Privacy Policy for ScoreScribe Last Updated: 3/22/26
1. Introduction: ScoreScribe ("we", "our", or "us") is a Google Sheets™ add-on designed to assist special educators and school psychologists in generating clinical WIAT-4 narrative reports. We are educators and developers committed to protecting the privacy of teachers and students. This Privacy Policy explains what data we collect, how it is used, and how our architecture ensures compliance with federal student privacy laws (FERPA). We prioritize the privacy and security of your data and, most importantly, your students' data.
2. Student Data (PII): We do not collect, store, transmit, or have access to your students' Personally Identifiable Information (PII). ScoreScribe is designed with a strict "local processing" architecture. When you enter student data, test scores, or generate narrative reports, all processing happens locally within your secure Google Workspace™ environment.
No Student Data Leaves Your Account: We do not collect, transmit, store, or have access to any Student PII, including names, demographics, academic scores, or generated reports.
No Database of Records: Your student data remains entirely within your Google Sheet™ and downloaded documents. It is never sent to SmartClassScripts servers.
Storage: All student measurements and notes are stored exclusively within your own Google Sheet™.
Access: Our add-on script runs locally within your Google™ account context. We do not have a server that pulls or archives your student records.
Ownership: You retain full ownership and control of all student data.
3. Information We Collect (Data Accessed): To provide our service and manage the freemium licensing model, we access and collect the following limited information from the user (the educator installing the Add-on):
Google User Email & Profile: We access your email address strictly to verify your identity against your purchased license key and to track the number of free reports generated (up to the limit of 2).
License Status & Usage: We store your Gumroad license key and the Google Spreadsheet ID where the license is activated in our secure database. This is used solely to prevent unauthorized copying of the spreadsheet. This user data is securely stored in our Google Cloud Firestore™ database solely for the purpose of license verification and preventing system abuse.
Usage Data: We may track aggregate, anonymous usage statistics (e.g., "License verified") to monitor the health of the Service. We never sell your email address or usage data to third parties.
4. How We Use Your Information (Data Usage & Scopes): We do not sell, trade, or otherwise transfer your Google user data or student data to outside parties. Our application specifically utilizes the following Google OAuth Scopes to function:
spreadsheets.currentonly: Used to read the test scores you input and to create the "WIAT-IV Data" formatting tab within your active spreadsheet. No other spreadsheets or files are accessed by our script.
script.container.ui: Used to display the report generation menus, the license input prompt, and the final HTML report preview window over your spreadsheet.
script.external_request: Used strictly to securely ping the Gumroad API to validate if your license key is active. We do not transmit your Google User Email or spreadsheet content to Gumroad.
userinfo.email / userinfo.profile: Used to retrieve your email address locally within the add-on to ensure the active user matches the purchaser of the license key.
5. Third-Party Services (Data Sharing): We utilize trusted third-party services to operate. We only share information with third parties when strictly necessary for service functionality:
Google Workspace™: The add-on is hosted on Google's infrastructure.
Gumroad: We use Gumroad to process payments and verify license validity. We share only your license key and product ID with Gumroad to check your subscription status. Please review Gumroad’s privacy policy for details on how they handle payment information.
6. Data Security (Storage & Protection): We implement a variety of security measures to maintain the safety of your personal information.
Encryption: All communication between the add-on, Google services, and our licensing database occurs over HTTPS (TLS/SSL), ensuring data is encrypted in transit.
Local Processing: The add-on is designed to process student data locally within the Google Apps Script™ environment of your specific spreadsheet. This minimizes data exposure as student records never leave Google's secure infrastructure.
Access Control: Our licensing database (Firestore) is secured with strict Identity and Access Management (IAM) rules. It is accessible only by the add-on's authenticated Service Account and does not accept public read/write requests. The database stores only anonymous license bindings (license key + spreadsheet ID) and no student PII.
7. Data Retention and Deletion
Student Data: Since we do not store student data, we have no retention period for it. You control the retention of this data directly within your Google Sheet™. You may delete student rows or the entire spreadsheet at any time to permanently erase this data.
License Data: We retain your license key, Email, and associated spreadsheet ID binding in our database for as long as your subscription is active to provide the Service.
Deletion Requests: You may request the deletion of your license record and spreadsheet ID binding from our database at any time by contacting support at SmartClassScripts@gmail.com. Upon request, we will delete your records within 30 days. Please note that deleting this record will immediately revoke access to the add-on's premium features.
8. Changes to This Policy We may update this Privacy Policy from time to time. Your continued use of the Add-on after any changes indicates your acceptance of the new terms.
9. Contact Us If you have questions about this policy or wish to submit a data deletion request, please contact us at: smartclassscripts@gmail.com