not sell, rent, or share your data with any advertiser or third-party marketer. This policy also covers analytics on our website; see “Website analytics and cookies” below.
2. Who we are
ProductImageSync is operated by ProductImageSync Team. The Service is delivered as a Google Workspace add-on backed by a private cloud worker hosted on Google Cloud Platform. All inquiries — privacy, support, data deletion, and legal — are handled through hello@productimagesync.com. We commit to responding to verifiable requests within thirty (30) days.
3. Information we access
When you install and use ProductImageSync, the add-on requests the following Google OAuth permissions ("scopes"):
3.1. Google Sheets, current document — spreadsheets.currentonly
Scope: https://www.googleapis.com/auth/spreadsheets.currentonly
We use this for everything the add-on writes, confined to the spreadsheet you have open: writing image URLs and =IMAGE formulas, and removing the original floating images after the new in-cell image is verified. This permission cannot touch any other spreadsheet on your account. We act only when you click "Run" inside the sidebar.
3.2. Google Drive (per-file access) — drive.file
Scope: https://www.googleapis.com/auth/drive.file
We use the per-file drive.file scope for two purposes, both limited to files you have created with the add-on or explicitly selected for it:
- (a) Exporting the active spreadsheet so the add-on can read the binary content of its embedded ("floating") images, which it then converts into in-cell images. The first time you run the add-on, the standard Google Picker appears so you can confirm which spreadsheet the add-on may access; the Picker selection places that one file into the add-on's
drive.filegrant, and the export reads only that file. Google Apps Script exposes no API to read a floating image's bytes in-session, so this export is the only supported path. - (b) Uploading the resulting product images into a folder the add-on creates in your own Google Drive, and producing the image URLs written back into the spreadsheet.
Under drive.file the add-on can see or modify only files it created or that you explicitly selected via the Picker — every other file in your Drive remains completely inaccessible. So that =IMAGE formulas can render inside cells and exported URLs can be used in external systems, the images the add-on uploads are shared with "anyone with the link can view" access. This means that anyone who obtains such a link can view that image. You can change or revoke this sharing at any time using the standard Google Drive sharing controls.
3.3. Sheets UI — script.container.ui
Scope: https://www.googleapis.com/auth/script.container.ui
This permission allows ProductImageSync to display the sidebar (Setup, Progress, Help, Feedback, and Settings sections) and validation dialogs inside the Google Sheets interface. Without it, the add-on cannot present its user interface.
3.4. External requests — script.external_request
Scope: https://www.googleapis.com/auth/script.external_request
This permission allows the add-on to send your job request to our private Cloud Run worker (hosted on Google Cloud, currently in the us-central1 region) and to poll for job status and results. No other external endpoints are contacted.
drive.file scope instead of broader Drive access, so the add-on can only see files it created on your behalf or files you explicitly selected via the Google Picker.
4. Information sent to our worker
For each job you start, the add-on transmits the following to our Cloud Run worker:
- A short-lived Google OAuth access token. The worker uses this token only for the Google API operations the job requires: exporting the active sheet to obtain its embedded floating images, fetching source images that require Google authentication, and uploading the resulting images to your Google Drive folder. The token is transmitted over HTTPS, is used only during the active job, is not stored persistently, is not written to our logs, and is discarded when the job completes or fails.
- The spreadsheet ID, sheet name, and target Drive folder ID.
- The list of image positions (cell anchors) and source image URLs for the current job.
Image content is processed transiently in memory by the worker only to complete the upload to your Google Drive folder. We do not persist image content in databases, object storage, or application logs.
5. Telemetry and pseudonymous usage data
5.1. Automated telemetry
ProductImageSync records automated operational events to Google Cloud Logging to monitor reliability and improve the Service. These events include: sidebar_opened, job_started, job_completed, job_failed, validation_warning_shown, validation_user_action, addon_installed, size_limit_exceeded, orphan_detected, orphan_user_action, and orphan_resumed. Each event is tagged with a randomly generated pseudonymous installation UUID. Automated telemetry does not include your name, email address, spreadsheet contents, product data, image bytes, or file names. The UUID alone does not identify you.
5.2. Feedback you submit
If you use the Feedback section of the add-on's sidebar, we receive the message text you write, an email address if you choose to provide one (this field is optional), and the name of the sheet you are working in at that moment. This is recorded as a user_feedback event in the same Google Cloud Logging system, and we use it only to understand and respond to your feedback. Free-text feedback may contain whatever information you choose to submit; we recommend that you do not include sensitive or confidential information in feedback messages.
5.3. Support requests
If you contact us and provide your installation UUID, we may use it only to locate and respond to your support or data-deletion request.
5.4. Sanitized product telemetry
We may retain sanitized product telemetry to analyze how the add-on is used and to improve its reliability and features. This telemetry is stored in Google BigQuery and is retained for ninety (90) days, after which it is deleted.
Sanitized product telemetry does not include your email address, spreadsheet names, spreadsheet IDs, sheet names, SKU values, Drive IDs, file IDs, image URLs, or any product content.
6. Website analytics and cookies
This section applies to our website, productimagesync.com, and is separate from the add-on data described above.
We use Google Tag Manager to manage measurement tags on the website and Google Analytics (GA4) to understand how visitors use the site, such as which pages are viewed. These tools may set cookies or similar identifiers in your browser.
Analytics cookies are used only after you consent, where consent is required. When you first visit the site, analytics storage is disabled by default (Google Consent Mode is set to denied). Google Analytics runs only if you choose “Accept analytics” in our cookie banner. If you reject, analytics stays disabled.
We store your consent choice in your browser so we can remember it on future visits. You can change or withdraw your choice at any time using the Cookie Preferences link in the footer of every page.
For information about how Google processes data collected through these services, see Google's Privacy Policy.
7. Data retention
- Job records (job status, item counts, error messages) are stored in our Firestore database (collection: pisync_jobs) for twenty-four (24) hours, then automatically deleted.
- Pseudonymous telemetry events are retained in Google Cloud Logging for thirty (30) days, then automatically deleted.
- Sanitized product telemetry used for analytics is stored in Google BigQuery and retained for ninety (90) days, then automatically deleted.
- Image content is not persisted on our servers. It is processed transiently in memory only to complete the upload to your Google Drive folder, where the images remain under your control.
8. Sharing of data
ProductImageSync does not sell, rent, lease, license, or otherwise share your data with any third party for advertising, marketing, or any other purpose. The sub-processors we rely on are all provided by Google LLC: Google Cloud, which provides the underlying compute, storage, and logging infrastructure that makes the Service work; and, on our website only, Google Analytics and Google Tag Manager, as described in the Website analytics and cookies section.
9. Limited Use compliance
ProductImageSync's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide, maintain, secure, troubleshoot, and improve the user-facing features of ProductImageSync.
- We do not use Google user data to develop, improve, or train generalized machine-learning or artificial-intelligence models.
- We do not use Google user data to serve advertisements.
- We do not allow humans to read Google user data unless we have your affirmative consent for a specific support case, it is required for security purposes (such as investigating abuse), or it is required by applicable law.
- We do not transfer Google user data to third parties except as necessary to provide or improve the Service, and only with appropriate confidentiality protections.
10. Your rights
Depending on where you live, applicable privacy laws (which may include the European General Data Protection Regulation or the California Consumer Privacy Act) may give you certain rights regarding your data. These may include the right to access, correct, or delete data, and the right to object to or restrict its processing.
Because the only data we hold about your use of the Service is pseudonymous telemetry, you can:
- request a copy of the telemetry data associated with your installation UUID;
- request deletion of that telemetry;
- stop further processing at any time by uninstalling the add-on and revoking permission at myaccount.google.com/permissions.
To exercise any of these rights, send an email to hello@productimagesync.com with the subject line "GDPR data request" and include your add-on installation UUID (open it in Sheets via Extensions → ProductImageSync → Open ProductImageSync, then see the Settings section in the sidebar).
11. Children's privacy
ProductImageSync is a business productivity tool intended for users of legal working age. The Service is not directed at children under sixteen (16), and we do not knowingly collect any data from children.
12. International data transfers
Our infrastructure runs in the us-central1 Google Cloud region (Iowa, United States). When you use ProductImageSync from outside the United States, the limited operational data described in Sections 4 and 5 is processed on United States servers. Where applicable, such international transfers are protected through Google Cloud's data processing terms and the safeguards described in this policy.
13. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this document reflects the most recent revision. Material changes will be announced inside the add-on's Help section before they take effect.
14. Contact
ProductImageSync Team
Email: hello@productimagesync.com
Website: productimagesync.com