Privacy Policy

1. Summary in plain language

• Cloudista Uy! runs inside your own Google account. Reports are written directly to your Google Sheet.
• We do not sell your data, use it for advertising, or train AI/ML models with it.
• We do not store the contents of your spreadsheets or the rows the add-on writes on our servers.
• Authorization is per product configuration. You can revoke it at any time from your Google Account.
• We comply with the Google API Services User Data Policy, including the Limited Use requirements.

2. Scope of this policy

This policy applies to the Cloudista Uy! add-on for Google Workspace ("the add-on"), to the related sidebar interface inside Google Sheets, and to the informational website at the domain on which this page is published. It does not apply to third-party services you choose to authorize the add-on to access on your behalf, which are governed by their own terms and privacy policies.

3. What the add-on does

Cloudista Uy! is a productivity add-on that pulls reporting data from sources you configure (per product) and writes it into a new, timestamped tab inside the Google Sheet you have open. Each run creates a fresh tab so historical pulls are not overwritten. The add-on does not transmit the resulting tabs to Scalista or to any other party; the data stays in your spreadsheet, in your Google Drive, under your Workspace administrator's controls.

4. Categories of data we process

We try to process as little data as possible. The categories below describe everything the add-on may touch.

4.1 Account & identity data

• Your Google account email address (used to identify your installation and license).
• Your Google Workspace domain (for organization-level licensing, if applicable).
• The display name and locale exposed by Google during the OAuth consent.

4.2 Configuration data

• The products you set up inside the add-on (a label such as "Product A", the channels you enabled for that product, and the columns you chose).
• Credentials, tokens or API keys you enter for the upstream sources you want the add-on to read from. These are stored encrypted at rest and are scoped to your installation only.
• Schedule preferences (e.g. weekly run cadence, target sheet ID).

4.3 Spreadsheet content (transient)

When you trigger a run, the add-on reads only the cells it needs to identify the target sheet (e.g. the active spreadsheet ID and the existing tab list) and writes the new report tab. The numerical and textual content fetched from your upstream sources passes through the add-on in memory only, is written to your Sheet, and is not persisted on Scalista's servers. We do not keep copies of your reports.

4.4 Operational logs

• Run metadata: timestamp, product label, source channel name, success/failure, row count, and a short error message when something goes wrong.
• Limited technical data (IP address, user agent, request IDs) recorded by our infrastructure provider for security, abuse prevention and debugging.

Operational logs do not contain the contents of your reports.

4.5 Billing data

If you purchase a paid plan, billing details (company name, VAT ID, billing email, invoice records) are processed by our payment provider and stored as required by Austrian and EU bookkeeping law.

5. Google user data & Limited Use

The add-on's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data accessed from Google APIs is:

• Used only to provide and improve the user-facing features of Cloudista Uy! (writing report tabs into your Sheet);
• Not transferred to third parties except to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users;
• Not used for serving advertisements;
• Not read by humans, except (a) with your explicit consent for support, (b) for security purposes (such as investigating abuse), (c) to comply with applicable law, or (d) when the data has been aggregated and anonymized for internal operations;
• Not used to develop, improve or train generalized AI/ML models.

5.1 OAuth scopes

The add-on requests the narrowest set of OAuth scopes required to function. Typical scopes include:

• spreadsheets.currentonly — read and write only the spreadsheet that the add-on is opened in.
• script.container.ui — render the sidebar and menus inside Google Sheets.
• script.external_request — call the upstream sources you have configured.
• userinfo.email — identify your installation for licensing and support.

The add-on does not request access to your Drive at large, your Gmail, your Calendar, or your Contacts.

6. Legal bases for processing (GDPR)

We process personal data on the following bases under Article 6(1) GDPR:

• Performance of a contract (Art. 6(1)(b)) — to provide the add-on you have installed and to deliver report runs.
• Legitimate interests (Art. 6(1)(f)) — to keep the service secure, to debug failures, to prevent abuse, and to send essential service messages.
• Legal obligation (Art. 6(1)(c)) — to retain billing records as required by Austrian tax and commercial law.
• Consent (Art. 6(1)(a)) — where you explicitly opt in, e.g. for optional product communications.

7. How we share data

We do not sell personal data. We share data only with the limited set of processors required to operate the add-on, under written data processing agreements (Art. 28 GDPR):

Where data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses and, where applicable, supplementary technical measures.

8. Retention

• Configuration data: kept while your installation is active and deleted within 30 days of uninstallation.
• Operational logs: kept for up to 90 days, then deleted or aggregated.
• Spreadsheet content: not retained by Scalista. It lives only in your Google Sheet.
• Billing records: retained for 7 years as required by Austrian tax law (§ 132 BAO).

9. Security

We protect your data with industry-standard measures: TLS in transit, encryption at rest for credentials and configuration, least-privilege access for staff, scoped OAuth tokens, audit logging, and regular review of dependencies. The add-on never stores your Google password — authentication always happens through Google's own consent screen.

10. Your rights

Subject to GDPR and applicable Austrian law, you have the right to:

• access the personal data we hold about you (Art. 15);
• request rectification of inaccurate data (Art. 16);
• request erasure of your data (Art. 17);
• request restriction of processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on legitimate interests (Art. 21);
• withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, write to contact@scalista.com. You may also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at) or the supervisory authority where you reside.

11. How to revoke access or uninstall

1. In Google Sheets, open Extensions → Add-ons → Manage add-ons and remove Cloudista Uy!.
2. To revoke OAuth access entirely, visit myaccount.google.com/permissions and remove access for Cloudista Uy!.
3. To request deletion of any remaining configuration data on our side, email contact@scalista.com.

12. Children

Cloudista Uy! is a workplace tool and is not directed to children under 16. We do not knowingly collect data from children.

13. Cookies on this website

The informational website uses only essential cookies required to display the page and to remember legal-notice preferences. We do not use advertising or cross-site tracking cookies. The add-on itself runs inside Google Sheets and does not set cookies.

14. Changes to this policy

We may update this policy to reflect changes to the add-on or to the law. Material changes will be announced inside the add-on or by email at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.