This Privacy Policy explains how Mail Merge (the “App”), published by Stratvert Media, handles your data when you use it as a Google Workspace add-on.
Plain-English Summary
Mail Merge runs on Google’s servers and in your browser, using the Google account that opens its compose window. It reads an authorized spreadsheet to personalize and send emails through that account’s Gmail. We don’t run servers of our own for Mail Merge, and we don’t sell your data or share it with advertisers. The details are below.
What the App Accesses
Mail Merge requests these Google permissions:
- Send email on your behalf (
gmail.send) — to send your merged emails and feedback you choose to submit. This permission does not allow reading your inbox. - Access files you authorize or that the App creates (
drive.file) — to read your selected spreadsheet, create an example sheet, and read authorized attachments. It permits creating or modifying authorized files, without granting access to all Drive files. Grants can remain between sessions. - Make external requests (
script.external_request) — to download authorized attachment metadata and contents through Google’s Drive API. Server-side download URLs usehttps://www.googleapis.com/; browser connections are described below. - Run as a Gmail add-on (
gmail.addons.execute) — for the sidebar launcher.
The App reads the first tab’s headers and rows through Google’s Sheets API when you connect a sheet, reopen the compose window, and send. This includes recipient addresses, merge values and attachment links. Your browser receives sheet data for preview; your subject, body and inline images go to Apps Script for sending. Google-native attachments are exported as PDFs.
What the App Stores
- Google-hosted per-user settings: the connected sheet’s ID and name, plus sent/failed counts and a timestamp. The summary has no names or addresses, but the sheet name may identify people. A new connection or completed merge replaces the corresponding setting. These settings have no App-set expiry or current button to clear them.
- In your browser: up to five recent editor text colors in browser storage. You can remove these through your browser’s site-data controls.
Sheet rows, drafts and file metadata are held temporarily during use. The current version does not save a separate archive or drafts between sessions. Older saved drafts, if present, are removed when a failed sheet connection is cleared. Sent messages and files can remain in Gmail and recipient mail systems.
What Can Reach Us
- Feedback you send. Your message is emailed from your account to
stevenstudioworks@gmail.com, showing your sender address and anything you include. The form does not automatically attach your sheet or draft. Feedback remains in our inbox unless deleted. - Error reports. Google can log unhandled server errors in the App’s Google Cloud project. Developers with project access can view messages, stack traces and execution details, which can contain user-provided text. We use these reports only to fix problems. Retention follows the project’s logging settings. Many errors are handled and returned to your browser without explicit App logging.
Other Places Your Information Goes
- Google services. Your browser loads Google’s Picker library from
apis.google.com. Picker receives your authorization token and file-selection information; Google Drive provides attachment thumbnails. When available, the launcher includes your email in Google’s compose URL to select an account. Check the account if you are signed into several. - Your recipients. Gmail sends your personalized messages, inline images and attachments to the To, CC and BCC recipients specified in your sheet. Their mail services may be outside Google.
- Remote pictures and links. Remote pictures, including pasted ones, can load from their hosts during composition, preview and recipient display. Requests can reveal connection information and values in image URLs, including sheet values substituted by merge tags before sending. Following a link contacts its destination. Mail Merge does not add tracking pixels or analytics of its own.
- Branding. The add-on’s logo is hosted on GitHub, and its Kevin Stratvert link opens YouTube. These fixed URLs contain no spreadsheet values.
What We Do NOT Do
- We do not sell your data.
- We do not share your data with advertisers or data brokers.
- We do not use your data to train AI models or for advertising.
Sensitive Information
If your school or organization has rules for sensitive information, such as student records, check with your administrator before using any add-on with that data. A Google Workspace administrator can review the permissions listed above.
Google’s Limited Use Policy
Mail Merge’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking Access
You can revoke Mail Merge’s access at myaccount.google.com/connections. Revocation stops authorized access; it does not itself delete existing App settings, emails, files, feedback or logs.
Contact
Questions about this policy, retained data, or requests to delete data held by us: stevenstudioworks@gmail.com. Manage your original spreadsheets and sent messages through Google Drive and Gmail.
Changes
If this policy changes, the “Last updated” date above will be revised, and material changes will be noted on the Mail Merge What’s New page.
