Privacy Policy for Sources Tracker for Google Slides™

Last Updated: November 21, 2025

Introduction

Sources Tracker for Google Slides™ ("the Add-on") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our add-on.

Developer Information

Developer: Vishnu Muthiah
Contact Email: VishnuAMuthiah@gmail.com

1. What Data We Collect

We collect minimal data to provide our service:

Email Address:

• We collect your Google account email address

• Purpose: To attribute comments you add within presentations

• Collection Method: Automatically obtained through Google's authentication

• Scope: Only your email address, no other personal information

That's it. We do not collect:

• Presentation content

• Browsing history

• Usage analytics

• Location data

• Device information

• Any other personal information

2. How We Use Your Data

Your email address is used exclusively for:

• Comment Attribution: When you add a comment to a slide or source, your email (specifically, the username portion before the @ symbol) is displayed as the comment author

• In-Document Display Only: This information only appears within the presentation you're working on

• No Other Purpose: We do not use your email for marketing, communication, analytics, or any other purpose

Example: If your email is VishnuAMuthiah@gmail.com, comments you add will show "VishnuAMuthiah" as the author.

3. Data Storage

All data stays within Google's infrastructure:

• Storage Method: Google Apps Script CacheService and PropertiesService

• Storage Location: Google's secure servers

• Document Scope: We use the @OnlyCurrentDoc annotation, which means the add-on can only access the specific presentation you're currently working on—not your other files

What We Store:

• Comments & Source Metadata: Stored in Document Properties (persists indefinitely within the document)

• Document Title Cache: Stored in Script Properties (persists indefinitely) and Script Cache (expires after 6 hours)

• Temporary Scan Data: Stored in Document Cache (expires after 30 days)

• Comment Backups: Stored in Document Properties (persists indefinitely as protection against data loss)

No External Storage: We do NOT store any data on external servers or databases
No Cloud Storage: We do NOT use any third-party cloud storage services
No Data Export: Your data never leaves Google's ecosystem

4. Data Retention

Automatic Deletion:

• Document title cache (Script Cache): 6 hours (automatic deletion)

• Temporary scan cache: 30 days (automatic deletion)

• Comments, sources, and metadata: Stored indefinitely in document properties until manually deleted

To Delete Your Data:

• Delete individual comments through the add-on interface

• Delete the presentation to remove all associated data

• Uninstall the add-on AND manually clear document properties (uninstalling alone does not remove stored data)

No Backup Copies: We do not create or maintain backup copies of your data outside of the automatic in-document backup system

5. Third-Party Sharing

We do NOT share your data with anyone:

• No third-party services

• No advertising networks

• No analytics companies

• No data brokers

• No partners or affiliates

• No government entities (except as required by law)

The only exception: We may disclose information if required by law, such as in response to a valid legal subpoena or court order.

6. Your Rights

You have complete control over your data:

Right to Access:

• All data we store is visible within your presentation (your comments)

• You can view all sources and comments at any time through the add-on sidebar

Right to Delete:

• Delete comments individually via the add-on interface. 

• Note: Uninstalling does not automatically remove stored data from document properties.

• Revoke permissions through Google Account settings at https://myaccount.google.com/permissions

Right to Revoke Access:

• You can revoke the add-on's permissions at any time

• Go to Google Account → Security → Third-party apps with account access

• Remove "Sources Tracker for Google Slides™"

Right to Portability:

• Export all your sources and comments using the "Generate Summary File" feature

• This creates a Google Sheets™ file with all your data that you can download

Right to Complain:

• If you have concerns about how we handle your data, contact us at VishnuAMuthiah@gmail.com

• You can also file a complaint with your local data protection authority

Google API Services User Data Policy Compliance

Sources Tracker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Our Compliance:

• We only request the minimum OAuth scopes necessary for functionality

• We do not use data for advertising or marketing purposes

• We do not share data with third parties for advertising or marketing

• We do not use data for creditworthiness or lending purposes

• All data handling is transparent and disclosed in this policy

OAuth Scopes and Permissions

The add-on requests these Google account permissions:

1. https://www.googleapis.com/auth/userinfo.email

• Purpose: To identify who added comments

• Usage: Displays your username on comments you create

• Data Access: Your email address only

2. https://www.googleapis.com/auth/presentations.currentonly

• Purpose: To read and analyze your presentation

• Usage: Scans slides for hyperlinks, embedded content, and sources

• Data Access: Content of the current presentation only

3. https://www.googleapis.com/auth/drive.readonly

• Purpose: To fetch document titles for linked files

• Usage: Displays friendly names for linked Google Drive™ documents (e.g., "Q3 Sales Report" instead of just a URL)

• Data Access: Read-only access to file metadata (titles only, not content)

4. https://www.googleapis.com/auth/drive.file

• Purpose: To create summary export files

• Usage: Generates Google Sheets™ reports when you use the "Generate Summary File" feature

• Data Access: Create and edit files created by this add-on only (not access to your other Drive files)

• Note: Summary files are created in your root Drive folder; you can manually move them as needed

5. https://www.googleapis.com/auth/spreadsheets

• Purpose: To create summary export files

• Usage: Generates Google Sheets™ reports when you use the "Generate Summary File" feature

• Data Access: Creates new spreadsheet files only

6. https://www.googleapis.com/auth/script.storage

• Purpose: Store add-on settings and data persistently

• Usage: Save comments, sources, cached titles, and scan fingerprints that persist across sessions

• Data Access: Read/write access to key-value storage specific to this add-on within the current document (PropertiesService data)

7. https://www.googleapis.com/auth/script.container.ui

• Purpose: To display the add-on interface

• Usage: Shows the sidebar with sources, comments, and controls

• Data Access: No data access - only displays UI elements

8. https://www.googleapis.com/auth/script.scriptapp

• Purpose: To execute add-on functions

• Usage: Runs the add-on's core functionality (scanning, commenting, exporting)

• Data Access: No additional data access - enables script execution

Important: All permissions are used only as described. We request the minimum scopes necessary for the add-on to function.

Data Security

We take security seriously:

• Google's Infrastructure: All data is stored using Google's secure CacheService and PropertiesService

• Encrypted Transit: All data transmission uses HTTPS encryption

• No Passwords: We never ask for or store your password

• Access Control: Only you can access your presentation data

• Regular Updates: We maintain the add-on with security best practices

Children's Privacy

Sources Tracker is not directed to children under the age of 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at VishnuAMuthiah@gmail.com and we will take steps to delete such information.

International Data Transfers

The add-on operates within Google's global infrastructure. Your data may be processed in any country where Google operates data centers. Google complies with applicable data protection laws, including:

• EU-US Data Privacy Framework

• UK-US Data Privacy Framework

• Swiss-US Data Privacy Framework

Cookies and Tracking

We do NOT use:

• Cookies

• Tracking pixels

• Analytics tools

• Advertising identifiers

• Any other tracking technologies

Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

1. Notify you via email within 72 hours of discovering the breach

2. Describe what data was affected

3. Explain steps we're taking to address the breach

4. Provide guidance on protecting yourself

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy

• Significant changes will be announced through the add-on interface

• Continued use of the add-on after changes constitutes acceptance

• You can always review the current policy at https://sites.google.com/view/sources-tracker-privacy-policy

Version History:

• v1.0 (November 21, 2025): Initial version

Your Consent

By using Sources Tracker for Google Slides™, you consent to this Privacy Policy and our handling of data as described herein.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

Developer: Vishnu Muthiah
Email: VishnuAMuthiah@gmail.com
Response Time: We aim to respond within 48 hours

You can contact us to:

• Ask questions about this policy

• Request access to your data

• Request deletion of your data

• Report privacy concerns

• Request policy clarification

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for processing your personal data is:

• Consent: You provide explicit consent when you install and authorize the add-on

• Legitimate Interest: Processing is necessary for the legitimate interest of providing the service you requested

• Contract Performance: Processing is necessary to perform the service contract between you and us

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how we use it

• Right to Delete: Request deletion of your personal information

• Right to Opt-Out: Opt-out of the "sale" of personal information (Note: We do NOT sell personal information)

• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at VishnuAMuthiah@gmail.com.

Additional Disclosures

Business Transfers: If Sources Tracker is acquired or merged with another entity, your data will be transferred to the new owner, who will continue to honor this Privacy Policy.

Legal Requirements: We may disclose data if required to:

• Comply with legal obligations

• Protect our rights or property

• Prevent fraud or abuse

• Protect the safety of users

No Selling of Data: We do NOT sell, rent, or lease your personal information to third parties under any circumstances.

Summary: We only collect your email address to attribute comments you create within presentations. Comments, sources, and metadata are stored in the document's properties using Google's secure infrastructure. Document titles are cached (6 hours in Script Cache, persistent in Script Properties) to improve performance. We never share your data with third parties, and all data stays within Google's ecosystem. You can delete individual comments through the add-on interface or export all your data using the "Generate Summary File" feature. Summary files are created in your root Drive folder for easy access. Questions? Email VishnuAMuthiah@gmail.com.

This Privacy Policy is effective as of November 21, 2025 and was last updated on November 21, 2025.