Sheets add-on privacy
TaxProsRated for Google Sheets: Privacy Note
Effective date: 2026-10-16
Status: DRAFT for Lena's live legal check. Rendered at /developers/sheets-addon/privacy.
This note explains how the TaxProsRated add-on for Google Sheets (the "add-on") handles data. It's run by Aurum Transfers Limited (trading as TaxProsRated), Jamaica. Our main Privacy Policy also applies. If they differ on the add-on, this note applies.
1. The short version
- The add-on only works with the cells you use it in.
- It sends our API only the jurisdictions and rate IDs you ask for, plus your API key.
- We don't store your sheet contents.
- We don't sell your data and don't use it for ads.
2. Google permissions (scopes) the add-on uses
| Permission | What it lets the add-on do | Why |
|---|---|---|
spreadsheets.currentonly |
Read and write cells in the spreadsheet you're using the add-on in, only when you run it | To read the jurisdiction and rate you ask for and write back the rate, source and as-of date |
script.external_request |
Connect to our API | To fetch rates from taxprosrated.com |
script.container.ui |
Show a sidebar in Sheets | To let you enter and save your API key |
The add-on doesn't ask for access to your other spreadsheets, Google Drive, Gmail, contacts or calendar.
Your API key is saved in your own Google user properties (Apps Script's per-user storage), so it's tied to your Google account and isn't visible to other users of the sheet. You can remove it from the sidebar at any time.
3. What the add-on sends to us
When you run a function such as =TPR_RATE("JM","GCT"), the add-on sends our API:
- the jurisdiction codes and rate IDs you requested (for example "JM" and "GCT") and an optional as-of date; and
- your API key, so we can apply your plan and limits.
It doesn't send cell contents outside the request, other sheet data, file names, or your Google account details.
Like any web request, our servers and our CDN (Cloudflare) see technical data such as the IP address of Google's servers and the time of the request. We use it for security, rate limits and billing, and keep server logs for up to 90 days. We keep a request count per API key for billing and limits.
4. What we don't do
- No sheet contents stored. We don't store, copy or log the contents of your spreadsheet.
- No sale. We don't sell or rent any data from the add-on.
- No ads. We don't use any data from the add-on for advertising, ad targeting or profiling.
- No AI training. We don't use it to train AI models.
5. Limited Use
TaxProsRated's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, we use Google user data only to provide and improve the add-on's user-facing features; we don't transfer it except as needed to provide those features, to comply with law, or as part of a merger or sale with notice to you; we don't use it for ads; and no person reads it unless you ask us to (for example for support), it's needed for security or to comply with law, or it's aggregated and anonymous for internal operations.
6. Who processes it
Our API runs on Vultr (hosting) behind Cloudflare (content delivery and security). Google runs Google Sheets and Apps Script under its own privacy policy.
7. Deletion and your rights
- To stop the add-on, remove it in Google Sheets (Extensions > Add-ons > Manage add-ons) and remove its access in your Google Account permissions.
- To delete your API key and the usage records tied to it, email privacy@taxprosrated.com. Billing records for paid plans are kept as our Privacy Policy describes (up to 7 years).
- Your other rights are described in our Privacy Policy §8. We reply within 30 days (45 days for US state requests).
Contact
privacy@taxprosrated.com · support@taxprosrated.com Postal address: Aurum Transfers Limited, c/o Ocho Rios Post Office, Ocho Rios, Saint Ann, Jamaica
— TaxProsRated / Aurum Transfers Limited