Privacy & data handling
Last updated: August 2026
The short version
NP Data Tools builds Google Sheets add-ons for nonprofit data work. Version 1 of every tool runs entirely in the end user's Google account via Google Apps Script. We do not operate a server that stores or processes your spreadsheet row data, and we do not send your sheet contents to third-party AI services.
What we can see
When you install an add-on, it can read and write cells only in the spreadsheet where you install it, limited to the OAuth scopes listed in the Google Workspace Marketplace listing for that tool.
| Scope | Purpose |
|---|---|
https://www.googleapis.com/auth/spreadsheets.currentonly | Read and write the spreadsheet where the add-on is installed |
https://www.googleapis.com/auth/script.container.ui | Display the add-on sidebar and dialogs inside Google Sheets |
Typical access includes:
- Rows and columns you choose to process (donor names, grant metrics, addresses, etc.)
- Hidden tabs created by the add-on (audit logs, job state, candidate matches)
- Document properties (column mappings, license tier, preferences)
This data stays in your Google account. We do not receive a copy of your sheet contents.
What we do with your data
- Run the workflow you requested (scan, validate, generate reports, redact, etc.) inside your spreadsheet
- Write outputs and audit trails to tabs in your file so you can review and undo
- Respond to support requests you initiate
We do not use your data to train AI models or sell data to third parties.
What we may collect outside your sheet
- Support email — if you contact us directly
- License / purchase metadata — product and plan identifiers from Stripe checkout (never spreadsheet cell contents)
We do not collect analytics on your donor, grant, or mailing-list data contents.
Third-party services
| Service | Role |
|---|---|
| Google Apps Script / Google Sheets | Hosts and executes add-ons in your account |
| Google OAuth | Authenticates your Google account with scoped permissions |
| Stripe | Processes payments; receives product/plan metadata only — not sheet data |
| Google Workspace Marketplace | Subscription billing and license status for Marketplace purchases |
No third-party AI services receive your spreadsheet contents for processing. Address Deliverability may use a Google Maps API key you provide (BYOK) for enhanced validation — that key stays in your script properties. PII Redactor uses on-device pattern detection in Apps Script; row data is not sent to external inference services.
Per-tool notes
Grant Reporting
Reads Master Data and Funder Config tabs; merges placeholders into Google Doc templates you configure. Generates output Docs or copy-ready portal text in your Drive. Audit log stays in a hidden spreadsheet tab.
Donor Dedupe
Reads donor rows you map; writes match candidates to _DedupeCandidates, job state to_DedupeJob, and merge/link snapshots to _DedupeAudit. PII pre-scan blocks scans when likely SSN or credit card patterns are detected. Never auto-merges — every action requires your confirmation.
Schema Mapper
Processes import rows in-memory in the sidebar. Does not persist row data after a run. Stores license tier and custom schemas (Pro) in document properties only.
Address Deliverability
Reads address columns you map; writes validation results to your sheet. Optional BYOK Maps key for standardization — configured by you, not shared with us.
PII Redactor
Scans and redacts patterns in the spreadsheet you run it on. Detection runs on-device in Google Apps Script — cell contents are not sent to external AI inference services. Designed for pre-share scrubbing — work on a copy if you need to preserve originals.
Data retention
Data remains in your spreadsheet until you delete rows, hidden sheets, or the entire file. Uninstalling an add-on does not automatically delete hidden audit or output tabs.
Your control
- Revoke access anytime via Google Account → Security → Third-party access
- Delete hidden add-on tabs to remove artifacts
- Export or delete the spreadsheet to remove all data
Children's privacy
These tools are intended for nonprofit administration, not for collecting information from children under 13.
Changes
We may update this policy before or after Marketplace launch. Material changes will be reflected in the effective date above and in Marketplace listings.
Contact
NP Data Tools
support@npdatatools.com
This page is a plain-language summary for nonprofit staff and IT reviewers. It is not legal advice — have qualified counsel review before Marketplace submission.