Privacy Policy

1. Introduction

This Privacy Policy describes how Codoha Inc. ("we", "us", or "our") collects, uses, and handles information when you use API Import for Google Sheets™ (the "Add-on") and our associated website at apiimport.com (the "Site").

By installing or using the Add-on, or by accessing the Site, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2a. Google Account Information

When you install and authorize the Add-on through Google Workspace™, Google provides us with your email address and basic profile information. We use this information to identify your account, deliver the service, manage sessions between the Add-on and our backend, and send transactional communications (e.g. service or security notices). We do not store your Google account password or Google account credentials on our servers.

2b. Google Sheets™ and Add-on Data

The Add-on can read from and write to only the Google Sheets™ spreadsheet where you use it. This access is used to understand the active sheet context, preview imported API results, and write selected results into your sheet. We do not copy imported spreadsheet rows into a separate API Import database.

2c. API Credentials You Provide

To fetch data from third-party APIs, you may enter API keys, tokens, or other credentials into the Add-on. These are safely stored within the Google Workspace™ ecosystem, not on our servers. We do not have access to credentials you store this way.

2d. Natural Language Prompts

When you use the AI-powered prompt feature, the text of your prompt is sent to an AI language model provider (currently Google Gemini™ API) to translate your plain-English instruction into an API request. Do not enter sensitive, personal, or confidential information in your prompts.

2e. Usage Data

We collect standard server log data including IP addresses, browser type, pages visited on the Site, and session duration. This data is used to maintain service reliability and improve the product.

2f. Support Communications

If you contact us for support, we retain the contents of that communication (name, email address, and message body) in order to respond and resolve your issue.

3. Cookies and Tracking

We have designed our Site to function without cookies for tracking or analytics. We use browser localStorage only to remember your theme preference (light/dark mode). We do not use third-party advertising trackers.

4. How We Use Your Information

• To provide, operate, and maintain the Add-on and Site
• To respond to support requests
• To send essential service communications
• To detect and prevent abuse or unauthorized use
• To improve the product based on aggregated, anonymized usage patterns

We do not sell your personal information. We do not use your data for advertising, retargeting, personalized ads, or interest-based ads.

5. Google API Services User Data

API Import requests Google API access only to provide the Add-on features you use. The Google OAuth consent screen may request these permissions:

• Current Google Sheets™ spreadsheet — read and write access only to spreadsheets where you use the Add-on, so API Import can preview and write imported API results into your selected sheet.
• Google account email — access to your primary Google Account email address so we can identify your account and authorize backend requests made from the Add-on.
• Apps Script™ sidebar and dialogs — permission to display the Add-on sidebar and modal dialogs inside Google Sheets™.
• External requests — permission for the Add-on to call our backend and the source APIs you choose to connect.
• Scheduled workflows — permission to create, check, and remove time-based Apps Script™ triggers when you choose to schedule an import workflow.
• Google Search Console™ — read-only access to verified sites and search performance data so you can import metrics such as queries, pages, clicks, impressions, CTR, and average position into Google Sheets™.
• YouTube Data API™ — read-only access to YouTube™ channel and video data so you can import channel details, video metadata, statistics, search results, and recent videos into Google Sheets™.

Provider OAuth tokens are safely stored within the Google Workspace™ ecosystem for the connected Google user. Tokens are used only when you run or schedule an API import workflow that needs the connected provider.

We share Google user data only as needed to provide the service, when you direct us to process it, with infrastructure providers that operate the Add-on, to comply with law, to protect against abuse or security incidents, or with your explicit consent. We do not disclose Google user data to third parties for advertising or marketing.

API Import's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use Google user data for advertising, or use Google user data to train AI models. We do not allow humans to read Google user data unless you give explicit consent for support, it is necessary for security purposes, it is required by law, or the data is aggregated and anonymized for internal operations.

You can disconnect a Google API provider from inside the Add-on, revoke API Import's access from your Google Account permissions page, or request deletion of associated account data and stored provider tokens by contacting us at contact@codoha.com.

6. Third-Party Services

We share data with the following categories of third parties only as necessary to operate the service:

• Google LLC— the Add-on runs within Google Workspace™ and uses Google Apps Script™ infrastructure. Your use is also subject to Google's Privacy Policy.
• Google Gemini™ API — processes natural language prompts you submit. Google may use submitted content per their API usage policies.

7. Data Retention

We retain account and usage data for as long as your account is active or as needed to provide the service. Provider OAuth tokens and saved Add-on settings remain until you disconnect the provider, revoke access, delete the saved data, or ask us to delete associated account data. Support communications are retained for up to 2 years. You may request deletion of your data at any time by contacting us at the address below.

8. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact us at contact@codoha.com. We will respond within a reasonable timeframe.

9. Security

We protect information using HTTPS/TLS in transit, Google Workspace™ storage for Add-on credentials and provider tokens, limited internal access, and operational controls designed to prevent unauthorized access. Imported spreadsheet rows remain in your Google Sheets™ spreadsheet unless you choose to send data elsewhere through a workflow. However, no method of electronic transmission or storage is 100% secure. We encourage you to use strong, unique credentials for any third-party APIs you connect.

10. Children's Privacy

The Add-on and Site are not directed to children under the age of 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date. Continued use of the Add-on or Site after changes constitutes acceptance of the revised policy.

12. Contact

Questions about this Privacy Policy? Contact us at:

Codoha Inc.
contact@codoha.com