Privacy Policy for IEP Insight

Last Updated: 12/06/25

1. Introduction

IEP Insight ("we", "our", or "us") is a Google Sheets™ add-on designed to assist educators in tracking and reporting student IEP goals. We prioritize the privacy and security of your data and, most importantly, your students' data. This Privacy Policy outlines how we handle information when you use our add-on.

2. Student Data (PII)

We do not collect, store, transmit, or have access to your students' Personally Identifiable Information (PII).

• Storage: All student names, goals, measurements, and notes are stored exclusively within your own Google Sheet™.

• Access: Our add-on script runs locally within your Google™ account context. We do not have a server that pulls or archives your student records.

• Ownership: You retain full ownership and control of all student data.

3. Information We Collect

To provide and secure the Service, we collect and process the following limited data:

• Google User Email: We access your email address (Session.getActiveUser().getEmail()) strictly to verify your identity against your purchased license key.

• License Information: We store your License Key and the Google Spreadsheet ID where the license is activated in our secure database. This is used solely to prevent unauthorized copying of the spreadsheet.

• Usage Data: We may track aggregate, anonymous usage statistics (e.g., "License verified") to monitor the health of the Service.

4. How We Use Your Information

We do not sell, trade, or otherwise transfer your Google User Data or Student Data to outside parties.

• License Verification: We share only your License Key and Product ID with Gumroad, our payment processor, strictly to validate your subscription status. We do not transmit your Google User Email or spreadsheet content to Gumroad. The validation process retrieves the purchaser email from Gumroad and compares it locally within the add-on to verify ownership. It is never stored on our database (which is reserved for license keys and Spreadsheet IDs exclusively).

• Service Functionality: We use the spreadsheets.currentonly scope to create tabs (Homepage, Logbook) and record data within your active spreadsheet. No other spreadsheet or files are accessed by our script.

• Legal Requirements: We may disclose your information only if required to do so by law or in the good-faith belief that such action is necessary to comply with state and federal laws or respond to a court order.

5. Third-Party Services

We utilize trusted third-party services to operate:

• Google Workspace™: The add-on is hosted on Google's infrastructure.

• Gumroad: We use Gumroad to process payments and verify license validity. Please review Gumroad’s privacy policy for details on how they handle payment information.

6. Data Security

We implement a variety of security measures to maintain the safety of your personal information.

• Encryption: All communication between the add-on, Google services, and our licensing database occurs over HTTPS (TLS/SSL), ensuring data is encrypted in transit.

• Local Processing: The add-on is designed to process student data locally within the Google Apps Script™ environment of your specific spreadsheet. This minimizes data exposure as student records never leave Google's secure infrastructure.

• Access Control: Our licensing database (Firestore) is secured with strict Identity and Access Management (IAM) rules. It is accessible only by the add-on's authenticated Service Account and does not accept public read/write requests. The database stores only anonymous license bindings (License Key + Spreadsheet ID) and no user PII.

7. Data Retention and Deletion

• Student Data: Since we do not store student data, we have no retention period for it. You control the retention of this data directly within your Google Sheet™. You may delete student rows or the entire spreadsheet at any time to permanently erase this data.

• License Data: We retain your License Key and associated Spreadsheet ID binding in our database for as long as your subscription is active to provide the Service.

• Deletion Requests: You may request the deletion of your license record from our database at any time by contacting support at SmartClassScripts@gmail.com. Upon request, we will delete your license binding record within 30 days. Please note that deleting this record will immediately revoke access to the add-on's features.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Your continued use of the Add-on after any changes indicates your acceptance of the new terms.

8. Contact Us

If you have questions about this policy, please contact us at: smartclassscripts@gmail.com